Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File:                     GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier:          rYXrVzHg6iGYT32AICf4yWiZVSrk/GyQjjfaWx1NKW8=
Subject key identifier:   34:52:40:EF:AC:EA:FF:78:0B:E5:D0:DD:EB:1D:10:AD:8B:8E:06:8A
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer:       /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial:       0337
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number:          0330
Signing time:             Sat 13 Jun 2026 01:06:36 +0000
Manifest this update:     Sat 13 Jun 2026 01:06:36 +0000
Manifest next update:     Sat 20 Jun 2026 01:06:36 +0000
Files and hashes:         1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: ZZHGjO/0GM/uswe6Ujm6hw6A77EZaTG+tLdPRzOPvL8=)
                          2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: /c+Xc/pq6gS3lH+dpF5Op6yyoSbbMrofTbdHTbTMtyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
                          rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
        Validity
            Not Before: Jun 13 01:06:36 2026 GMT
            Not After : Jun 20 01:06:36 2026 GMT
        Subject: CN=6a2cad1c-3930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:19:d2:f0:65:b7:40:b2:c7:36:f7:68:c9:
                    d8:1e:87:7e:b2:ee:b4:3c:06:39:96:63:89:a6:d7:
                    c4:ea:39:a2:09:3a:db:87:2b:82:db:ee:c1:8d:2b:
                    2e:04:de:4e:63:a0:92:8c:54:4a:85:10:fa:b5:04:
                    93:70:39:40:70:33:d9:40:7a:a9:3f:59:bd:71:43:
                    08:ac:82:c7:dd:dc:f0:f7:c7:26:56:68:b8:2d:0e:
                    a1:2f:e6:51:d8:ac:9a:6f:68:6c:d2:27:df:7f:80:
                    8f:3f:ea:87:f6:01:aa:8e:a3:73:55:1b:e7:96:fa:
                    e8:38:95:69:ba:ae:6a:19:ec:d0:8c:5a:f5:bf:27:
                    46:41:cc:b1:d6:fc:5b:b3:de:d9:5d:8e:77:72:4a:
                    bb:9e:11:8f:c1:30:65:d2:80:bd:95:e7:08:2c:30:
                    4a:c5:d7:c5:79:62:c9:84:75:40:b6:ca:b1:24:84:
                    43:6f:40:60:c2:01:44:cb:61:df:fe:54:d5:a5:7c:
                    96:b4:41:a6:0e:cf:5c:c3:8d:6c:0b:40:fa:65:b8:
                    08:6e:56:c9:12:6a:a8:59:2f:54:39:11:95:02:c2:
                    75:d8:20:5b:7d:25:27:f5:51:a7:04:4b:10:08:79:
                    cb:72:f4:ae:d5:02:0e:9e:15:15:f4:a5:f0:0d:e5:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:40:EF:AC:EA:FF:78:0B:E5:D0:DD:EB:1D:10:AD:8B:8E:06:8A
            X509v3 Authority Key Identifier:
                keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ab:50:59:f9:ba:77:5e:75:6d:70:18:d8:bf:bd:10:97:45:
         60:6e:9c:55:93:9a:04:dc:96:8b:46:99:d9:62:2a:f4:85:90:
         db:55:d2:0a:5f:be:df:3d:70:b0:da:b2:a2:b5:26:7a:a5:57:
         95:bd:8f:ad:4c:b0:2d:1e:5c:62:97:5a:33:c8:31:23:1a:6c:
         bb:41:7f:aa:f1:f3:04:80:c3:5d:3d:a9:06:2b:5c:97:44:f8:
         c0:6e:3b:8d:c9:8c:6e:38:e5:a5:61:7a:e1:70:ab:c6:d2:e9:
         fc:71:79:4e:fe:16:e7:eb:79:e6:28:ce:cc:98:47:46:f3:57:
         d0:ca:07:1b:1c:1d:3a:8e:53:2b:ad:34:c6:05:84:97:d1:f7:
         1b:6d:3e:87:ee:95:ea:5f:eb:f1:71:e0:04:cd:97:3e:b7:c6:
         21:f0:40:a2:ca:7f:db:6f:95:87:5f:2f:2d:0c:5d:29:56:cd:
         7d:35:21:64:f2:a8:14:a0:e4:71:c8:8c:95:41:51:24:11:86:
         84:8b:9b:cc:db:bd:b5:a7:47:cd:ad:8b:4f:6f:f9:74:99:1f:
         1e:4c:04:10:a3:6d:1c:3d:aa:95:2a:d4:de:0a:58:55:a6:fb:
         ed:d5:ad:52:59:c9:81:6d:2b:08:79:10:9a:7c:ae:1e:18:8e:
         a5:5e:75:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:47 2026 by rpki-client