Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
File:                     Gns-z0RjPh6iTJBhetOXRV505rI.mft (raw, json)
Hash identifier:          ed2EAh2gE9eG10L4vCdXH0HWXh+9VJDc2mmyOLeMFIk=
Subject key identifier:   37:21:17:79:8E:96:4B:C8:7D:0D:61:B8:96:00:1B:C8:6B:73:68:9E
Authority key identifier: 1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2
Certificate issuer:       /CN=A91CE9F1/serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
Manifest number:          01BB
Signing time:             Fri 27 Mar 2026 03:22:38 +0000
Manifest this update:     Fri 27 Mar 2026 03:22:37 +0000
Manifest next update:     Fri 03 Apr 2026 03:22:37 +0000
Files and hashes:         1: Gns-z0RjPh6iTJBhetOXRV505rI.crl (hash: sdkW8VSejNYGmWUlUqw+PDJTXqDVJRAakVi8V0WdSI8=)
                          2: 398B4EEE875E11EEBCAB2514C4F9AE02.roa (hash: t10meiycpjtLJ/5vDavAMDin3n4ylNyYCIEx6WOGCC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE9F1, serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
        Validity
            Not Before: Mar 27 03:22:37 2026 GMT
            Not After : Apr  3 03:22:37 2026 GMT
        Subject: CN=69c5f7fe-104c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:f9:dc:a4:39:e7:f2:ae:b0:b9:d9:58:a3:
                    0b:4d:78:05:16:51:c9:a8:6e:9c:67:d2:4d:22:a0:
                    1c:99:a0:08:d6:6c:6c:10:f5:e2:02:6a:f4:78:5e:
                    d9:bb:f8:ea:fa:81:19:15:e4:cd:18:c9:d2:70:88:
                    d3:70:5a:52:fe:71:8f:79:22:48:e8:ee:ef:eb:f0:
                    4e:cd:df:8e:d4:f1:b1:bb:27:2b:b7:7a:0e:8b:5c:
                    e0:39:5b:aa:71:93:30:fa:f4:9b:8c:98:4e:87:51:
                    24:cd:f7:8a:dd:96:9a:47:14:c6:ea:35:eb:51:a9:
                    93:2f:dc:d9:02:4a:86:6a:64:e0:c1:09:c1:e7:a0:
                    46:af:d8:d7:07:9d:fc:0e:22:48:74:fe:3d:75:2e:
                    ae:e8:83:92:f2:1c:c0:b0:34:78:b2:de:62:37:13:
                    66:64:2a:c2:4c:9d:9c:03:08:de:5e:cb:6a:40:da:
                    91:79:28:5a:5b:15:23:04:8d:ea:0e:9c:c1:43:92:
                    21:a1:c7:65:0c:45:7a:19:0a:13:3a:22:67:1c:9d:
                    eb:30:5f:7d:e0:0b:22:d9:b3:79:aa:3f:1f:13:e7:
                    df:9e:35:d6:87:c1:e2:c7:de:a5:b4:00:0c:ab:6f:
                    f3:b7:69:51:20:51:84:6f:12:cb:23:0f:58:0a:93:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:21:17:79:8E:96:4B:C8:7D:0D:61:B8:96:00:1B:C8:6B:73:68:9E
            X509v3 Authority Key Identifier:
                keyid:1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:91:b8:be:b0:ba:ab:97:ef:12:f1:4e:39:49:aa:0e:fb:ec:
         23:80:4c:2b:25:0f:36:ca:52:b8:48:70:b6:e8:48:a4:19:25:
         1c:87:b0:06:91:48:7b:e9:41:d6:86:fc:56:87:bd:25:39:fa:
         58:fd:d0:c5:2d:ab:7f:e7:ac:8b:fe:75:4f:50:a2:6e:78:09:
         56:2a:92:0b:92:2f:92:50:61:45:0f:4f:a5:78:72:b0:25:1c:
         18:bd:bd:94:fc:a6:0e:55:8b:d0:fa:3b:39:90:dd:b1:30:c8:
         96:e7:17:ba:cf:0a:f5:ef:dc:f7:b8:5d:6f:ec:42:1d:44:e2:
         b6:39:6f:85:4f:fd:6f:57:16:3e:96:d4:09:c3:d8:7b:d8:b7:
         60:9b:06:b9:5a:db:88:1b:c2:3d:a6:f0:c8:c8:0f:b4:65:ab:
         a2:26:7d:0d:a6:52:5c:49:07:ce:9a:c8:ab:16:94:ff:35:a0:
         3e:e3:c1:f8:d7:64:65:59:62:38:c5:0a:92:7b:71:d1:88:c6:
         35:e3:f1:94:62:97:39:43:23:c5:eb:1c:c7:25:20:2d:50:95:
         42:86:f9:5b:85:fc:17:d1:70:8b:93:05:99:ad:58:7b:3e:93:
         bf:fd:80:fe:c8:94:fb:0f:79:42:05:33:e5:ad:2b:89:9d:96:
         b6:54:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:56 2026 by rpki-client