Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
File:                     Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft (raw, json)
Hash identifier:          XwKD1MGlsJKFICro0MyPwH4i2XEBk3+CjfEPTqgVT08=
Subject key identifier:   37:1E:BD:FD:94:E9:D4:C6:1E:DE:DE:02:2A:78:57:3E:92:EA:4B:68
Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
Certificate issuer:       /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Certificate serial:       07F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
Manifest number:          07DC
Signing time:             Tue 12 May 2026 21:27:07 +0000
Manifest this update:     Tue 12 May 2026 21:27:07 +0000
Manifest next update:     Tue 19 May 2026 21:27:07 +0000
Files and hashes:         1: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl (hash: FdvRZ5ut6YGFibrIHDKHu75rUvwR0sdyJppUX2ADOsc=)
                          2: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (hash: gFpOQJ7daM5uiSgk6tlT5tpNz4O4jsVXIh/45TS6lk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
                          rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034 (0x7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
        Validity
            Not Before: May 12 21:27:07 2026 GMT
            Not After : May 19 21:27:07 2026 GMT
        Subject: CN=6a039b2b-0663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:ef:0e:50:6b:9c:cf:a3:71:64:90:49:2e:
                    85:95:ed:65:ab:d5:e3:3c:5c:17:b7:eb:1e:26:13:
                    6a:4f:c8:9e:a8:02:08:45:3a:59:46:4f:bf:f1:3e:
                    be:8d:16:22:f2:00:f8:9f:86:a8:c9:af:03:29:24:
                    5e:ef:fa:d7:8f:95:0e:01:1d:3f:3b:0e:cb:07:24:
                    dc:a6:36:16:1c:0c:82:54:46:3e:48:9e:76:e4:48:
                    e8:50:1c:59:33:40:7d:68:84:7e:c6:a6:a3:28:ee:
                    98:c4:d7:c1:08:bd:86:6c:03:ba:37:92:b8:cc:45:
                    a1:a7:14:8d:e9:8a:a3:cc:8b:41:74:67:87:05:9d:
                    3d:e0:ad:db:bc:4b:61:03:cd:e2:68:7c:b4:a3:eb:
                    c2:df:df:bf:ea:44:56:53:55:5b:3c:6c:0c:8c:4c:
                    20:a6:c8:ed:92:09:18:f5:20:95:98:97:e0:c8:fb:
                    9a:35:04:26:8b:03:e1:99:5a:2d:eb:73:ac:1e:84:
                    6f:cb:80:83:5a:b3:5b:d4:1b:19:2c:71:65:13:ee:
                    92:75:a7:bf:47:f9:68:cc:7f:14:44:2b:ae:7a:66:
                    21:18:67:5e:3b:f1:31:52:19:5d:3d:b0:3e:42:c0:
                    85:90:18:a0:eb:8c:44:89:b7:31:cd:fa:e4:76:fa:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1E:BD:FD:94:E9:D4:C6:1E:DE:DE:02:2A:78:57:3E:92:EA:4B:68
            X509v3 Authority Key Identifier:
                keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:df:e9:01:b9:cc:95:40:fe:9b:cb:d7:6f:49:39:da:a4:
         55:ec:25:f3:94:08:9f:29:e2:a8:59:f6:02:6d:2b:20:89:0e:
         e8:96:7f:53:af:98:de:3a:2b:b5:1e:be:81:c7:b8:db:d7:87:
         d3:a2:18:c0:a9:3c:ad:ae:34:8c:b4:b6:bf:5e:fb:e3:c0:29:
         e4:9f:20:fb:90:a4:b7:9c:49:0a:b4:0e:eb:28:2c:fe:eb:2f:
         b4:f0:a7:4a:06:8a:89:71:d8:4d:18:4e:2e:c2:e9:76:37:da:
         06:19:8b:e7:ea:df:95:b0:b3:ab:bd:10:57:c9:b9:5f:43:10:
         19:98:ea:6e:52:68:e2:60:fe:13:17:bc:b4:91:01:78:e2:7e:
         bb:1b:fe:64:e9:0e:54:35:8e:35:a3:67:e5:b9:4e:b2:78:bc:
         ae:e2:d9:bf:a0:b8:3a:8c:62:dc:37:52:3b:1c:f7:c5:03:06:
         a7:7e:ac:1c:57:26:7c:e1:ee:4a:43:5c:1f:85:7c:d1:f9:5b:
         d3:a1:a8:19:33:f6:c7:b8:55:57:33:7d:b6:5a:39:a3:c1:9b:
         3f:df:d2:9b:d1:f6:e0:52:79:00:6b:6d:31:e1:ef:47:04:9d:
         a1:df:32:ba:38:b3:cc:1d:fd:6f:6c:11:58:3d:90:12:97:ad:
         91:9d:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:02 2026 by rpki-client