Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
File:                     gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json)
Hash identifier:          B5wS/OjNGahM3Lhm+0S1hEKpeHwekiQd9r5KUN8BQV0=
Subject key identifier:   09:10:01:47:99:37:46:85:29:2F:2F:61:C1:C8:75:6B:31:69:8B:C6
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Certificate issuer:       /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
Manifest number:          06F9
Signing time:             Tue 24 Mar 2026 21:45:05 +0000
Manifest this update:     Tue 24 Mar 2026 21:45:05 +0000
Manifest next update:     Tue 31 Mar 2026 21:45:05 +0000
Files and hashes:         1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: U4gaJUR4/cFhI5SO0/XGUY4kqsoHn5QNVQhHYjQICd0=)
                          2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: euM4m6y+HWeOgBOgRlKJkFwGXEQIRQ/gnzbJUpnYNh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
        Validity
            Not Before: Mar 24 21:45:05 2026 GMT
            Not After : Mar 31 21:45:05 2026 GMT
        Subject: CN=69c305e1-5001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:f6:ca:c5:2f:0f:a2:69:81:8a:38:71:c4:
                    40:fa:4e:3b:ee:31:eb:4e:0b:01:90:0e:7a:ad:51:
                    fe:14:14:71:05:63:c6:26:f8:8e:0a:29:2f:fa:7a:
                    ba:25:02:89:96:89:e2:ad:76:87:4e:1a:20:86:d4:
                    6e:05:a7:95:4b:99:57:52:ed:f6:a4:12:25:ad:da:
                    e7:a1:b3:03:5e:ab:10:b6:37:c2:f9:7c:ad:17:81:
                    6a:a2:f8:db:e7:35:85:d4:8a:92:6f:f7:37:c9:d0:
                    a9:55:cb:b7:fe:fc:b9:11:b8:d6:5d:19:0c:87:8f:
                    36:a1:0b:77:f5:a3:66:62:92:d2:e9:06:c2:33:60:
                    2e:07:90:e9:88:37:3b:78:46:82:29:8b:65:db:8c:
                    7b:a0:33:8a:45:58:ed:17:6a:45:04:96:cd:0b:d7:
                    35:ab:78:35:ff:48:0f:55:ad:39:f8:f1:95:1d:d9:
                    3a:9e:da:93:d5:7f:3c:17:26:c2:a3:f0:c3:81:06:
                    de:c8:08:60:1c:c2:d5:fe:55:9a:ad:9a:22:f4:bf:
                    64:f0:03:17:b5:5d:cd:d2:3e:79:61:02:ab:bd:d8:
                    66:93:3c:e4:a9:96:6b:43:f3:6e:09:7a:e1:6c:69:
                    d6:0c:14:f8:f8:82:5d:27:53:a5:46:d7:32:61:f7:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:10:01:47:99:37:46:85:29:2F:2F:61:C1:C8:75:6B:31:69:8B:C6
            X509v3 Authority Key Identifier:
                keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:34:26:51:fe:6c:dc:d5:11:d4:fb:01:e7:d3:71:46:9a:ea:
         8c:87:3b:e7:87:78:78:0f:f1:49:98:45:1b:26:f8:17:a6:d4:
         23:52:c4:15:8f:17:50:3c:1c:3b:f3:68:77:16:a3:86:cc:77:
         5d:d9:b2:93:94:54:07:54:fc:af:3e:35:70:14:95:72:a7:fb:
         71:23:49:b7:c0:46:d9:7e:27:72:da:67:27:b2:ba:bb:97:0d:
         60:99:fc:2c:d1:36:74:63:6c:70:cc:57:39:9e:14:03:64:10:
         4c:85:99:b4:44:0b:1c:20:c6:4f:e0:53:da:d6:00:51:1a:5c:
         c7:ce:ec:72:62:56:43:cc:9d:7d:e8:09:ff:a2:91:25:60:9d:
         45:f3:cc:72:d9:0b:d1:8f:94:da:17:ac:3d:42:69:2c:ad:1e:
         31:24:e3:ab:be:e0:cb:f3:35:91:fa:b9:95:74:15:ad:ef:b0:
         08:a7:6e:7c:cb:8d:23:cb:03:b5:93:86:42:ce:72:09:ca:30:
         4a:1e:33:44:dd:47:70:a4:46:4e:8d:48:39:a1:0b:98:c9:6c:
         6c:ae:c8:2c:f5:37:37:c1:e1:78:ff:72:b8:16:56:f1:25:73:
         50:b0:eb:96:07:14:ec:08:77:5b:ed:38:91:50:a8:f6:f3:16:
         bc:d5:0a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:23:52 2026 by rpki-client