Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File:                     GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier:          dKNO3QJwsHbK9ggdGFRNCRreCr1c4RvBqpgjzuH7FRc=
Subject key identifier:   4B:B6:13:59:C5:20:66:2D:BD:8E:07:21:A5:7A:C3:74:D6:30:CC:CE
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer:       /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial:       030E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number:          0307
Signing time:             Wed 25 Mar 2026 00:52:19 +0000
Manifest this update:     Wed 25 Mar 2026 00:52:18 +0000
Manifest next update:     Wed 01 Apr 2026 00:52:18 +0000
Files and hashes:         1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: wFAT/6ZpEgOtg/5ATQ7+bauIgWM9wD9QIon8D87+BVg=)
                          2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: /c+Xc/pq6gS3lH+dpF5Op6yyoSbbMrofTbdHTbTMtyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
                          rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
        Validity
            Not Before: Mar 25 00:52:18 2026 GMT
            Not After : Apr  1 00:52:18 2026 GMT
        Subject: CN=69c331c3-8265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:d2:ad:2b:5e:d7:ca:3d:93:e3:27:6c:17:
                    84:45:bb:ba:a2:b7:73:23:17:70:99:50:74:85:67:
                    15:dc:9f:6c:f4:9a:e0:c8:64:df:90:df:55:ec:20:
                    c6:d3:27:f9:d0:40:38:81:69:90:f5:20:15:25:89:
                    d4:a9:87:51:e3:45:ee:bb:dd:f5:c9:cf:2a:45:5b:
                    5d:f9:77:18:20:41:2e:1a:9d:07:f9:cb:b5:82:9d:
                    88:e4:77:e1:8c:97:35:f8:aa:c1:d4:26:72:4f:04:
                    fb:66:05:01:34:49:1a:07:85:2d:c3:0a:f7:25:58:
                    06:b6:75:0f:a5:63:24:91:03:8e:45:d9:3a:f2:8c:
                    b2:d1:11:6c:22:20:ed:4f:58:fa:d1:49:0b:d0:56:
                    7a:44:ba:d3:d5:50:e6:a5:33:d0:e7:5b:78:93:d7:
                    56:3d:88:05:aa:b1:38:0c:93:e0:60:ac:93:fa:df:
                    8d:a3:16:ec:29:08:7c:90:87:34:40:b8:b5:32:e1:
                    57:fd:ed:42:44:06:60:3b:d8:07:ed:69:21:14:f1:
                    fd:ae:af:ec:38:26:b1:a2:d2:7f:9c:73:bc:ed:25:
                    bf:67:b1:94:7f:ac:b5:5d:09:fb:06:1e:c8:66:16:
                    5e:57:2b:2e:9a:d0:2d:0e:64:6b:18:ee:c9:2c:41:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B6:13:59:C5:20:66:2D:BD:8E:07:21:A5:7A:C3:74:D6:30:CC:CE
            X509v3 Authority Key Identifier:
                keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:ff:26:30:a9:1d:53:5f:3f:fb:e4:ae:32:fe:dd:e4:77:
         b9:98:61:66:12:9b:51:60:d1:53:8d:87:a9:63:f8:ff:c1:86:
         68:8b:46:72:39:0a:cb:06:8b:7d:3b:7e:e2:ce:aa:d1:12:c4:
         4c:86:5e:de:4a:55:2f:e5:3f:30:b2:c5:5e:7f:30:eb:44:5b:
         fc:f5:e3:99:24:8b:bb:5a:34:dc:4c:b0:dc:ab:f0:30:93:91:
         48:11:a7:63:54:47:47:eb:75:62:07:fc:7b:e6:91:af:32:54:
         10:ef:06:9d:8a:f6:c2:3b:a6:8d:e1:d0:a1:22:d2:69:c7:20:
         fc:c9:83:37:86:c5:94:83:03:ff:3e:44:56:e3:e2:a9:10:1a:
         1f:5e:cb:17:ae:54:30:0f:e9:58:00:c3:6d:41:e4:a1:c4:61:
         85:df:eb:8f:b2:7b:c8:7e:49:82:25:0e:f7:90:70:52:6f:71:
         95:4e:6d:f2:90:f2:a8:63:55:d2:6f:70:93:42:04:67:f4:80:
         9f:87:62:75:3e:46:03:16:4f:6a:31:c7:78:11:90:7f:e1:33:
         06:3c:6a:c0:6f:41:69:41:df:f8:19:ae:a5:e1:19:35:85:60:
         2f:b1:5e:5d:96:e6:66:7a:59:ad:20:f0:01:6d:7f:2a:83:98:
         d5:33:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:51 2026 by rpki-client