Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
File:                     GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json)
Hash identifier:          6XaRkSjqJyX6aTkcKQX6NawbICMMvL/wCyV8PEloJyY=
Subject key identifier:   6F:34:8D:DA:33:A0:0F:6E:BD:59:2C:E7:86:A4:D3:0D:EB:46:26:C6
Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22
Certificate issuer:       /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
Certificate serial:       1355
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
Manifest number:          133F
Signing time:             Sat 28 Feb 2026 17:04:12 +0000
Manifest this update:     Sat 28 Feb 2026 17:04:12 +0000
Manifest next update:     Sat 07 Mar 2026 17:04:12 +0000
Files and hashes:         1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: FFbq9wRIk2yuBn8hoCGeGC36ziJnLFPClp4S8MEheus=)
                          2: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=)
                          3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl
                          rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4949 (0x1355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522
        Validity
            Not Before: Feb 28 17:04:12 2026 GMT
            Not After : Mar  7 17:04:12 2026 GMT
        Subject: CN=69a3200c-6663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:3d:01:b5:97:52:4d:dc:4d:d6:f6:1f:bd:
                    f5:30:c5:c7:80:e9:22:77:ab:39:05:07:af:20:e6:
                    66:06:4e:8a:8a:fb:53:11:8a:b3:b1:ba:e0:60:12:
                    ed:99:3a:21:50:c0:6e:15:22:9d:80:bf:b2:d1:30:
                    df:a9:98:f0:e7:82:47:1e:bc:1b:3c:77:16:4f:9b:
                    92:0c:aa:9f:47:42:00:26:a8:f8:62:00:04:70:f1:
                    0d:9c:af:f6:a5:51:d1:5d:69:11:a1:32:ca:08:72:
                    55:c3:82:58:6a:03:6a:fa:51:fb:cd:f7:73:ec:58:
                    1c:2e:ae:0f:12:da:c3:e5:5f:12:88:51:8f:63:69:
                    63:a6:1f:cc:35:39:77:e2:2c:db:76:e5:9f:f3:d9:
                    11:0d:99:40:89:68:ec:9f:e1:61:96:34:ee:30:4f:
                    c0:3c:25:88:6b:37:25:33:bc:bd:9e:0c:c9:5a:77:
                    3e:4a:b0:cc:f0:25:c6:a0:d1:e5:b8:b2:c2:98:9c:
                    e8:cc:23:17:f2:1e:29:b2:bb:c6:a8:1e:c1:17:b5:
                    44:c0:99:e1:f0:ad:31:47:a8:e4:47:21:24:f0:c2:
                    56:3f:1a:7d:40:7f:ea:28:47:b6:ab:f8:f4:90:6c:
                    cc:e9:68:bf:e3:c0:4b:54:d6:e0:05:58:d0:3f:ab:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:34:8D:DA:33:A0:0F:6E:BD:59:2C:E7:86:A4:D3:0D:EB:46:26:C6
            X509v3 Authority Key Identifier:
                keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:20:48:3a:84:70:09:02:20:49:d6:f6:3a:4b:d8:7d:66:ea:
         c6:da:b7:e8:37:ce:08:df:bd:31:c8:81:fa:29:7f:d4:d5:c1:
         46:d4:c8:4b:00:54:54:62:df:47:b5:52:d1:df:b6:bd:92:cd:
         ec:3f:2a:1e:b8:51:39:16:fe:9d:82:55:c8:18:88:aa:46:e1:
         00:ee:9d:20:08:b1:5a:dd:2a:ed:5b:6a:c6:d8:5b:45:84:c4:
         e3:d0:d7:51:e8:b8:4f:3a:f2:b7:c8:4c:ae:42:61:2b:8a:6b:
         ea:d9:4c:f7:d7:fb:5c:bf:33:30:0b:82:a6:65:ea:4b:b7:d4:
         6b:6b:b8:72:7f:89:ac:a6:1b:e1:ef:84:e8:2f:39:7d:4d:06:
         a2:e2:72:4b:f1:a1:a3:ab:56:d5:3d:c9:64:b9:c0:00:e2:38:
         9f:02:87:bb:39:84:75:d3:30:66:1c:49:15:02:0b:84:93:34:
         d7:c2:a8:78:16:57:b1:bc:72:50:26:c1:89:f6:c4:94:e6:45:
         a5:29:56:c9:c1:d1:6e:ca:f1:1e:94:ed:a9:f9:e7:4f:e0:4c:
         85:4b:47:54:89:05:65:74:b7:66:61:5f:d5:e5:4f:4f:55:bf:
         eb:ff:c8:b9:76:b3:22:72:0c:fa:28:85:36:b7:12:2d:44:4d:
         9d:a0:92:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx
MzlBMDE1MjIwHhcNMjYwMjI4MTcwNDEyWhcNMjYwMzA3MTcwNDEyWjAYMRYwFAYD
VQQDDA02OWEzMjAwYy02NjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArds9AbWXUk3cTdb2H731MMXHgOkid6s5BQevIOZmBk6KivtTEYqzsbrgYBLt
mTohUMBuFSKdgL+y0TDfqZjw54JHHrwbPHcWT5uSDKqfR0IAJqj4YgAEcPENnK/2
pVHRXWkRoTLKCHJVw4JYagNq+lH7zfdz7FgcLq4PEtrD5V8SiFGPY2ljph/MNTl3
4izbduWf89kRDZlAiWjsn+FhljTuME/APCWIazclM7y9ngzJWnc+SrDM8CXGoNHl
uLLCmJzozCMX8h4psrvGqB7BF7VEwJnh8K0xR6jkRyEk8MJWPxp9QH/qKEe2q/j0
kGzM6Wi/48BLVNbgBVjQP6ts5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG80jdoz
oA9uvVks54ak0w3rRibGMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx
NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG
U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG
aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsiBIOoRwCQIgSdb2OkvYfWbqxtq36DfOCN+9MciB+il/1NXBRtTISwBUVGLf
R7VS0d+2vZLN7D8qHrhRORb+nYJVyBiIqkbhAO6dIAixWt0q7VtqxthbRYTE49DX
Uei4Tzryt8hMrkJhK4pr6tlM99f7XL8zMAuCpmXqS7fUa2u4cn+JrKYb4e+E6C85
fU0GouJyS/Gho6tW1T3JZLnAAOI4nwKHuzmEddMwZhxJFQILhJM018KoeBZXsbxy
UCbBifbElOZFpSlWycHRbsrxHpTtqfnnT+BMhUtHVIkFZXS3ZmFf1eVPT1W/6//I
uXazInIM+iiFNrcSLURNnaCSfw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:29 2026 by rpki-client