Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
File:                     GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json)
Hash identifier:          zABaYKl9qZqEVSmUdST3tDrwU7tZjCH0RK9cKIfsCkc=
Subject key identifier:   39:53:FA:E8:A7:A2:3C:91:2D:9B:58:3A:65:76:37:85:2E:BC:0B:0B
Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
Certificate issuer:       /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Certificate serial:       1FCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
Manifest number:          1FB0
Signing time:             Thu 16 Apr 2026 15:57:03 +0000
Manifest this update:     Thu 16 Apr 2026 15:57:02 +0000
Manifest next update:     Thu 23 Apr 2026 15:57:02 +0000
Files and hashes:         1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: GWOxv+G9zgngCFT+imuUZCVZpeG0PtcYV3RgrbhJwvs=)
                          2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: GBIlmOLvNre3ocsgRTH5PrIHGYoCiO99a68cNbAelbQ=)
                          3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: C7P5AcEx090pAuIHt/BLFBDZ2T8kalGct8M8n/mgbS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl
                          rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8140 (0x1fcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
        Validity
            Not Before: Apr 16 15:57:02 2026 GMT
            Not After : Apr 23 15:57:02 2026 GMT
        Subject: CN=69e106cf-deb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:87:62:f4:c6:75:1a:f9:fd:d7:8f:52:09:
                    c7:16:aa:1c:fb:b0:1c:25:cb:b7:85:c3:93:a6:66:
                    ac:13:35:9c:73:d2:f3:d6:ae:3f:c4:97:12:29:a1:
                    b2:c3:b2:ba:fd:3a:54:ec:2d:fc:c3:f7:b5:07:4a:
                    60:ea:88:c4:bf:5a:46:e1:fd:de:3d:d6:7c:e2:ac:
                    44:39:87:72:34:0d:a3:75:24:f2:97:62:8d:40:19:
                    b1:11:06:07:df:42:83:f0:0f:2a:99:5d:0d:f3:f2:
                    fc:2a:e0:e4:2a:4b:20:47:94:e1:38:b7:de:af:66:
                    98:be:8e:10:88:25:61:26:5a:79:84:78:f0:05:76:
                    6a:10:96:42:40:62:9e:ec:2e:1c:9f:18:14:df:0d:
                    80:65:7f:4e:b8:9d:6b:22:a0:bf:fd:72:0d:13:ac:
                    a5:bc:48:b0:27:d3:7d:54:41:42:e6:90:aa:c4:2e:
                    a7:82:37:68:12:a1:38:16:67:91:fd:72:db:d8:35:
                    9d:c5:72:d4:67:08:60:86:76:f5:f1:fc:c9:68:4d:
                    70:26:93:8e:8c:a0:4e:84:40:b9:6c:95:9a:2c:b6:
                    90:ad:95:ac:96:71:9f:6b:69:2c:a8:f7:14:64:77:
                    6b:0d:46:2e:aa:78:36:de:fe:e5:59:95:27:ed:64:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:53:FA:E8:A7:A2:3C:91:2D:9B:58:3A:65:76:37:85:2E:BC:0B:0B
            X509v3 Authority Key Identifier:
                keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:c5:ff:24:4e:1b:0e:71:bc:e3:32:ff:a8:40:4d:67:aa:
         c1:7f:6f:ed:36:0f:e1:42:33:c4:a9:fd:bf:af:ae:54:b4:14:
         b6:75:40:ba:01:47:ba:8b:b0:32:71:59:f5:81:40:aa:4f:1b:
         3a:6f:cd:66:3c:d5:64:0f:ea:c8:07:46:74:f4:78:fe:55:f9:
         2d:21:8f:18:06:32:b1:16:5e:f4:25:54:2d:30:2e:6f:2b:91:
         13:36:3c:67:3f:93:0c:66:36:ba:5f:9e:9a:27:f0:5f:3f:3e:
         e5:0d:45:fe:ff:03:98:4b:b4:04:3f:9a:a7:36:23:da:1a:22:
         59:2b:d0:03:51:c4:98:d9:58:1d:c5:06:17:ae:04:9c:5c:52:
         82:be:ef:a0:2d:1d:76:13:65:78:78:53:e6:50:f2:e2:8a:c4:
         61:5b:c0:d8:3a:98:a5:0c:a0:80:a0:41:e0:63:87:4e:53:d8:
         4f:f1:74:59:46:85:06:95:d1:2d:a4:96:be:07:10:e8:5d:da:
         27:84:23:29:7f:2c:e5:30:58:da:18:9d:8d:ab:94:0b:c1:98:
         80:37:49:03:a3:02:3a:ec:f5:ad:4a:c8:fd:a5:88:e2:45:1a:
         df:4a:96:af:6c:8f:73:76:bd:c3:a5:81:b0:aa:f3:9e:d4:2d:
         86:ef:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:50 2026 by rpki-client