Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File:                     gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier:          rWKyG7eKzMICy5YurtR1Gs9sNTukaLtEph3PYjTKMg0=
Subject key identifier:   DC:AB:EA:21:B8:4D:7A:67:A9:84:11:AE:12:4F:06:9F:6E:C0:76:2D
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer:       /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial:       02A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number:          027D
Signing time:             Wed 25 Mar 2026 01:19:20 +0000
Manifest this update:     Wed 25 Mar 2026 01:19:20 +0000
Manifest next update:     Wed 01 Apr 2026 01:19:20 +0000
Files and hashes:         1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: t043dJKgikgdItaKNN4EIpkzU/P8yaerxWHhXZ2DDF0=)
                          2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: Av4mHmkvx3iYn7v4H7bW4jhBpHBzklQ4N3gttmKh3/U=)
                          3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: qF8UQpduJURSSws6qaTkNhteNuCF3Xv0DEEsWe94W2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
        Validity
            Not Before: Mar 25 01:19:20 2026 GMT
            Not After : Apr  1 01:19:20 2026 GMT
        Subject: CN=69c33818-9cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:9a:dc:e6:2d:10:82:65:b3:b3:82:d0:4d:
                    2c:9c:9c:a3:f6:e8:cd:46:f9:f7:17:b9:4e:11:33:
                    91:90:a1:43:96:8d:dc:44:34:eb:45:17:bb:18:a4:
                    0f:6d:96:49:8e:c1:05:2d:be:a8:1f:5d:9a:fc:6d:
                    5b:4e:d9:4e:f3:8e:24:c5:0e:12:53:b0:e2:95:b6:
                    6b:7e:d9:8e:75:39:cd:2c:45:ef:a3:b8:e8:8c:22:
                    5a:e6:00:44:5b:9d:cb:7b:2e:43:67:cd:8f:ea:fe:
                    74:09:6a:0d:5e:fd:c1:07:e8:17:ba:76:5a:e9:1d:
                    19:9b:5b:c6:af:28:f0:71:32:11:ab:7a:3b:6e:9f:
                    30:20:6d:c1:bd:14:5a:75:1d:b5:55:76:65:ed:dc:
                    bb:fc:ce:cd:11:a1:27:dd:d1:f5:b1:3d:40:a5:47:
                    b5:8e:da:d5:9d:d0:64:25:d2:4d:a3:72:f3:7f:25:
                    5b:94:ba:02:15:5b:1c:c5:d7:54:88:b4:f1:8b:87:
                    f7:cb:26:09:56:60:6c:80:f7:40:b1:3f:9d:30:33:
                    b2:04:6c:e1:c5:a3:dd:3c:d8:e7:36:8a:03:68:ad:
                    a8:5d:82:20:a4:92:80:93:49:51:d6:96:7e:ee:b2:
                    04:0e:6c:6c:ac:94:a5:29:27:10:2f:c1:c3:f3:31:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AB:EA:21:B8:4D:7A:67:A9:84:11:AE:12:4F:06:9F:6E:C0:76:2D
            X509v3 Authority Key Identifier:
                keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2c:77:53:d6:4f:22:1e:0d:23:4d:5f:1c:a6:70:f9:06:39:
         3a:6b:cb:42:d8:d1:88:1c:50:ad:ca:67:43:50:53:ea:db:82:
         69:b8:70:7e:cf:0a:70:76:a0:79:16:c2:73:56:0c:25:d1:6d:
         84:22:bc:67:17:9d:ff:b7:f9:51:71:b1:ee:ac:18:80:be:43:
         7e:95:1a:25:4c:3f:b3:20:33:a5:90:6f:76:b9:d7:cb:ee:5d:
         7c:96:f3:58:38:6e:27:67:dd:d2:93:91:27:b3:a8:dd:7d:56:
         24:42:99:98:5b:54:f2:94:6b:1e:2d:06:92:79:f5:99:88:37:
         df:a8:f1:3e:3e:f7:01:aa:b1:e9:6d:1e:a5:07:d5:e8:99:68:
         c4:aa:23:fc:39:75:10:e8:ea:af:8c:1b:ba:56:75:29:6e:12:
         4c:20:8c:a0:22:9f:f7:6f:3f:e8:30:72:e6:9a:ba:41:b7:24:
         cf:65:5b:3b:76:17:3d:86:c9:d5:5f:50:12:2d:e2:17:8e:17:
         4d:c3:e6:a8:68:b6:38:1d:43:04:b1:df:7a:a1:dc:cc:17:b6:
         79:d8:d4:d8:b1:2e:49:d4:57:d6:e6:b2:c0:f9:c7:1d:b4:b3:
         2c:49:18:40:99:a0:ec:69:53:f3:e2:60:f9:56:f9:95:1c:a6:
         50:82:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:35 2026 by rpki-client