Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
File:                     gyiT0KdSAaIToGRFUyA9Aac8-v8.mft (raw, json)
Hash identifier:          Q/hcjFXsl5rBmsSZk2CYndLKChAVKYUqjPsjgpYraLs=
Subject key identifier:   B3:EA:08:5D:34:D3:B2:78:8D:FA:B9:54:E7:18:12:0F:C4:C2:EF:A3
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Certificate issuer:       /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
Manifest number:          91
Signing time:             Fri 17 Apr 2026 07:12:06 +0000
Manifest this update:     Fri 17 Apr 2026 07:12:06 +0000
Manifest next update:     Fri 24 Apr 2026 07:12:06 +0000
Files and hashes:         1: gyiT0KdSAaIToGRFUyA9Aac8-v8.crl (hash: l2/1xd/ma0xIUl2ctjCXSHB6gojsdNmbrFTMqEwBGcM=)
                          2: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (hash: R+yKKJFZUpnxPKJ79z1OaMA2OB1A9rsyasLFDhiY1WY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
        Validity
            Not Before: Apr 17 07:12:06 2026 GMT
            Not After : Apr 24 07:12:06 2026 GMT
        Subject: CN=69e1dd46-1e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:26:5b:05:0f:5a:fe:3d:f8:56:69:0a:5f:
                    95:08:5e:69:ed:be:33:cc:33:d8:b0:35:b9:e1:1d:
                    39:91:ff:20:c8:99:8d:cb:62:02:47:5c:34:d7:9c:
                    7b:93:a2:9c:15:b2:dc:59:db:8a:68:20:f2:9f:82:
                    da:8a:d3:97:a4:50:a0:5f:a4:10:52:12:bd:51:35:
                    b7:d4:fa:47:64:e4:1c:af:7c:1e:a2:66:af:32:77:
                    97:ad:83:5d:90:a3:e7:61:53:6a:d8:bc:2e:86:c6:
                    70:69:fb:4b:a5:6e:18:2f:51:bc:07:35:27:ba:5b:
                    ba:7f:3c:c3:a8:fa:a0:dc:16:e7:44:ce:83:68:cc:
                    16:56:5a:ca:f0:ac:71:91:88:45:59:bb:76:74:82:
                    af:c5:d4:13:9f:0d:a2:84:2b:93:01:bb:62:5a:9f:
                    6a:46:4c:af:a1:a2:a5:3f:56:6e:b4:47:b5:49:40:
                    80:4b:75:6b:04:09:0f:36:0d:c6:48:cc:67:3f:f4:
                    c5:da:82:cf:2b:44:71:a5:b8:fd:d0:6e:23:40:ca:
                    05:9f:9e:e5:2d:7f:96:e4:77:0c:c2:52:0e:1a:d9:
                    45:09:2b:ee:d7:e1:e3:70:98:88:97:e3:44:43:78:
                    ff:0c:18:5c:37:f3:d2:87:2a:c9:13:19:86:e5:a2:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EA:08:5D:34:D3:B2:78:8D:FA:B9:54:E7:18:12:0F:C4:C2:EF:A3
            X509v3 Authority Key Identifier:
                keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:77:53:93:92:a9:d2:0c:77:73:98:48:5d:79:5c:ce:20:be:
         e2:72:4a:69:56:f6:db:31:08:d0:9e:f4:37:5d:3f:94:81:fd:
         33:57:c6:d5:cf:17:e1:fc:19:a9:68:93:d2:49:40:f1:37:b4:
         6d:e6:d5:01:5c:45:ef:86:16:55:1a:23:61:ec:89:d5:4c:9c:
         86:8b:56:14:e3:29:a6:9e:41:2f:70:ce:e5:69:82:cf:20:0f:
         58:4c:2f:fc:01:86:91:d3:ac:49:40:16:32:94:de:ae:56:b5:
         e1:fc:c9:21:16:18:81:52:1c:67:f4:53:11:a4:29:e8:a3:f5:
         2b:62:d2:3d:31:a7:68:57:e4:b3:00:54:0b:e0:6c:46:b3:62:
         de:bd:cc:b2:15:06:b2:9e:22:e6:c2:62:54:cb:9e:ce:b3:08:
         bd:d5:30:16:94:70:44:22:c6:6e:0f:0f:fa:0b:48:d3:b4:62:
         a2:dc:96:5d:ac:1d:e7:d9:d8:28:9e:c9:e9:62:f8:ac:cc:bb:
         3d:ab:25:1b:28:8d:22:3d:02:bb:7d:e2:f2:71:bd:62:03:fa:
         3f:03:95:44:40:7f:f2:e1:53:45:e2:eb:08:71:57:4a:4f:b1:
         83:78:ae:6f:b4:6c:16:bf:eb:35:7a:eb:75:b0:2d:30:0a:e0:
         8f:96:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:03 2026 by rpki-client