Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
File:                     gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json)
Hash identifier:          syDp6FfJB++xvgPsN69W0qJY4tqykhipmZFd5XIs+5M=
Subject key identifier:   5C:7A:5F:B6:26:2C:5D:13:23:70:18:A4:06:37:27:BE:43:B4:7B:57
Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
Certificate issuer:       /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
Manifest number:          014B
Signing time:             Wed 25 Mar 2026 04:25:00 +0000
Manifest this update:     Wed 25 Mar 2026 04:25:00 +0000
Manifest next update:     Wed 01 Apr 2026 04:25:00 +0000
Files and hashes:         1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: 2zHnGHbEavZtHsxUO4aVMvkk++u03Dy3OZHSkQnGows=)
                          2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: A3r5oycefhtIGPh3bGr3xmf0SQaU01HwzyTzf26yGko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl
                          rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
        Validity
            Not Before: Mar 25 04:25:00 2026 GMT
            Not After : Apr  1 04:25:00 2026 GMT
        Subject: CN=69c3639c-2f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:05:34:c0:ab:cb:2f:2a:15:2b:f9:68:5e:
                    e5:f3:f9:58:62:aa:d6:40:6f:57:60:fa:02:81:b2:
                    ac:6e:fc:16:33:c2:33:28:63:7e:3b:9f:cc:e3:55:
                    5b:89:ce:f8:98:5e:1d:0d:34:db:fa:37:48:4a:35:
                    52:d8:b1:8c:a9:2e:3f:5c:1a:cf:af:07:7c:c7:78:
                    70:0c:3b:66:7f:ed:95:cf:4b:ac:c5:48:db:10:10:
                    1c:d0:7d:a4:1e:05:ce:da:0f:8d:cc:b3:ae:f9:0a:
                    db:88:76:7e:6b:2e:d6:82:69:bd:db:dd:14:29:38:
                    34:9c:aa:2b:03:50:9f:77:9d:1c:c0:1f:c6:ff:47:
                    2c:8d:2a:73:79:90:e3:ab:31:90:c2:97:49:d5:15:
                    7c:d3:32:f2:5f:68:48:b4:2d:b3:af:44:43:f2:73:
                    74:d4:bd:52:ab:fa:b3:8f:14:d9:5f:af:fa:6a:bd:
                    49:19:8f:9c:a8:b1:27:bd:81:db:c4:10:52:b5:ab:
                    ef:d2:80:57:0c:f4:31:58:14:cc:b5:55:ae:cc:de:
                    c6:b1:03:a0:13:6e:62:52:bb:be:c2:e2:0e:a8:04:
                    9f:f4:8f:54:ae:44:98:73:98:9f:e8:a0:d3:8d:a8:
                    11:bb:ef:9b:12:9f:ee:4d:bb:07:ba:9a:5c:72:80:
                    08:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7A:5F:B6:26:2C:5D:13:23:70:18:A4:06:37:27:BE:43:B4:7B:57
            X509v3 Authority Key Identifier:
                keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:89:d6:5c:2f:6b:cb:00:6c:9f:63:f9:6d:c4:e1:c1:00:20:
         e1:0c:de:1d:3e:8a:bf:bc:19:47:75:92:c8:37:7c:09:89:9e:
         7e:70:73:01:60:1b:38:91:c8:d2:72:02:e2:d5:a6:1d:3f:98:
         dd:6a:4b:b4:ad:f7:df:33:a5:25:9b:87:b3:6c:eb:1d:2c:c8:
         51:05:9a:ce:3b:63:42:2f:5c:c6:01:05:4a:2f:58:99:9f:a7:
         8c:03:11:9d:c6:e9:36:e1:fd:c0:97:e8:de:a1:91:1a:c7:68:
         a1:45:5d:db:62:c5:c3:6b:9f:c8:53:99:81:53:24:9c:f8:c8:
         ae:6d:ae:0c:e6:4e:4c:15:92:99:30:4a:9f:ab:1a:b8:fc:79:
         a4:44:81:2d:71:f7:63:f4:69:fd:0d:c7:0a:91:38:e7:95:d8:
         41:62:51:35:79:74:f0:21:d4:96:9e:57:7f:23:28:d6:8b:45:
         c9:44:87:49:de:9e:86:c1:7c:bb:83:be:6a:6e:4f:39:25:e5:
         ec:67:58:d5:e8:65:92:e5:10:3c:4a:aa:aa:11:37:29:5a:f9:
         f2:97:f3:de:2d:6e:27:0a:bc:51:4f:01:b7:66:13:01:2d:f2:
         75:ba:74:64:04:95:4b:d0:55:bf:69:90:c4:e7:f1:45:84:0b:
         8b:b2:d7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:59:05 2026 by rpki-client