Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File:                     GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier:          2V2sHrl8gg3wb5pnbqePXZO3iXJU+LKhrJk68k8efJ4=
Subject key identifier:   B5:1F:46:9E:15:75:12:6E:F7:DD:20:44:87:C9:C5:64:2A:D9:F1:1F
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer:       /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial:       0AF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number:          0AE5
Signing time:             Tue 12 May 2026 19:28:27 +0000
Manifest this update:     Tue 12 May 2026 19:28:26 +0000
Manifest next update:     Tue 19 May 2026 19:28:26 +0000
Files and hashes:         1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: jN4y7I3L/5du07/QNqu2x5WKqPY1NdhnadBtk7mBi5U=)
                          2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
                          rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2801 (0xaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
        Validity
            Not Before: May 12 19:28:26 2026 GMT
            Not After : May 19 19:28:26 2026 GMT
        Subject: CN=6a037f5a-4a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:ef:b9:24:d6:25:7f:42:27:31:fd:f6:84:
                    8f:b6:5f:07:21:85:5d:23:1b:6f:00:99:3a:f6:6e:
                    bd:9a:b4:09:e0:d8:cf:e6:e3:1e:5c:fd:08:4c:97:
                    aa:7c:c7:e8:d1:b9:b3:42:8c:2c:ce:1b:0d:0d:d5:
                    26:f0:bc:82:e7:91:30:46:b7:d0:a0:b9:21:f1:50:
                    5a:3e:c5:36:d6:57:4c:20:2b:29:dc:80:be:ef:94:
                    44:e1:b4:4f:34:48:10:a3:1a:34:2b:eb:1f:ec:55:
                    7a:b0:06:f2:97:44:2d:8d:e1:fe:2c:d0:a2:9c:6e:
                    cb:3a:1d:d3:60:09:7e:61:60:f0:57:dc:a8:a5:83:
                    0a:3d:65:7e:26:33:2e:25:19:16:72:e9:47:d5:f9:
                    6e:27:01:21:b3:57:d5:03:ad:54:1f:aa:c6:db:b2:
                    4f:e6:de:27:26:39:2c:9d:77:df:2e:72:1d:b2:e9:
                    f7:9a:ee:d9:55:4e:21:e0:fc:77:01:90:bc:d9:7c:
                    50:26:fc:c1:fd:98:a0:54:a7:83:46:9a:bb:3b:66:
                    89:5f:5c:1d:b0:ec:fe:37:58:a6:fa:38:36:e7:ce:
                    ef:11:51:0f:ee:99:3a:91:51:47:1a:cb:a5:60:fa:
                    dc:54:66:e3:7d:92:aa:e4:37:62:e9:b4:40:ab:fd:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1F:46:9E:15:75:12:6E:F7:DD:20:44:87:C9:C5:64:2A:D9:F1:1F
            X509v3 Authority Key Identifier:
                keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:85:13:1e:01:51:43:89:6b:ab:24:e4:2c:26:6d:b8:bb:de:
         59:26:fb:0a:f4:27:6e:7c:62:e0:15:6b:e8:5e:90:16:9e:5f:
         03:f0:47:09:de:ec:79:d2:f7:83:11:2b:ad:69:1e:14:ae:82:
         61:f0:ec:e7:4b:30:83:6e:8f:63:73:51:b8:87:02:74:54:10:
         37:58:2b:00:5e:6d:3c:ec:ad:93:3e:a2:ec:57:a6:40:22:9f:
         aa:2e:6c:3f:78:d3:33:d7:c3:d5:20:02:fc:50:be:f1:5e:d1:
         64:42:24:f1:83:56:80:92:74:b3:87:d9:e4:1e:2b:ee:33:d2:
         78:4b:a8:c1:82:eb:4b:bc:01:b3:2b:b6:cd:f2:9b:e4:a5:17:
         27:b5:73:55:0b:de:8c:5b:cc:15:03:2e:bd:e7:1c:cd:7e:43:
         81:07:1b:77:16:21:7e:78:3d:34:3a:0e:45:2b:9f:b3:c8:ba:
         8d:37:04:82:7b:aa:b9:72:17:26:37:bd:00:e1:49:6d:b0:76:
         f7:4c:20:00:ea:77:7e:22:2a:a3:a9:a3:e6:48:f3:58:60:35:
         e3:b0:c2:14:2d:c7:00:5e:26:11:38:84:8e:bb:d5:15:b3:e7:
         65:ce:68:8f:ef:5b:b1:a9:5a:8f:43:99:60:64:ce:7c:68:7e:
         a1:89:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:40 2026 by rpki-client