Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
File:                     GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json)
Hash identifier:          dwf6pxtUt3u9to6kQtNg7DgcWBJp6cHdBCQKRLlx25k=
Subject key identifier:   B9:59:54:27:B3:CA:31:70:22:F4:CE:42:0B:28:07:48:90:1F:7B:74
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Certificate issuer:       /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
Manifest number:          0223
Signing time:             Fri 17 Apr 2026 01:50:59 +0000
Manifest this update:     Fri 17 Apr 2026 01:50:59 +0000
Manifest next update:     Fri 24 Apr 2026 01:50:59 +0000
Files and hashes:         1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: jcWaE6dCo3ZN7eFyeVgykSyGZVygxwnICyEBDnxDLzQ=)
                          2: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=)
                          3: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=)
                          4: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=)
                          5: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=)
                          6: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: lJOk2wev4MkzbOS+niqS+uVfAej8rZrkP6By/CI08sY=)
                          7: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: SPaCgDejvUx7FptJCD5UIANcqzATtL9+9X2RUGgGItI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
        Validity
            Not Before: Apr 17 01:50:59 2026 GMT
            Not After : Apr 24 01:50:59 2026 GMT
        Subject: CN=69e19203-a762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:b4:db:f2:fa:fb:95:07:98:40:9e:8b:28:
                    4f:d1:b5:0a:d2:bf:7c:0c:73:89:9b:5e:a0:1c:23:
                    b1:6b:52:60:f4:11:b7:65:a9:58:1d:d6:95:07:9c:
                    df:c9:4e:0e:1d:5a:35:6c:13:26:06:95:dc:c3:10:
                    bb:45:c7:a7:0b:93:a5:c6:40:e8:a7:2e:a9:8e:d7:
                    8f:49:6c:87:cb:98:28:4a:c3:ab:38:69:f7:b5:6b:
                    bf:5b:7e:ee:15:f0:f0:c2:0a:65:3d:ff:ff:95:93:
                    ce:44:d7:f6:5b:dc:bf:eb:b2:3b:db:07:4c:73:f1:
                    8e:3e:70:0d:f0:0a:97:f8:5e:c2:6b:8c:eb:4a:27:
                    22:aa:35:92:4d:26:f0:aa:29:9e:3d:c8:2b:30:19:
                    00:1e:5a:d1:fa:e7:ca:1d:cb:e0:f1:59:e8:8c:f7:
                    ae:5d:cc:bb:bc:ca:63:6b:dc:48:24:e6:1d:b9:38:
                    f6:79:84:31:dd:9b:54:84:0b:f6:de:ad:25:90:9e:
                    2e:c1:46:bf:4f:96:b7:b6:79:61:36:4b:d5:ff:9d:
                    5b:05:d3:c7:e3:2a:c3:52:7c:33:34:10:32:06:cd:
                    3e:46:05:23:22:bd:a8:c2:b4:63:41:95:5b:a0:a9:
                    63:46:72:10:04:93:94:00:64:de:48:d5:5b:76:88:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:59:54:27:B3:CA:31:70:22:F4:CE:42:0B:28:07:48:90:1F:7B:74
            X509v3 Authority Key Identifier:
                keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:07:5e:7e:e7:08:ee:eb:1b:ab:6f:3a:e3:c8:da:30:99:15:
         aa:82:c6:6b:c2:ec:2f:b1:ec:1c:bc:07:4b:17:0b:a9:9b:07:
         ac:e6:33:97:a6:7e:a0:d3:86:f7:3c:55:6c:1f:a9:2d:f4:42:
         15:b1:03:2e:a4:46:07:52:86:7a:d3:c1:db:5d:64:92:24:c0:
         63:42:1f:c1:64:e4:88:95:83:06:23:b4:3f:cb:26:b1:a3:a1:
         29:d7:fe:84:0f:1e:75:da:a0:ab:0c:1c:b9:da:e0:55:d4:6f:
         0b:e2:a8:6e:f5:b0:54:14:f8:98:c7:07:c0:d3:f8:ef:63:d2:
         bd:2f:be:a8:81:60:6e:d8:5c:65:c1:79:8d:23:f0:af:8b:56:
         9f:9e:65:f6:1e:ab:24:ca:ef:e9:25:ff:2a:12:f7:40:05:67:
         51:06:a8:f2:9c:df:ad:fe:1f:88:04:40:d9:0b:cc:8f:e1:1e:
         dc:73:09:a0:1f:e0:fe:61:e9:67:4e:c7:d4:ef:0b:3f:4e:09:
         68:17:42:99:5c:e6:bb:ab:dd:bf:35:ff:71:07:67:e0:87:cf:
         17:97:d9:ac:a9:c3:2b:52:de:5a:52:2c:8a:a9:c8:aa:f1:4a:
         de:e2:17:ba:8c:2c:ca:30:cd:0e:76:b2:e6:6b:27:76:54:66:
         ca:f3:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:52 2026 by rpki-client