Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
File:                     gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json)
Hash identifier:          CsMVmAiQ1MA0+uFkhV6CmBjkTFQntAdZ0xJJkY6r51w=
Subject key identifier:   21:53:00:57:62:20:B4:2D:0C:24:F3:4C:79:F2:B9:CA:58:83:01:B0
Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Certificate issuer:       /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Certificate serial:       1EF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
Manifest number:          1EF4
Signing time:             Tue 24 Mar 2026 15:57:20 +0000
Manifest this update:     Tue 24 Mar 2026 15:57:20 +0000
Manifest next update:     Tue 31 Mar 2026 15:57:20 +0000
Files and hashes:         1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: O1EMqMHyIflef6L/UTrDZORzrCBW9689KyuoRaW6hfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7925 (0x1ef5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
        Validity
            Not Before: Mar 24 15:57:20 2026 GMT
            Not After : Mar 31 15:57:20 2026 GMT
        Subject: CN=69c2b460-d4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:c5:b9:0a:ab:f8:0f:f6:df:99:1d:49:85:
                    ef:cb:42:b7:f3:5f:c9:c7:ac:c4:c3:c1:d4:3f:27:
                    f6:63:e5:37:4c:09:04:0e:32:4f:2d:88:00:66:af:
                    0e:d6:5a:01:2c:82:95:f6:3f:cc:59:2a:df:ba:46:
                    30:8a:c2:ce:98:cd:54:8d:8b:02:d5:c6:2f:aa:40:
                    04:f9:2b:94:31:1c:42:30:90:19:47:37:e4:62:bc:
                    af:50:78:da:d9:17:2c:15:c6:e6:3c:eb:45:a3:93:
                    48:cf:d7:b5:dd:21:7a:ab:1d:65:ee:86:9a:31:b2:
                    2e:d1:46:59:d0:f3:16:db:3d:bf:54:ee:7c:8c:64:
                    62:a7:71:ea:9d:43:69:85:c8:39:23:24:e0:5f:78:
                    32:09:2e:aa:9f:ce:ea:c5:d1:ba:c0:56:2c:1b:51:
                    d2:ed:01:1e:21:9f:5f:54:46:fb:37:9f:9c:9c:21:
                    ed:0d:73:8d:8c:c4:b0:18:e8:1b:60:42:32:61:1a:
                    bc:fd:f5:1f:ef:87:d7:ce:27:21:09:eb:bd:5d:4d:
                    b2:d3:28:ee:79:0b:03:a7:17:d3:78:e1:bf:3b:03:
                    e2:40:d3:ba:04:76:a5:01:e4:53:2e:9a:c0:bb:62:
                    2c:bf:5d:c4:5e:de:80:95:91:d8:aa:e1:e6:99:b8:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:53:00:57:62:20:B4:2D:0C:24:F3:4C:79:F2:B9:CA:58:83:01:B0
            X509v3 Authority Key Identifier:
                keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f9:76:13:7a:45:60:3d:ed:c2:44:7c:a9:b7:69:c9:9f:f3:
         24:93:05:e2:17:4c:5e:7b:19:c9:29:d8:94:50:33:12:e2:15:
         30:7c:a3:57:e3:87:25:05:1a:d7:d0:6b:db:30:a7:84:29:5e:
         a2:6c:db:f2:10:b7:b4:b6:22:67:f7:66:ac:db:fb:ea:e8:f2:
         da:ae:f8:2a:a6:73:cc:ac:12:8c:6b:a2:06:34:58:34:5c:0a:
         49:53:20:c5:bb:08:3e:a8:65:05:aa:a7:1c:8e:8c:2e:7b:ab:
         aa:83:7b:ab:90:44:35:66:dc:d1:02:b6:8e:b5:56:90:32:11:
         dd:29:f7:53:13:78:54:cd:b3:94:94:ea:b4:6a:50:24:6d:20:
         2c:bf:25:d0:8b:47:e5:3f:40:ff:02:ea:44:11:f2:3b:60:af:
         d0:39:60:68:03:03:51:2e:19:d4:b1:1e:0c:ab:de:e0:b5:7f:
         93:f9:90:e0:3e:bb:14:b9:7e:79:55:f5:26:cc:fb:a1:bb:0f:
         77:9e:ef:30:23:a2:aa:6c:ce:ae:17:d4:fc:0c:05:66:fa:28:
         cc:ce:b2:d1:82:76:36:4e:c8:69:bb:ca:51:b4:ee:7a:b0:29:
         24:cc:65:72:d4:97:34:f0:c8:c9:5a:3b:6e:c5:0e:2f:81:8b:
         aa:44:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:50 2026 by rpki-client