Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
File:                     Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json)
Hash identifier:          EcTk2m79Om1n0Eyv17y1cqfv+1zS+0o6QSbY3XBU1Uk=
Subject key identifier:   39:F1:FA:12:A3:38:F1:7B:65:B1:FC:46:41:86:56:EA:E4:AA:FD:8C
Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0
Certificate issuer:       /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0
Certificate serial:       0517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
Manifest number:          0507
Signing time:             Tue 24 Mar 2026 23:21:55 +0000
Manifest this update:     Tue 24 Mar 2026 23:21:54 +0000
Manifest next update:     Tue 31 Mar 2026 23:21:54 +0000
Files and hashes:         1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: GA1kVpQkzT/8XTiF65YPfMZ8BQ6Z/ohe4v6pmzvP/9w=)
                          2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: FggND59kHX3eor/ZmBsPBLrZ4G2nM/VFmN6jLu+8rrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl
                          rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0
        Validity
            Not Before: Mar 24 23:21:54 2026 GMT
            Not After : Mar 31 23:21:54 2026 GMT
        Subject: CN=69c31c93-28c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:d5:d0:b7:d1:d4:17:07:5b:73:0d:f7:98:
                    16:5e:fe:6c:13:64:57:70:b9:40:0a:ae:16:90:06:
                    43:e7:8d:c8:7a:24:84:6a:7e:99:dc:a4:bd:64:33:
                    52:e8:53:41:80:f7:21:5c:ff:94:60:ec:62:e7:50:
                    18:92:05:4b:6b:e1:ac:d2:f7:0f:46:c9:36:ec:29:
                    9a:8c:ea:75:f1:ab:66:f2:a5:41:cb:6c:b7:7e:89:
                    e7:b1:6a:31:ee:8f:8a:04:e8:cb:be:a9:19:d0:aa:
                    cf:57:87:70:eb:4a:1d:e7:db:6c:df:6b:b6:7d:a5:
                    ef:e8:04:22:23:48:9f:bd:a8:ec:f5:75:98:90:07:
                    1b:31:60:c4:df:e6:27:8c:45:7b:1e:18:36:67:10:
                    5b:48:59:6b:44:2b:aa:a6:fe:a3:cf:4d:ff:83:7b:
                    76:a9:ff:32:e7:2e:3c:1a:50:5b:58:b5:dd:1e:e7:
                    17:5d:8b:2e:54:e1:f0:c6:a5:d3:8a:43:18:63:33:
                    76:37:c8:d8:6a:fb:4f:a5:74:f0:87:74:97:66:9b:
                    25:ea:d8:c6:60:24:e1:aa:3f:b8:89:14:28:9c:13:
                    dc:a4:0d:88:de:c8:24:ff:8c:5a:85:2b:84:2f:33:
                    e6:19:23:2e:17:e8:c7:9f:fd:5a:de:95:33:c8:d6:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F1:FA:12:A3:38:F1:7B:65:B1:FC:46:41:86:56:EA:E4:AA:FD:8C
            X509v3 Authority Key Identifier:
                keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6b:35:46:3d:ea:bb:15:65:d2:2b:08:ac:b1:db:45:3b:ec:
         b0:e0:9d:b1:da:02:f8:a3:13:d7:6f:fc:f0:6b:9a:27:57:f9:
         59:0e:68:5e:60:20:21:02:d8:24:30:bf:9f:70:98:73:9d:af:
         bd:44:93:6f:28:de:53:7f:52:52:0c:09:04:16:b5:4b:29:5a:
         99:86:ee:63:1b:e0:62:f3:30:61:53:7c:9a:c0:3a:ae:25:f9:
         8e:87:c7:e6:64:6f:1c:c4:c8:3b:fc:dd:c6:e5:90:89:aa:fb:
         bc:2e:ac:f7:21:a7:ce:43:b2:56:6e:1b:9d:01:3a:9a:41:7a:
         7d:d1:37:e9:46:ae:b5:2b:78:5d:f0:52:ac:85:7e:b3:c2:f3:
         06:32:96:f0:15:2c:99:e1:0f:29:3b:e5:93:14:51:e3:14:23:
         63:5a:b8:89:d9:7f:88:ba:96:b2:68:13:a9:51:64:2f:d1:d0:
         c6:5b:e4:0e:2a:51:6c:21:72:e9:55:be:4c:34:33:87:7a:94:
         05:37:5d:68:2a:95:c4:d9:a6:ed:4a:b7:a8:f6:d7:7e:fa:eb:
         24:ca:e0:40:2e:78:86:c5:e2:3c:f8:ac:a2:67:f2:0a:97:d4:
         bb:f1:f5:0a:ba:5d:ba:5b:4c:47:d3:90:23:a3:e7:c3:b8:30:
         26:1e:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:20 2026 by rpki-client