Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
File:                     GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json)
Hash identifier:          gQud61SxUIN+z4qEhQZ1cuFeRT55QmUHDFimul+GQP0=
Subject key identifier:   87:13:88:F7:C5:8D:09:2C:F2:DA:7C:FF:7B:62:64:B3:27:6F:2A:15
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Certificate issuer:       /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial:       23C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
Manifest number:          2368
Signing time:             Tue 12 May 2026 15:50:03 +0000
Manifest this update:     Tue 12 May 2026 15:50:03 +0000
Manifest next update:     Tue 19 May 2026 15:50:03 +0000
Files and hashes:         1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: fgbnq5WEybzMeWYMJIXJpqZlBzQyPhoUrXdRd2azvv8=)
                          2: 07412A002D3111F1B77CD687BC833773.roa (hash: m3KakV6D8uqf1vPRe2G0m6SVTDUuzIzt+KLbrHZc+PI=)
                          3: 13DD1B662D3111F180CCA088BC833773.roa (hash: R7dTMiB8fLcK528K7ntTaoxEftrwMiKxX3YP8FhMfmA=)
                          4: 05596FAEBA1811F080138957C4F9AE02.roa (hash: tyGMd+HN3XNyreUh3joDHlUhGigz8P1uPZWOL8YggfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
                          rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9161 (0x23c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
        Validity
            Not Before: May 12 15:50:03 2026 GMT
            Not After : May 19 15:50:03 2026 GMT
        Subject: CN=6a034c2b-1e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:6d:25:a3:c4:79:bd:51:e3:c9:5f:97:43:
                    40:07:43:6d:13:40:ee:f8:a6:c2:8b:bc:8d:4d:be:
                    ae:0a:15:95:1d:95:b1:c5:da:d1:a1:31:f2:9e:de:
                    6b:a5:86:27:6f:3c:cd:fb:4e:28:02:01:69:db:59:
                    62:65:74:ab:ab:ea:3d:e3:bc:62:c8:3d:67:53:8d:
                    1e:1c:f0:a1:86:5a:d4:71:67:bb:5e:23:b3:ba:b8:
                    65:39:c2:16:be:6b:c4:59:ae:6e:ab:de:fe:3a:6a:
                    fa:41:50:4e:85:e3:38:21:a4:26:1e:44:69:c5:87:
                    bc:07:11:98:4a:cf:78:b5:7f:3a:ca:18:88:d4:c3:
                    87:41:f4:7e:d9:d0:15:86:71:da:ba:e1:bf:7e:2d:
                    03:85:5a:66:ab:2b:f0:a5:c3:f8:0a:8d:d4:4a:98:
                    72:f3:1e:eb:f3:23:7d:1f:bb:8f:b5:02:42:38:29:
                    c2:e0:2a:e0:52:09:8d:27:63:05:d5:cf:f9:0d:4e:
                    12:28:ba:55:5c:3e:e6:ff:6b:10:45:e0:25:65:ef:
                    2f:c4:1c:d1:75:25:f0:65:58:8b:34:22:3d:ce:aa:
                    95:79:27:b8:b4:90:ed:f8:42:b4:10:de:aa:97:ad:
                    4e:e6:da:01:00:56:88:27:d8:33:cc:32:43:bb:d1:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:13:88:F7:C5:8D:09:2C:F2:DA:7C:FF:7B:62:64:B3:27:6F:2A:15
            X509v3 Authority Key Identifier:
                keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:60:8a:fb:07:29:28:33:d1:ab:f2:42:c6:49:f2:df:6d:bc:
         12:73:11:70:87:81:b0:6a:46:8d:09:40:de:f5:6a:37:da:8b:
         e3:84:2e:7d:ab:0e:18:82:cf:7d:cb:c9:f8:a0:de:e3:07:ff:
         6a:ad:72:36:fd:34:bd:2f:46:76:ee:17:25:ea:39:46:f9:67:
         18:75:3c:a7:25:61:50:7b:fb:53:d6:9b:e1:85:40:27:25:59:
         be:7c:aa:87:2b:83:7b:b9:07:2d:a4:f1:9d:8b:b3:78:1a:6f:
         5c:56:d9:53:d3:a6:6d:ae:4d:23:62:b6:81:c3:c2:9a:19:5e:
         37:1e:ed:e0:28:5d:f8:22:fe:50:b4:23:b8:74:a8:0b:27:85:
         94:6e:31:df:d6:ec:8a:ef:83:29:5c:50:81:3d:20:21:d3:e3:
         40:05:eb:0c:16:f9:c6:f2:ad:53:0a:67:45:de:13:c6:3f:6b:
         65:89:b7:b6:98:e7:eb:c1:bf:9a:aa:36:a7:f2:b5:ee:f6:42:
         6b:6b:e7:27:87:2a:9a:7d:20:74:be:47:66:b0:55:aa:d8:35:
         37:a3:24:b5:0a:e2:3a:1e:74:b9:3e:44:f4:73:2a:c8:35:03:
         4a:30:a4:e9:00:26:bd:e8:63:ff:b9:11:00:9d:3e:01:c5:37:
         29:ed:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:05 2026 by rpki-client