Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File:                     GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier:          NVy+BtPkwbUjSHUDKTGwgcYEjJ8o5SyQ3/kFODtsPSc=
Subject key identifier:   5F:DF:4E:8E:CD:13:79:AC:4C:F0:56:3C:E4:B2:24:42:88:E4:81:9B
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer:       /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number:          2E
Signing time:             Wed 25 Mar 2026 07:54:19 +0000
Manifest this update:     Wed 25 Mar 2026 07:54:18 +0000
Manifest next update:     Wed 01 Apr 2026 07:54:18 +0000
Files and hashes:         1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: 84wPEc4wpCx/td1lfMG2f1pz+vO6jtTwFobEI+XHqOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
                          rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
        Validity
            Not Before: Mar 25 07:54:18 2026 GMT
            Not After : Apr  1 07:54:18 2026 GMT
        Subject: CN=69c394aa-faeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:ec:7c:61:c8:8c:47:4b:30:90:0e:44:ce:
                    24:db:b7:98:84:c4:61:85:c6:5d:d2:fc:8d:d9:57:
                    e9:48:25:c1:b4:0e:7a:f3:28:4e:87:f9:80:4a:d5:
                    c4:03:eb:bb:46:54:a6:b0:00:a5:ef:e9:be:d2:46:
                    36:89:5f:62:b7:65:61:d4:49:66:57:08:f4:2c:43:
                    8e:e0:9e:29:95:47:fd:07:94:70:de:b0:f1:9d:f2:
                    5f:8b:32:35:0b:1c:c5:0e:d4:3d:b5:db:6d:d4:d3:
                    5b:3c:94:e8:e8:83:02:84:e0:3b:80:71:ec:b2:cb:
                    7d:a0:ec:fd:08:1d:b1:4f:04:88:c6:0b:87:36:73:
                    d1:37:20:6d:9e:37:b9:25:ee:ed:9f:6f:ed:5a:4f:
                    8a:98:d4:8b:22:69:06:76:b6:0b:2d:20:6a:46:7a:
                    54:e2:6b:34:07:e5:3d:64:8c:5e:a6:86:bb:5a:53:
                    c4:a7:38:f9:b6:39:1f:be:4c:70:5e:12:da:e4:0c:
                    d1:0c:b9:af:04:9c:f4:9e:7b:f2:e7:dc:16:18:af:
                    82:77:f6:d7:b7:9a:e0:70:93:5b:ab:01:aa:4f:e0:
                    3b:1b:c1:fc:40:0a:2c:e6:4e:56:ea:d0:5b:5e:79:
                    f3:ac:87:1a:7f:37:85:85:84:96:01:53:a8:87:3a:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DF:4E:8E:CD:13:79:AC:4C:F0:56:3C:E4:B2:24:42:88:E4:81:9B
            X509v3 Authority Key Identifier:
                keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:89:a2:52:96:5c:78:09:b6:ad:f8:5b:e6:25:ab:25:ed:80:
         0e:f6:0f:3b:45:02:47:07:ea:b8:f3:8f:7a:c8:e9:12:9d:40:
         da:8e:25:d4:86:ad:03:fc:75:b3:a1:0d:09:e9:8f:14:43:30:
         19:c6:89:69:f6:24:f9:f3:27:68:fa:52:b3:f3:9f:36:f9:8e:
         5d:13:8a:4d:9d:63:8f:2e:93:96:ed:2c:43:27:90:71:ff:d2:
         c1:a0:75:e8:23:39:92:5b:10:4d:27:cb:1a:3b:26:24:5e:32:
         73:a0:95:b4:5c:b4:47:26:70:c4:4d:f5:8d:77:6c:bb:7f:c3:
         fb:fa:9c:f9:f6:fb:d4:a8:10:9a:5b:3a:f8:2e:74:d3:21:59:
         1f:68:87:25:0a:e8:4f:c0:46:f8:14:33:ff:39:c6:b1:31:3b:
         92:09:f8:db:1c:43:77:74:cf:fd:ea:ec:45:7f:34:01:62:f7:
         f8:e5:49:45:53:d1:18:8d:74:cc:dd:4f:46:ab:8f:2a:73:6a:
         8b:51:2a:42:ab:44:4a:e5:01:86:ae:6b:1b:dc:4c:f2:c5:72:
         39:ae:b7:05:88:25:d7:90:81:06:65:73:7e:5f:e4:83:5b:cf:
         f2:15:f1:6d:64:42:c5:4c:01:af:a7:3f:28:28:c2:94:1b:0d:
         6a:fb:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:58 2026 by rpki-client