Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
File:                     gL6TDjBkmxKs7o3EC1dat93mSUU.mft (raw, json)
Hash identifier:          6wKEqfb38ybZEKpZkSljpqXz4eZ6m2WmijXSy/u2PCk=
Subject key identifier:   EB:72:CA:ED:7C:EA:73:A3:28:9A:88:AD:90:57:6F:9A:51:6D:B8:CC
Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Certificate issuer:       /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
Manifest number:          01DD
Signing time:             Wed 25 Mar 2026 02:57:55 +0000
Manifest this update:     Wed 25 Mar 2026 02:57:55 +0000
Manifest next update:     Wed 01 Apr 2026 02:57:55 +0000
Files and hashes:         1: gL6TDjBkmxKs7o3EC1dat93mSUU.crl (hash: y3fG68AAJyVcK9P1FBYGisAdTtL0r4LpeVCS3aQPjmo=)
                          2: 17A27C7E116211EF8FC7E061C4F9AE02.roa (hash: 42UbjdZw7Q08/gaQScyA+qN17BhHhRMtwA7wjgjh4qE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C33, serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
        Validity
            Not Before: Mar 25 02:57:55 2026 GMT
            Not After : Apr  1 02:57:55 2026 GMT
        Subject: CN=69c34f33-763e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:f5:0a:9b:7f:9c:00:72:c4:34:45:45:bd:
                    72:a1:b1:a1:06:99:27:8d:6b:95:ee:3f:52:b1:a3:
                    1a:5f:96:d3:8f:4c:a9:7e:a3:d9:ba:5e:d9:17:46:
                    34:19:bb:ce:58:e7:10:26:98:99:b4:68:93:9f:07:
                    3c:13:56:6e:7f:a2:c5:9b:fd:a6:7c:1c:8e:7f:af:
                    83:f1:36:14:36:78:ca:d2:8a:71:07:c2:4c:c5:15:
                    fb:35:58:7d:7a:df:b4:fb:e7:94:4f:45:b7:94:4c:
                    c4:ff:ec:a7:c1:e5:3a:5d:2c:5b:99:a1:28:b7:cc:
                    f3:e4:6e:b3:1d:81:b5:2f:8b:a5:43:f1:8f:64:47:
                    8c:7d:9d:c1:b4:c7:2b:6a:4d:a6:39:e0:0d:2d:24:
                    a6:01:84:c2:e3:51:a8:d9:ce:9a:b7:9d:1b:b4:2b:
                    2e:9d:08:ba:33:3a:c1:74:05:f3:ad:f4:5f:09:f0:
                    86:58:49:29:84:5b:ac:c6:54:a0:ce:56:e2:84:07:
                    71:8b:fa:77:3e:02:5c:b6:5d:01:1e:d8:fa:9b:33:
                    e5:f3:50:19:36:c4:6f:92:7b:4e:7c:a1:52:62:a1:
                    76:d3:59:86:13:ab:19:95:08:03:ae:70:2a:18:f7:
                    91:85:6c:27:43:f4:c6:00:6c:7f:0a:06:4d:48:38:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:72:CA:ED:7C:EA:73:A3:28:9A:88:AD:90:57:6F:9A:51:6D:B8:CC
            X509v3 Authority Key Identifier:
                keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:04:b0:c1:c1:e3:bd:e7:66:95:2f:b8:a6:ec:db:5c:fd:f2:
         0a:7b:64:ea:ac:bc:dd:39:6f:62:a3:2c:68:9b:c4:e3:2f:f0:
         4e:1f:f5:64:59:6e:43:40:fd:51:4b:5f:e9:42:58:6e:01:dd:
         ec:3f:52:1f:40:01:68:95:2c:bb:7c:92:d5:7b:ce:0b:84:e0:
         61:70:b1:d3:5b:26:9c:a3:d4:42:5a:ab:98:9c:47:03:dd:a1:
         e7:9f:ac:48:85:9e:97:94:a9:04:a3:f7:17:f2:f1:a9:b5:52:
         a5:82:9e:ac:56:d5:2e:cc:f6:10:3b:79:78:00:eb:96:fd:d2:
         c8:18:53:65:f2:81:8b:1d:d2:a7:12:31:32:93:a9:fa:a9:f1:
         cb:9e:66:8e:ab:48:ce:7f:5a:06:82:5a:64:0b:6a:5a:ab:39:
         93:85:dc:79:80:36:53:4c:9e:ca:9a:a4:53:3a:eb:a8:07:0b:
         b9:d1:27:9b:92:f7:dc:c6:a1:4d:7c:4e:b4:85:4f:37:df:37:
         9e:67:d9:0d:07:5a:a1:55:0d:ff:2c:a6:82:b3:16:2f:76:4a:
         4c:dd:e2:a2:51:3d:f1:61:5e:25:92:3f:46:7f:49:b1:db:a9:
         6d:73:15:89:36:3c:b2:e3:5a:d3:22:bf:d2:12:c1:34:be:38:
         c9:09:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:15 2026 by rpki-client