Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File:                     gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier:          tk9UofUib9Mb3YVxYsu5XsvuCYlu/CICLeXmWCRKFIA=
Subject key identifier:   91:30:A3:60:EA:95:B5:FD:C3:5E:ED:B5:96:EE:01:D1:DB:E6:40:0B
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer:       /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number:          010C
Signing time:             Wed 25 Mar 2026 05:15:12 +0000
Manifest this update:     Wed 25 Mar 2026 05:15:11 +0000
Manifest next update:     Wed 01 Apr 2026 05:15:11 +0000
Files and hashes:         1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: Od1VG1Lkiv7ilgig69xNuru7IwzKeaQ+IFlSC8bMALs=)
                          2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: qRLyslYx22+qKxQxzfTyLV443rh4uNIFMoyDuD/9wGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
        Validity
            Not Before: Mar 25 05:15:11 2026 GMT
            Not After : Apr  1 05:15:11 2026 GMT
        Subject: CN=69c36f5f-5015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:bd:a7:08:a9:46:1d:55:e5:cd:23:48:11:
                    a5:17:2b:21:30:60:92:c8:3e:1a:3e:b1:b7:cb:0a:
                    32:f7:22:1d:e4:1b:69:e9:e7:bb:aa:0e:f9:1b:e2:
                    d9:09:bf:f0:d5:26:8b:24:79:7a:5e:c8:a9:c2:80:
                    cb:40:64:0f:21:39:09:08:1b:16:31:0a:bf:ec:de:
                    9a:a5:84:7b:23:18:bc:67:5c:80:d9:b8:f0:88:7c:
                    8b:19:39:8a:15:d2:4a:2c:ff:4a:ab:74:8f:5d:62:
                    45:75:e1:6f:ed:4d:97:bf:8e:13:71:28:ed:e0:bd:
                    e0:34:4e:bd:5e:7b:3a:36:c0:45:6b:89:0c:aa:26:
                    15:c5:db:45:20:34:65:e8:69:96:3f:4a:d5:e9:28:
                    e4:3c:6b:e2:a1:69:21:55:0b:df:ae:70:95:a6:3e:
                    d8:eb:1b:04:c5:fe:79:b9:da:e0:43:91:0e:83:12:
                    08:7a:cb:0a:34:90:ad:c8:e9:02:03:97:4e:81:c2:
                    55:76:27:ed:7b:e6:e3:82:e9:10:c4:27:cf:5c:8f:
                    1f:1a:a5:4d:58:ae:c4:c7:7e:42:b9:75:a8:2b:8c:
                    d4:bd:2a:83:cb:11:bd:d7:0d:bb:d7:54:76:65:00:
                    67:9c:fe:74:b8:64:54:b7:07:ac:b6:8a:bb:b4:fe:
                    0d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:30:A3:60:EA:95:B5:FD:C3:5E:ED:B5:96:EE:01:D1:DB:E6:40:0B
            X509v3 Authority Key Identifier:
                keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e6:14:e9:c8:1d:2c:04:6d:d6:8f:49:75:50:13:40:12:2f:
         49:f2:0e:bb:e9:b5:96:ce:61:8e:83:71:6f:95:5a:18:8c:e4:
         e7:00:9e:8a:12:26:3d:dc:07:d3:69:bf:72:93:dd:c7:5b:65:
         e5:fa:b1:b5:62:ed:5b:dc:b7:d1:10:75:6a:7d:cf:28:5b:c6:
         70:15:34:ca:5f:06:08:33:b7:ef:8e:b9:51:79:c0:a2:1c:03:
         e8:6b:0c:fe:54:45:63:55:21:d4:b7:1e:58:97:d9:f4:75:9e:
         d8:87:9b:52:d2:12:1a:fd:5c:41:b2:ba:60:f7:69:4a:64:a0:
         b8:80:88:27:c9:d7:8f:29:6d:8e:6c:23:08:e9:2d:1a:5a:e8:
         19:8f:63:77:42:e5:f9:da:f9:4c:82:65:72:1f:fc:9f:a6:85:
         ed:19:87:58:d2:50:be:c8:9f:c8:fd:a3:d8:d2:7d:fc:70:16:
         63:ee:81:a9:d7:e2:94:78:5d:f7:36:f1:cf:e8:f9:28:c7:4b:
         fd:de:3b:44:31:e0:da:a2:ba:7c:f0:59:b8:e9:a5:61:60:31:
         1d:05:04:d1:7e:b2:2c:5f:5b:f2:ae:ef:22:ef:7d:3f:4a:a4:
         75:aa:d1:43:63:0b:41:b0:00:4f:78:5e:eb:d5:e9:ad:b3:0d:
         ec:2a:c7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:08 2026 by rpki-client