Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
File:                     GmByWuQEWJbjBAgwAyE-6pUmfs8.mft (raw, json)
Hash identifier:          uOjdgnvn8atpCANmdFxY15GuYBTikvNrlzfrCNM5+50=
Subject key identifier:   F4:AE:0B:F9:63:FB:F8:29:42:ED:E3:B8:6D:56:AB:72:7C:60:65:0A
Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF
Certificate issuer:       /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
Manifest number:          01EE
Signing time:             Wed 25 Mar 2026 02:40:03 +0000
Manifest this update:     Wed 25 Mar 2026 02:40:02 +0000
Manifest next update:     Wed 01 Apr 2026 02:40:02 +0000
Files and hashes:         1: GmByWuQEWJbjBAgwAyE-6pUmfs8.crl (hash: oO3kvaVHs1YEYrrckwl0mKS/9FdA0IKG/gEupXPkpfw=)
                          2: 1779BD7C3B2311EE91010B3EC4F9AE02.roa (hash: NX2zo596WFABHjOqY/7BHPvIqM7cOKNcg6FrWFpokQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl
                          rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB35A, serialNumber=1A60725AE4045896E304083003213EEA95267ECF
        Validity
            Not Before: Mar 25 02:40:02 2026 GMT
            Not After : Apr  1 02:40:02 2026 GMT
        Subject: CN=69c34b03-ed10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:49:85:83:bd:68:54:44:57:be:c7:b8:8b:
                    b8:df:31:76:52:99:1c:59:64:a0:40:b7:83:b8:21:
                    52:9c:51:97:47:2b:6c:4f:30:19:27:e8:1c:8e:1f:
                    08:a0:7f:6a:15:c5:c0:02:a3:43:f0:07:2c:82:78:
                    e5:e4:5e:5b:ce:b0:8f:1d:39:46:14:5f:32:73:7a:
                    af:1c:40:3a:e7:28:d0:9b:58:5e:6e:fb:6d:4d:94:
                    66:50:da:09:1f:08:0e:3d:0f:c6:b0:f5:9c:9c:ee:
                    a1:ef:ce:0a:0c:06:4c:60:f0:4c:25:6b:67:a0:c8:
                    11:67:9c:d1:c1:6c:d4:d1:bd:c2:38:9e:d9:26:cf:
                    e4:e4:06:3d:5b:ac:71:d5:c6:b1:71:06:09:1a:b0:
                    c9:d6:fe:72:c4:80:55:df:8b:78:6a:b2:b1:1a:a9:
                    14:35:1c:4d:de:c8:48:71:48:c6:c5:ce:83:2e:cd:
                    4e:02:6d:c4:2a:c7:37:ad:d6:34:66:51:0c:68:89:
                    e9:82:d9:c5:46:68:77:4a:bf:6e:21:36:c4:b5:55:
                    1e:60:9f:16:c0:4f:77:c8:7a:9b:e9:8e:d3:35:d2:
                    46:98:17:9f:21:19:05:35:f2:25:a7:50:60:96:92:
                    6d:da:db:5d:d1:53:c7:60:05:8e:e3:e0:7d:1d:47:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AE:0B:F9:63:FB:F8:29:42:ED:E3:B8:6D:56:AB:72:7C:60:65:0A
            X509v3 Authority Key Identifier:
                keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:64:0a:3a:0d:4a:6c:40:1b:7e:26:ce:12:79:59:73:b7:3f:
         74:9d:a4:d9:e7:b9:ca:92:c3:3e:16:1d:67:3e:56:a2:14:45:
         67:1a:57:b2:81:df:11:cc:ff:c9:14:89:dc:85:b8:13:a8:af:
         02:9e:ab:08:43:29:08:32:7d:c0:d1:2e:a7:41:fc:23:e4:20:
         6a:be:35:e3:44:f8:5c:a4:c6:b9:25:ee:1a:f4:6a:4c:11:8e:
         fa:5a:ca:77:30:c8:a3:c1:0c:0d:7b:8d:09:f2:af:21:d4:67:
         cd:6a:8d:8f:ff:11:4e:8b:b4:a1:c2:7c:a0:29:fe:6b:fa:8b:
         e3:39:c1:da:3b:57:18:71:80:4b:20:ae:4b:7b:36:b8:bc:49:
         6c:10:2b:9f:a8:ca:6c:7b:dc:f9:1b:4e:0a:e9:3c:7c:6b:46:
         9e:93:40:4a:2b:ca:0d:59:0a:20:f8:dc:e3:4f:63:93:e7:aa:
         28:48:9c:28:9e:9a:e9:7f:97:f1:9e:69:ad:3b:3d:9c:6f:9e:
         02:1b:50:aa:ea:7d:88:02:79:ee:72:8a:1d:5d:2f:ab:5f:12:
         92:9a:55:11:15:f8:e0:82:88:78:ae:ed:f8:ab:21:78:cb:39:
         e0:43:ab:58:90:55:a8:e1:67:bb:fd:63:ce:84:9a:6a:73:ee:
         bf:2c:92:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIzNUExMTAvBgNVBAUTKDFBNjA3MjVBRTQwNDU4OTZFMzA0MDgzMDAzMjEzRUVB
OTUyNjdFQ0YwHhcNMjYwMzI1MDI0MDAyWhcNMjYwNDAxMDI0MDAyWjAYMRYwFAYD
VQQDEw02OWMzNGIwMy1lZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVlJhYO9aFREV77HuIu43zF2UpkcWWSgQLeDuCFSnFGXRytsTzAZJ+gcjh8I
oH9qFcXAAqND8Acsgnjl5F5bzrCPHTlGFF8yc3qvHEA65yjQm1hebvttTZRmUNoJ
HwgOPQ/GsPWcnO6h784KDAZMYPBMJWtnoMgRZ5zRwWzU0b3COJ7ZJs/k5AY9W6xx
1caxcQYJGrDJ1v5yxIBV34t4arKxGqkUNRxN3shIcUjGxc6DLs1OAm3EKsc3rdY0
ZlEMaInpgtnFRmh3Sr9uITbEtVUeYJ8WwE93yHqb6Y7TNdJGmBefIRkFNfIlp1Bg
lpJt2ttd0VPHYAWO4+B9HUclzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSuC/lj
+/gpQu3juG1Wq3J8YGUKMB8GA1UdIwQYMBaAFBpgclrkBFiW4wQIMAMhPuqVJn7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjM1QS8wMDZDRDk0QTNC
MjExMUVFODA0QzYzODNDNEY5QUUwMi9HbUJ5V3VRRVdKYmpCQWd3QXlFLTZwVW1m
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dtQnlXdVFFV0piakJBZ3dBeUUtNnBVbWZzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjM1QS8wMDZDRDk0QTNCMjExMUVFODA0QzYzODNDNEY5QUUwMi9HbUJ5V3VRRVdK
YmpCQWd3QXlFLTZwVW1mczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzGQKOg1KbEAbfibOEnlZc7c/dJ2k2ee5ypLDPhYdZz5WohRFZxpXsoHfEcz/
yRSJ3IW4E6ivAp6rCEMpCDJ9wNEup0H8I+Qgar4140T4XKTGuSXuGvRqTBGO+lrK
dzDIo8EMDXuNCfKvIdRnzWqNj/8RTou0ocJ8oCn+a/qL4znB2jtXGHGASyCuS3s2
uLxJbBArn6jKbHvc+RtOCuk8fGtGnpNASivKDVkKIPjc409jk+eqKEicKJ6a6X+X
8Z5prTs9nG+eAhtQqup9iAJ57nKKHV0vq18SkppVERX44IKIeK7t+KsheMs54EOr
WJBVqOFnu/1jzoSaanPuvyySdw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:25 2026 by rpki-client