Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
File:                     Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft (raw, json)
Hash identifier:          +NkLMfva521s44vWvmoJjifuk/4VXh/TSbigca+c1q4=
Subject key identifier:   11:50:D0:D6:2D:7E:E0:03:65:E8:95:98:09:F7:7F:8B:E9:74:96:5C
Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
Certificate issuer:       /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Certificate serial:       07D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
Manifest number:          07C3
Signing time:             Tue 24 Mar 2026 21:10:31 +0000
Manifest this update:     Tue 24 Mar 2026 21:10:31 +0000
Manifest next update:     Tue 31 Mar 2026 21:10:31 +0000
Files and hashes:         1: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl (hash: ujNkNAWNwaRgb3S4rGMUeO3V0F0C0rf0GyZxgztnt9g=)
                          2: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (hash: gFpOQJ7daM5uiSgk6tlT5tpNz4O4jsVXIh/45TS6lk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
                          rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
        Validity
            Not Before: Mar 24 21:10:31 2026 GMT
            Not After : Mar 31 21:10:31 2026 GMT
        Subject: CN=69c2fdc7-d965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:b8:4a:3d:ee:c6:8b:81:c7:84:0b:f7:a0:
                    c2:9d:25:74:e0:2a:87:10:76:a4:90:38:72:b0:a0:
                    d8:c2:ba:2c:64:c8:bc:a4:4e:f1:d2:66:a5:7e:31:
                    ed:f4:f9:e9:f7:5d:08:a8:c1:f6:72:35:22:00:b8:
                    f1:40:2a:45:5d:21:ae:b8:f1:59:17:c0:64:e0:16:
                    d4:11:22:8f:2a:6c:74:a4:42:55:54:e7:5d:77:c4:
                    05:94:93:9a:3b:df:a9:ec:fa:31:25:23:ca:0c:35:
                    27:c7:8b:51:4e:3d:63:de:fe:da:96:f4:c2:e5:45:
                    53:55:1d:ff:8a:76:69:3d:a2:48:f9:fe:a4:5d:ce:
                    aa:a9:8c:7c:35:b5:0e:de:f9:63:db:f6:af:40:46:
                    74:4f:2e:ed:17:0a:10:fb:3d:09:53:79:57:e6:74:
                    7d:e7:3e:08:6f:96:b1:03:fd:50:8c:07:f5:95:f1:
                    c8:d9:f8:84:80:be:45:45:79:53:fb:4c:93:d8:78:
                    d9:23:d3:8a:e9:b9:62:26:62:05:80:6d:95:e8:57:
                    d2:40:ab:f6:7c:e4:85:72:9c:ff:f1:a3:88:c9:ef:
                    c4:80:15:c8:f6:5a:06:8f:de:53:3d:a9:b7:06:80:
                    dd:74:1e:43:d1:4f:b4:e4:77:eb:c0:e0:b9:53:9a:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:D0:D6:2D:7E:E0:03:65:E8:95:98:09:F7:7F:8B:E9:74:96:5C
            X509v3 Authority Key Identifier:
                keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:15:1c:65:91:49:2b:8a:6d:a0:ec:8f:0c:36:b1:fb:03:45:
         fb:26:3d:84:3c:97:e2:a2:ef:fa:ce:e1:f6:1e:04:5a:d3:1b:
         65:fe:3a:2e:e8:ec:b4:39:56:bd:d4:47:1b:58:53:96:00:b0:
         fb:6c:63:c2:15:4f:a5:36:c1:fb:6e:ec:98:df:e1:82:ab:e2:
         dd:c2:e0:36:dd:7f:41:36:0c:ab:a3:cb:99:19:b9:76:02:c0:
         ba:2a:37:3a:d8:e2:08:c4:d6:13:fc:c9:58:af:ed:f5:ed:b8:
         8a:a2:04:f8:e6:4d:4e:75:49:c1:d6:f3:1d:28:4b:86:e2:2d:
         ca:fd:66:6a:21:1b:68:6e:3c:7c:19:5d:90:d7:c6:67:62:db:
         9b:16:e3:d8:52:71:60:c5:7c:7a:72:1e:f2:61:05:ce:86:9c:
         4d:a4:4b:da:10:b9:00:c5:83:70:74:fb:34:43:df:6b:74:36:
         06:d1:df:2f:d7:b3:68:f0:fd:5e:bd:45:aa:7c:e7:60:d4:b8:
         45:69:3b:5b:ec:f5:21:42:cf:ff:f5:61:54:0a:7d:0a:ed:6c:
         e1:5b:db:a2:82:4b:a8:64:f7:49:ac:60:7c:dd:5d:e1:81:13:
         e1:71:b7:cf:02:0b:83:c8:75:30:c8:a7:8b:49:d8:6a:c1:4b:
         37:7c:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:24 2026 by rpki-client