Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
File:                     G_l27-qyMS6i2shrmKOYzwxb1vA.mft (raw, json)
Hash identifier:          KTmuQBdV3E1lrqHQqNiGGqY6ye5M6bH0B55zAem3SvY=
Subject key identifier:   E3:F4:CC:A4:BC:6A:03:DF:47:7D:BF:95:B2:7B:A8:47:83:7F:88:AD
Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0
Certificate issuer:       /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
Manifest number:          017A
Signing time:             Wed 25 Mar 2026 03:53:07 +0000
Manifest this update:     Wed 25 Mar 2026 03:53:06 +0000
Manifest next update:     Wed 01 Apr 2026 03:53:06 +0000
Files and hashes:         1: G_l27-qyMS6i2shrmKOYzwxb1vA.crl (hash: EP71b+JZAMJ8RCv/87Lnec+JVALEHjEOUFRf23Gx9IE=)
                          2: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (hash: WyIq/Hu944HeaDenR/ZUYZH/pTfb7Nh2xSZlqipqTz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0
        Validity
            Not Before: Mar 25 03:53:06 2026 GMT
            Not After : Apr  1 03:53:06 2026 GMT
        Subject: CN=69c35c23-f297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:22:c6:d1:8a:ab:72:1d:0f:ce:50:a7:d6:
                    42:f4:e0:77:b2:db:2c:dc:1f:90:e9:d1:7b:85:2f:
                    e7:95:a1:66:ee:ae:7a:fe:65:9c:b3:71:6e:9e:a0:
                    54:a8:18:55:65:3f:65:de:e5:0f:df:ba:96:d3:99:
                    d1:37:8a:14:14:f8:4a:c7:46:5b:23:e0:dc:d9:67:
                    76:22:80:2f:88:72:4f:94:38:8e:38:ab:f8:f9:fd:
                    bd:9d:3c:e1:28:8b:6d:65:83:40:28:c9:1d:28:7e:
                    63:62:72:4f:f1:0f:b8:89:7d:ea:e5:06:cf:2b:66:
                    85:a6:8f:21:d8:e8:e7:eb:48:79:f5:89:ad:95:8a:
                    ad:c6:4b:28:db:81:fb:85:bf:a8:0a:a8:52:58:22:
                    2d:e5:22:6f:b2:ef:2b:5e:4d:c7:12:ab:72:d7:45:
                    62:7a:a5:4e:82:a7:88:3c:55:df:8d:02:c3:d5:dd:
                    59:f2:ba:10:97:2c:71:59:34:c5:47:27:45:4f:8f:
                    80:9c:36:ce:c9:3f:8f:57:96:90:2c:0b:a8:74:dc:
                    b4:54:20:0f:29:c2:ea:29:54:f2:7e:f1:af:1a:7b:
                    ca:7f:b2:9c:9d:74:8c:30:04:8c:e4:ce:a6:ad:99:
                    9b:a7:9f:76:55:63:36:2c:c3:50:36:8f:8f:f6:82:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F4:CC:A4:BC:6A:03:DF:47:7D:BF:95:B2:7B:A8:47:83:7F:88:AD
            X509v3 Authority Key Identifier:
                keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ff:8c:5c:ad:d4:97:96:b0:8e:35:a1:b8:e1:32:56:7e:87:
         01:72:ef:c0:fc:85:5f:6b:63:54:c2:08:cb:61:7d:cb:c0:a4:
         85:9e:5e:d9:92:41:7c:cc:13:cd:73:d1:a5:fe:77:ae:36:db:
         33:19:30:d7:b3:23:1f:86:84:f1:f2:6e:d6:5b:67:2f:41:2b:
         c5:2b:5d:2d:14:6f:48:ef:cd:83:d8:cd:55:b6:9c:05:91:fa:
         0c:b5:5e:1d:7c:37:e7:61:7a:ef:00:20:3d:13:f0:d9:6e:30:
         59:f5:17:2e:96:98:f4:9c:7d:18:1b:22:45:0c:0f:77:7e:46:
         3f:90:d4:16:91:1d:2d:a1:37:70:6c:71:5f:7a:91:c4:05:51:
         6f:9b:b3:70:e5:ca:57:08:0c:fd:a6:dd:d9:19:ba:d8:31:51:
         2a:d0:22:fc:42:b0:33:e0:04:af:5e:ac:ff:9b:37:f6:16:62:
         bd:1f:a6:8d:38:b0:61:92:17:d9:2b:51:a3:2c:e0:0f:ef:48:
         86:8c:0b:c5:1d:d0:84:3c:af:4b:fd:61:6e:e4:ce:45:41:06:
         88:91:30:60:b8:8d:f7:14:5d:56:3d:7f:0a:4c:7d:13:e8:83:
         d3:fe:c1:0f:9e:26:50:ce:72:b5:a3:bf:86:27:69:56:79:d1:
         fc:4d:0c:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc3MkYxMTAvBgNVBAUTKDFCRjk3NkVGRUFCMjMxMkVBMkRBQzg2Qjk4QTM5OENG
MEM1QkQ2RjAwHhcNMjYwMzI1MDM1MzA2WhcNMjYwNDAxMDM1MzA2WjAYMRYwFAYD
VQQDEw02OWMzNWMyMy1mMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtSYixtGKq3IdD85Qp9ZC9OB3stss3B+Q6dF7hS/nlaFm7q56/mWcs3FunqBU
qBhVZT9l3uUP37qW05nRN4oUFPhKx0ZbI+Dc2Wd2IoAviHJPlDiOOKv4+f29nTzh
KIttZYNAKMkdKH5jYnJP8Q+4iX3q5QbPK2aFpo8h2Ojn60h59YmtlYqtxkso24H7
hb+oCqhSWCIt5SJvsu8rXk3HEqty10VieqVOgqeIPFXfjQLD1d1Z8roQlyxxWTTF
RydFT4+AnDbOyT+PV5aQLAuodNy0VCAPKcLqKVTyfvGvGnvKf7KcnXSMMASM5M6m
rZmbp592VWM2LMNQNo+P9oLsqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOP0zKS8
agPfR32/lbJ7qEeDf4itMB8GA1UdIwQYMBaAFBv5du/qsjEuotrIa5ijmM8MW9bw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzcyRi8xRTc3RTczMkUy
RUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1TNmkyc2hybUtPWXp3eGIx
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzcyRi8xRTc3RTczMkUyRUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1T
Nmkyc2hybUtPWXp3eGIxdkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALP+MXK3Ul5awjjWhuOEyVn6HAXLvwPyFX2tjVMIIy2F9y8CkhZ5e2ZJBfMwT
zXPRpf53rjbbMxkw17MjH4aE8fJu1ltnL0ErxStdLRRvSO/Ng9jNVbacBZH6DLVe
HXw352F67wAgPRPw2W4wWfUXLpaY9Jx9GBsiRQwPd35GP5DUFpEdLaE3cGxxX3qR
xAVRb5uzcOXKVwgM/abd2Rm62DFRKtAi/EKwM+AEr16s/5s39hZivR+mjTiwYZIX
2StRoyzgD+9IhowLxR3QhDyvS/1hbuTORUEGiJEwYLiN9xRdVj1/Ckx9E+iD0/7B
D54mUM5ytaO/hidpVnnR/E0M/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:56:19 2026 by rpki-client