Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
File:                     Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json)
Hash identifier:          T43wzDtT8GTWzNuxxqRPYaPaCkhy86J5bAtHfOtuGRM=
Subject key identifier:   42:2F:99:D2:5E:5E:F5:6C:F5:C0:54:3B:14:BE:67:E4:7D:F1:A8:9D
Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
Certificate issuer:       /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
Manifest number:          06D1
Signing time:             Thu 16 Apr 2026 22:09:24 +0000
Manifest this update:     Thu 16 Apr 2026 22:09:24 +0000
Manifest next update:     Thu 23 Apr 2026 22:09:24 +0000
Files and hashes:         1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: 65nbM7T63R7/qqd33ynoTBtVArld6eanC1hQZB7kPSY=)
                          2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: l03CMNRDrfsVu/nqV6YLkSX63V5bCBBVUQMYv2mybxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
                          rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
        Validity
            Not Before: Apr 16 22:09:24 2026 GMT
            Not After : Apr 23 22:09:24 2026 GMT
        Subject: CN=69e15e14-5c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:bd:77:d4:38:bc:a0:18:de:31:3d:03:fe:
                    2b:a4:35:37:83:6c:c6:8a:da:19:02:fa:2f:a2:50:
                    b5:a9:a9:78:35:70:cd:bf:48:58:1f:89:04:a9:31:
                    29:f7:7e:98:6b:37:75:ad:cd:de:89:eb:9a:30:9f:
                    74:54:06:da:1b:bd:4e:83:78:6d:3f:33:eb:4c:13:
                    28:2b:2e:4e:63:e6:30:d2:2d:5b:f1:96:20:4b:80:
                    f7:58:fb:df:ed:3f:d2:40:e2:7f:d5:e6:b4:da:ae:
                    85:e6:c9:50:0c:18:37:60:19:59:df:76:56:b3:91:
                    7d:dc:21:65:fb:1f:94:23:0e:00:92:a8:d9:30:49:
                    d3:84:a3:eb:07:6b:66:57:7e:10:e3:b5:1b:30:dd:
                    f7:3d:6a:e5:45:b5:6b:4f:83:fb:06:81:f8:6f:6c:
                    53:72:d6:62:61:c8:9c:da:d8:63:c7:6b:3e:61:35:
                    d2:68:39:88:69:25:86:2f:67:8e:79:ff:31:28:1d:
                    32:7e:dc:ec:7f:f6:29:d4:09:6e:df:b5:0c:8d:ce:
                    9d:72:60:be:0f:c9:fc:d3:b1:5c:f2:58:1c:0a:23:
                    c2:6a:ed:f0:0d:f5:b4:38:7d:c3:c1:55:ff:d3:df:
                    62:18:42:e0:21:a1:26:cd:ae:9e:ff:38:2b:f6:cb:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2F:99:D2:5E:5E:F5:6C:F5:C0:54:3B:14:BE:67:E4:7D:F1:A8:9D
            X509v3 Authority Key Identifier:
                keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1e:28:9d:27:ac:19:fb:6b:d6:9e:03:94:85:0f:be:41:6d:
         f4:5b:63:ca:b4:80:11:52:a7:2f:03:4a:48:5c:66:7d:a9:a3:
         66:f8:fa:7b:b2:d8:22:e6:c5:e1:41:c8:cb:64:72:1e:88:5f:
         b4:6b:a0:cd:06:eb:fe:2d:55:fb:39:84:9c:6c:53:ad:fa:c8:
         8c:cd:5b:4f:17:7c:55:01:96:07:be:a8:97:57:cb:9b:9b:f5:
         c3:d4:38:4c:79:fb:13:f6:ea:6a:60:c9:5e:9c:06:48:31:7c:
         29:b5:29:a7:2f:f1:88:6d:43:4c:d2:41:8f:f8:12:3d:b5:f1:
         9b:79:90:29:64:07:b3:b3:e4:b4:4f:81:98:f8:0c:8a:da:d7:
         7b:8d:48:ab:29:28:33:00:10:9c:53:89:ca:60:dc:bd:10:e8:
         d8:d3:f7:62:af:9f:4f:97:e1:05:65:e8:3f:ae:59:1e:bb:ae:
         ab:8c:70:e7:37:bf:05:a7:8f:c9:1b:30:84:bb:67:d8:9d:92:
         cd:97:c3:b5:a1:9c:65:f2:b6:62:91:91:28:ae:15:f9:f5:fd:
         73:35:23:a8:f5:7f:0f:21:77:e3:e7:a9:1a:b9:bf:b6:7d:14:
         53:dc:e9:24:37:23:ed:74:a3:67:11:1c:95:f7:0d:94:ab:11:
         5b:c7:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:12 2026 by rpki-client