Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
File:                     1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json)
Hash identifier:          UzsvDKReP6oKeC1MQ+Cx/YWDwScoWny3ocOjmtD1Jkk=
Subject key identifier:   37:E1:9A:9B:52:CA:0F:64:E1:CD:89:8F:B0:B3:AA:61:55:FA:26:C0
Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22
Certificate issuer:       /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
Manifest number:          01A8
Signing time:             Wed 25 Mar 2026 03:23:51 +0000
Manifest this update:     Wed 25 Mar 2026 03:23:50 +0000
Manifest next update:     Wed 01 Apr 2026 03:23:50 +0000
Files and hashes:         1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: MPqE0ZZot67LzzxmIeSRGZmtMxZfgcWtL0ntn8R3Cjo=)
                          2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: jklc5FCt+euFYSuGUqrd6cbV/UlBPA4BDg0VukL1DA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl
                          rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
        Validity
            Not Before: Mar 25 03:23:50 2026 GMT
            Not After : Apr  1 03:23:50 2026 GMT
        Subject: CN=69c35547-0ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2e:37:69:c3:f2:f1:27:28:81:ac:70:69:3b:
                    ea:37:da:92:6d:35:39:ec:61:0a:c6:6e:9f:06:92:
                    08:00:27:90:f9:65:ad:de:dd:c0:0f:b8:67:71:b2:
                    3c:ac:05:86:fe:ba:5b:4e:87:e3:58:2f:be:4f:b1:
                    48:26:bc:69:54:5c:21:65:93:f4:01:7b:a7:f6:fe:
                    47:7f:08:ec:9e:08:d0:5a:be:8f:ab:32:2e:1a:63:
                    9c:b1:e5:d4:48:43:d4:36:d0:02:62:e0:17:cc:c2:
                    15:71:e0:2e:dc:ae:78:b9:c7:ef:53:d6:c2:79:30:
                    68:47:98:d2:1b:66:b6:ed:95:1f:ca:14:a0:73:14:
                    0a:3c:54:95:dd:f5:b1:af:d3:23:ce:f2:01:7e:2d:
                    b5:12:02:27:54:af:13:a5:b5:93:3c:99:d7:74:a1:
                    b1:61:aa:b7:21:29:30:08:0e:96:2b:9f:b3:ce:30:
                    e2:ae:e0:a9:a1:3c:80:b1:10:b3:fd:f3:71:cd:e8:
                    54:61:b6:94:b8:6d:23:02:28:5c:53:fe:49:6b:3b:
                    4b:ea:62:ce:ef:f9:df:28:14:77:8b:c6:28:a2:20:
                    45:ca:d6:ab:6f:be:c0:04:70:ec:ca:3a:19:60:ca:
                    f0:16:4f:fc:40:5d:82:86:d1:2e:62:1c:b7:74:23:
                    0f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E1:9A:9B:52:CA:0F:64:E1:CD:89:8F:B0:B3:AA:61:55:FA:26:C0
            X509v3 Authority Key Identifier:
                keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:ce:2f:ec:d5:12:51:f7:9d:9d:12:3e:3c:dd:18:d7:d1:
         1b:46:98:17:6f:5a:90:74:f5:51:b1:3a:57:e1:39:98:04:55:
         cf:ff:0b:5d:ad:18:98:24:b0:19:2e:68:22:51:d1:f2:14:cc:
         87:b8:55:1f:63:e3:c8:ae:0c:f4:eb:ef:b2:34:6b:7c:15:11:
         0f:54:05:23:3a:64:f1:73:09:50:59:7e:46:86:10:86:ed:d0:
         a4:5a:3c:7e:75:7d:c7:97:ff:2c:7b:24:1b:f6:55:73:62:e4:
         96:09:4f:05:57:2c:0c:9b:f3:4e:d2:3f:39:29:66:90:09:47:
         e2:f0:b0:15:4b:5e:39:64:bf:a5:56:a6:58:a6:54:73:6c:02:
         ac:e1:14:bd:70:86:65:d1:76:24:2b:22:cc:47:be:bb:e2:49:
         fc:18:a9:13:f8:04:f1:34:db:98:3c:e8:57:9a:a4:4b:ec:17:
         53:4d:9e:8b:33:5a:c8:1a:2a:b8:37:e5:60:2e:11:8d:6a:a2:
         9d:aa:e2:df:de:d0:0d:c0:73:fe:72:62:f5:08:ac:07:ce:be:
         98:7b:e5:b7:39:4f:59:44:6b:f4:a2:3f:cc:63:bd:53:bb:fe:
         c0:50:73:3d:8b:3f:9e:94:f8:96:81:1d:f7:b7:e3:94:65:95:
         f5:15:41:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA2OTUxMTAvBgNVBAUTKEQ2OUY4NjUwRDk3QTUyNEMyOTk0NTNDQ0I0OEQ3N0I0
RTY1RkRGMjIwHhcNMjYwMzI1MDMyMzUwWhcNMjYwNDAxMDMyMzUwWjAYMRYwFAYD
VQQDEw02OWMzNTU0Ny0wZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3S43acPy8ScogaxwaTvqN9qSbTU57GEKxm6fBpIIACeQ+WWt3t3AD7hncbI8
rAWG/rpbTofjWC++T7FIJrxpVFwhZZP0AXun9v5HfwjsngjQWr6PqzIuGmOcseXU
SEPUNtACYuAXzMIVceAu3K54ucfvU9bCeTBoR5jSG2a27ZUfyhSgcxQKPFSV3fWx
r9MjzvIBfi21EgInVK8TpbWTPJnXdKGxYaq3ISkwCA6WK5+zzjDiruCpoTyAsRCz
/fNxzehUYbaUuG0jAihcU/5JaztL6mLO7/nfKBR3i8YooiBFytarb77ABHDsyjoZ
YMrwFk/8QF2ChtEuYhy3dCMPVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfhmptS
yg9k4c2Jj7CzqmFV+ibAMB8GA1UdIwQYMBaAFNafhlDZelJMKZRTzLSNd7TmX98i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDY5NS83QzY3ODE0OEEw
QzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVrd3BsRlBNdEkxM3RPWmYz
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDY5NS83QzY3ODE0OEEwQzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVr
d3BsRlBNdEkxM3RPWmYzeUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFUvOL+zVElH3nZ0SPjzdGNfRG0aYF29akHT1UbE6V+E5mARVz/8LXa0YmCSw
GS5oIlHR8hTMh7hVH2PjyK4M9OvvsjRrfBURD1QFIzpk8XMJUFl+RoYQhu3QpFo8
fnV9x5f/LHskG/ZVc2LklglPBVcsDJvzTtI/OSlmkAlH4vCwFUteOWS/pVamWKZU
c2wCrOEUvXCGZdF2JCsizEe+u+JJ/BipE/gE8TTbmDzoV5qkS+wXU02eizNayBoq
uDflYC4RjWqinari397QDcBz/nJi9QisB86+mHvltzlPWURr9KI/zGO9U7v+wFBz
PYs/npT4loEd97fjlGWV9RVB7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:19 2026 by rpki-client