Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
File:                     gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json)
Hash identifier:          +q+wEVmF/edQL3hlyHZD6Qxp5elr1NLSmYud3c+07xI=
Subject key identifier:   C0:0C:E2:61:62:05:B5:D9:82:8A:94:CC:ED:20:B9:77:74:58:4A:22
Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D
Certificate issuer:       /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
Certificate serial:       1D06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
Manifest number:          1CEF
Signing time:             Thu 16 Apr 2026 16:06:16 +0000
Manifest this update:     Thu 16 Apr 2026 16:06:16 +0000
Manifest next update:     Thu 23 Apr 2026 16:06:16 +0000
Files and hashes:         1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: IozqLbbHJG7GgILD8g9TN9ckBClXLqHwAWKg2BNYaYY=)
                          2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: 83YZzYxEIIXyh0cYGM9jrxbckZK92FPWPHsnsvXXSF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl
                          rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7430 (0x1d06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
        Validity
            Not Before: Apr 16 16:06:16 2026 GMT
            Not After : Apr 23 16:06:16 2026 GMT
        Subject: CN=69e108f8-09d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:0e:58:e6:98:3f:8d:48:56:1f:df:02:51:
                    cd:96:69:55:14:f4:be:d9:8b:9e:8b:b4:48:69:3f:
                    27:91:ff:78:86:17:4c:6d:9f:92:9e:2b:60:b6:bc:
                    6e:bc:d6:00:8a:88:d0:d5:82:aa:32:a2:70:d0:90:
                    8b:3d:91:ef:76:d9:99:1a:9e:f1:90:ad:b5:c3:62:
                    d6:6c:2d:93:17:86:c8:ef:47:94:88:16:b0:43:a1:
                    6a:84:96:5e:52:44:3e:40:1e:d8:46:d9:14:40:a6:
                    e6:06:2e:66:fb:0f:e1:1b:73:00:ad:78:f1:91:35:
                    87:40:2a:6b:e8:74:a8:b4:fe:46:7f:56:73:bb:4f:
                    a2:ed:38:e8:4d:ba:fc:6f:bd:2f:c0:61:b5:ca:a5:
                    1f:d9:71:c1:2e:d9:9a:6f:7b:81:21:47:05:67:93:
                    9a:4e:37:d2:82:35:73:d3:93:c5:45:d4:7a:cf:04:
                    3b:b0:e0:95:17:aa:4b:8a:44:32:aa:67:cb:0c:4a:
                    bc:b3:eb:96:16:26:53:84:b9:48:26:61:16:ab:15:
                    4e:17:d7:7f:7a:48:45:b4:c9:43:08:13:46:08:8c:
                    b1:67:dd:bd:35:84:67:5f:12:8d:76:eb:d9:cb:87:
                    b4:f7:e5:a4:a9:7b:8b:ea:e4:9c:ff:44:0c:c2:2a:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0C:E2:61:62:05:B5:D9:82:8A:94:CC:ED:20:B9:77:74:58:4A:22
            X509v3 Authority Key Identifier:
                keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0b:83:30:b3:51:39:d8:2b:be:90:f3:72:c6:d3:04:3f:a7:
         50:69:6c:aa:7d:95:ac:9c:ec:2f:16:70:e0:49:ae:c3:1c:fc:
         31:d9:de:cd:4e:38:91:fd:c7:ac:1c:88:47:b0:cb:46:a1:f7:
         eb:c0:47:e4:80:0d:e8:7c:6a:34:3b:56:99:e4:7b:0e:5f:8e:
         f7:bd:74:cc:01:5d:00:40:98:90:21:17:4d:8e:2a:b2:bc:37:
         e8:ba:12:32:f4:0b:d2:34:9c:67:38:a0:8b:e3:04:19:51:61:
         27:32:fc:10:97:60:e6:f4:e7:aa:ae:4c:8c:a3:9d:4b:e4:78:
         0c:ca:08:03:ee:4e:86:81:b5:12:c9:48:86:31:53:31:c4:01:
         54:45:c9:44:99:29:1f:3f:2d:04:0d:b3:35:eb:2f:42:70:a0:
         ee:ea:ce:3d:c8:4e:37:33:4e:f1:7f:01:72:31:5c:a0:35:83:
         b8:94:48:70:07:7a:04:39:e0:f8:47:6d:7b:68:57:3a:46:a8:
         2d:40:fd:45:92:59:94:3d:2a:c7:8f:d5:fa:85:5e:24:0c:d3:
         1a:7c:63:20:f2:e4:9d:f9:7b:64:85:20:dd:9c:5b:38:17:70:
         fb:cd:2a:2f:9e:97:e2:b1:06:99:0d:aa:64:50:e2:d6:03:6d:
         08:3c:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:38 2026 by rpki-client