Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
File:                     GvPInPFH8v61HarolX25nThyY7g.mft (raw, json)
Hash identifier:          Yba3dLBxQze0kT92V7MNi4+2DTJH05sD3KBfdgMy67w=
Subject key identifier:   6D:88:2E:30:D3:32:49:6B:D2:B8:CB:E9:8D:13:1F:B0:8C:BC:63:83
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Certificate issuer:       /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
Manifest number:          01F1
Signing time:             Fri 17 Apr 2026 03:11:10 +0000
Manifest this update:     Fri 17 Apr 2026 03:11:09 +0000
Manifest next update:     Fri 24 Apr 2026 03:11:09 +0000
Files and hashes:         1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: lw7/czCSSQi8v9UiqkwOaMseVK56LJh3ompg50itSdg=)
                          2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: 0ZHjGWE0UDuC9zS19ynStMtVYcZ+3d8+hgVY5JE+ZsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
                          rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD09B, serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
        Validity
            Not Before: Apr 17 03:11:09 2026 GMT
            Not After : Apr 24 03:11:09 2026 GMT
        Subject: CN=69e1a4ce-5f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:27:95:1f:20:f4:88:97:0a:f2:4c:7e:26:
                    37:c1:31:30:ff:25:e2:07:5a:d2:51:ca:39:08:e4:
                    70:b2:43:6a:9c:d5:43:c8:65:52:9a:fb:9f:c8:f1:
                    07:66:3e:6a:6f:b0:d9:b8:05:91:41:30:bd:75:3c:
                    23:29:83:a7:cc:fd:31:36:5a:4a:74:ec:1f:fe:48:
                    de:9b:76:d0:25:b7:32:9c:82:a6:f3:4e:1f:6a:db:
                    46:57:87:e9:c4:6c:91:39:5e:4d:dc:b4:1c:30:d1:
                    fb:80:b9:07:b5:73:7b:a3:3e:f0:71:a1:80:3a:8e:
                    77:16:bc:31:49:80:51:e8:ab:e2:04:dc:d1:b1:fd:
                    6c:f0:2f:dd:48:a3:15:d5:b3:5b:35:27:06:01:50:
                    40:8d:ec:a8:13:84:eb:e7:9f:09:a3:3d:d6:30:31:
                    43:74:a0:4d:a6:99:cd:2f:f8:24:f9:a9:a4:e8:98:
                    1b:ee:bf:ce:59:4d:6a:7f:f4:d1:11:74:cf:12:ad:
                    d7:00:94:81:f0:68:66:67:94:5e:09:5c:fb:71:da:
                    75:d7:dc:00:40:b5:8d:6f:96:a3:b3:b5:10:7d:90:
                    af:3a:4b:1b:3c:74:de:7e:97:3e:57:32:c7:f9:19:
                    db:ee:6a:29:20:ac:ac:f6:d8:79:ab:6d:3e:12:39:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:88:2E:30:D3:32:49:6B:D2:B8:CB:E9:8D:13:1F:B0:8C:BC:63:83
            X509v3 Authority Key Identifier:
                keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:75:51:a4:f0:6d:ed:7a:e6:36:fe:fb:93:ac:65:ec:fe:8f:
         79:76:b7:97:00:0b:b2:97:9d:04:44:62:f1:45:3e:e1:ba:6e:
         a1:54:73:29:e8:13:92:11:de:9e:bd:96:b2:2e:46:98:e0:cc:
         57:38:24:ea:39:c4:42:d2:7c:49:2f:b5:bd:67:e0:9f:03:45:
         4d:60:04:04:d6:a7:66:bd:f7:f9:65:dd:84:b1:00:dc:31:7c:
         f1:aa:95:be:78:32:10:e2:20:11:af:cc:96:d7:d6:f8:14:34:
         94:38:05:8d:23:5a:3d:36:af:2e:23:a6:0d:62:ae:59:a3:4b:
         29:6f:0b:8c:fb:af:6a:42:0d:b5:99:24:bd:5d:ca:72:ea:ca:
         6d:7f:05:0a:01:57:55:68:4a:0b:ee:84:5c:ce:3c:b4:3b:71:
         8a:19:e6:ff:e3:ca:ef:58:4f:3c:f3:55:dd:ee:be:c0:91:de:
         10:e7:d3:13:7f:74:a3:6f:53:9c:17:81:83:19:0d:25:48:50:
         8f:21:89:0f:27:46:c6:88:a6:60:41:e5:3c:e5:72:97:0c:2f:
         9a:29:c5:e0:46:5c:ef:7c:27:0a:ba:d3:a4:d0:02:5d:78:ff:
         32:80:8d:ca:4f:50:bc:49:67:a0:11:a2:69:d7:de:a7:9b:99:
         7c:87:6c:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQwOUIxMTAvBgNVBAUTKDFBRjNDODlDRjE0N0YyRkVCNTFEQUFFODk1N0RCOTlE
Mzg3MjYzQjgwHhcNMjYwNDE3MDMxMTA5WhcNMjYwNDI0MDMxMTA5WjAYMRYwFAYD
VQQDEw02OWUxYTRjZS01ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn9MnlR8g9IiXCvJMfiY3wTEw/yXiB1rSUco5CORwskNqnNVDyGVSmvufyPEH
Zj5qb7DZuAWRQTC9dTwjKYOnzP0xNlpKdOwf/kjem3bQJbcynIKm804fattGV4fp
xGyROV5N3LQcMNH7gLkHtXN7oz7wcaGAOo53FrwxSYBR6KviBNzRsf1s8C/dSKMV
1bNbNScGAVBAjeyoE4Tr558Joz3WMDFDdKBNppnNL/gk+amk6Jgb7r/OWU1qf/TR
EXTPEq3XAJSB8GhmZ5ReCVz7cdp119wAQLWNb5ajs7UQfZCvOksbPHTefpc+VzLH
+Rnb7mopIKys9th5q20+Ejm9fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2ILjDT
Mklr0rjL6Y0TH7CMvGODMB8GA1UdIwQYMBaAFBrzyJzxR/L+tR2q6JV9uZ04cmO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDA5Qi8xRTJGQkVENDVD
NjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2NjFIYXJvbFgyNW5UaHlZ
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d2UEluUEZIOHY2MUhhcm9sWDI1blRoeVk3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDA5Qi8xRTJGQkVENDVDNjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2
NjFIYXJvbFgyNW5UaHlZN2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn3VRpPBt7XrmNv77k6xl7P6PeXa3lwALspedBERi8UU+4bpuoVRzKegTkhHe
nr2Wsi5GmODMVzgk6jnEQtJ8SS+1vWfgnwNFTWAEBNanZr33+WXdhLEA3DF88aqV
vngyEOIgEa/MltfW+BQ0lDgFjSNaPTavLiOmDWKuWaNLKW8LjPuvakINtZkkvV3K
curKbX8FCgFXVWhKC+6EXM48tDtxihnm/+PK71hPPPNV3e6+wJHeEOfTE390o29T
nBeBgxkNJUhQjyGJDydGxoimYEHlPOVylwwvminF4EZc73wnCrrTpNACXXj/MoCN
yk9QvElnoBGiadfep5uZfIdsuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:08 2026 by rpki-client