Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
File:                     GQQ80InJeU-nj0WlTqtfK26Rju4.mft (raw, json)
Hash identifier:          SMMiBOW5DA+PyI/SReBpDXGeXClzDeHu7kDVHlVbJPQ=
Subject key identifier:   A9:D4:93:73:A4:2C:E4:52:ED:09:56:A5:2A:73:52:3D:28:35:77:42
Authority key identifier: 19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
Certificate issuer:       /CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Certificate serial:       0229
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
Manifest number:          0225
Signing time:             Fri 17 Apr 2026 02:28:23 +0000
Manifest this update:     Fri 17 Apr 2026 02:28:22 +0000
Manifest next update:     Fri 24 Apr 2026 02:28:22 +0000
Files and hashes:         1: GQQ80InJeU-nj0WlTqtfK26Rju4.crl (hash: yuOEW0rdEdOzRr0SsQDpxietq6txKgvVRqR0Abd2B5M=)
                          2: DFC9BF30F14E11ED992E1316C4F9AE02.roa (hash: cdBlSBtdfCYjrXcA3X/r+EWCzVjJm3NZy/fZKocHwx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
                          rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A57AA, serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
        Validity
            Not Before: Apr 17 02:28:22 2026 GMT
            Not After : Apr 24 02:28:22 2026 GMT
        Subject: CN=69e19ac7-3098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:21:4a:7c:16:fb:1f:3f:ff:04:27:de:35:
                    b9:a1:76:03:48:16:90:42:14:e8:9a:2a:e7:f2:b2:
                    da:b2:dd:fc:b2:e3:09:d7:f6:f5:49:84:71:b9:51:
                    f9:4e:d7:19:24:4a:32:d5:6c:6d:40:eb:3c:76:19:
                    97:4f:af:01:81:2e:fe:a8:60:2f:82:61:04:01:7f:
                    68:a0:76:50:94:f9:35:d3:9b:e5:5f:01:22:08:04:
                    ab:be:ed:e3:8c:22:1f:65:25:47:22:25:8b:66:5e:
                    c3:63:66:c1:68:fa:45:9b:7b:7c:bc:c4:40:95:5a:
                    db:2c:b2:f7:49:96:32:5c:1b:3f:39:b7:a6:91:a7:
                    a4:65:d8:89:be:db:e0:f1:cc:c1:59:02:b7:7f:90:
                    f8:07:fe:ca:d5:78:ea:bb:a5:bd:66:3f:97:53:fe:
                    e6:ff:9a:ef:58:65:48:1a:81:9e:a9:8e:a0:8f:e9:
                    4a:7c:7c:52:35:1d:38:f6:c1:1b:97:37:1c:02:09:
                    eb:0d:4e:18:43:69:8c:d3:5f:7a:de:bd:f8:05:7c:
                    ee:77:a3:eb:e9:5d:f5:b7:c8:31:21:1d:a5:35:bc:
                    e2:99:bf:38:db:86:18:c2:13:34:4a:06:99:d0:a3:
                    cd:34:20:d6:dc:51:b5:aa:12:b5:4e:21:e3:f9:cf:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D4:93:73:A4:2C:E4:52:ED:09:56:A5:2A:73:52:3D:28:35:77:42
            X509v3 Authority Key Identifier:
                keyid:19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:13:aa:7a:01:c3:c2:30:8e:fe:d1:3b:79:ce:63:10:96:
         3c:ca:93:52:47:04:51:de:c0:45:63:62:7e:0a:c0:9a:34:47:
         42:91:9b:fd:24:b2:0a:e3:b3:97:7c:a6:b1:a4:0e:ee:e7:4f:
         de:82:d2:3d:07:94:d7:67:88:1d:11:3c:19:68:46:7e:22:fa:
         c7:1e:3e:b5:a1:b3:ce:6e:9d:77:85:12:81:c9:ca:8f:67:00:
         d2:10:3d:82:96:f1:96:67:95:4c:cc:b5:03:d5:f9:66:95:f9:
         6b:6f:66:86:18:18:27:8d:73:1f:0e:48:63:3c:71:4f:d3:b9:
         60:ee:4d:0c:9a:b0:97:aa:23:f0:cd:2f:ce:af:e9:51:17:e6:
         b4:da:d2:ae:e2:79:16:d9:3a:5c:df:92:db:0f:3d:83:0e:92:
         90:f2:54:ac:df:6b:45:b9:37:55:a2:f2:ca:d2:d0:38:c4:2c:
         63:7c:6e:63:8d:25:8f:04:0f:8c:ba:28:b6:a2:86:35:ba:39:
         db:1f:fe:85:b6:ad:fc:b7:bd:f2:30:7a:6b:d2:09:89:ca:b7:
         26:8f:6c:6c:47:45:f2:ce:1e:7f:b4:00:d3:e8:77:ae:8f:69:
         4a:87:ce:30:8b:df:03:0d:b1:bf:38:c4:91:ff:e0:bf:a1:48:
         57:ed:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:10 2026 by rpki-client