Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
File:                     glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json)
Hash identifier:          dx9hvymgJEs6sMYHhKvr5yLmai5s2KIktAHwNX3MYfA=
Subject key identifier:   B6:23:51:21:08:7B:1B:F4:D3:35:CE:03:4B:05:CF:37:60:55:22:1B
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Certificate issuer:       /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial:       029F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
Manifest number:          0294
Signing time:             Fri 17 Apr 2026 01:27:29 +0000
Manifest this update:     Fri 17 Apr 2026 01:27:29 +0000
Manifest next update:     Fri 24 Apr 2026 01:27:29 +0000
Files and hashes:         1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: KEhjQF9nT8df2ijZhVpsoyffzBOQxl/DpyHuDQbhY9M=)
                          2: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: VEI8px2anVG8cZfCHh405MajK0/zl7ELNzRvGRaIcvk=)
                          3: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: HHD0wlUVnVxAudrxvBwUFKWMsBYPEVEp5DArYrdk6Yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
                          rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
        Validity
            Not Before: Apr 17 01:27:29 2026 GMT
            Not After : Apr 24 01:27:29 2026 GMT
        Subject: CN=69e18c81-9806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:8d:ad:6d:5c:4d:de:07:f0:39:6a:69:37:
                    11:f2:7a:8f:0c:12:e2:1d:9f:bc:98:e8:1c:88:e1:
                    93:3a:ea:3c:a8:10:0a:51:ac:9f:d0:9d:23:f0:92:
                    04:0c:20:0c:5f:be:21:a2:ca:0e:57:82:d3:f7:88:
                    d5:73:97:33:d5:05:69:6d:08:4a:05:5a:28:f6:7e:
                    a9:31:f6:c9:62:f3:d9:42:57:de:f1:b4:0d:03:ec:
                    e9:71:f0:ac:0c:0f:45:76:6f:1a:66:e7:dd:f4:71:
                    09:02:6e:40:78:d4:10:07:7f:2d:77:d1:02:0b:7a:
                    10:d0:46:0d:4f:6c:5b:13:96:1d:9b:8b:77:2a:ca:
                    84:30:d7:f1:c6:4d:2f:05:c5:8b:9f:0e:a5:ed:d9:
                    f0:8e:a0:10:bd:9c:5c:2e:cf:6e:c5:1e:8f:30:3f:
                    56:24:8c:a8:94:64:b0:28:66:38:4d:25:41:83:39:
                    b5:b2:9d:18:6e:23:ce:d7:a7:44:b5:dd:52:3a:85:
                    9c:25:45:ed:17:12:12:9d:d6:d7:ba:58:89:31:de:
                    f3:8e:e3:d5:29:47:32:16:df:7b:a8:7b:70:b3:7d:
                    31:98:dd:f6:4a:a7:5a:1a:d5:5d:4f:6c:bf:5c:3f:
                    d5:6d:b2:f3:50:3a:b0:c1:86:22:4d:1f:f7:bb:3b:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:23:51:21:08:7B:1B:F4:D3:35:CE:03:4B:05:CF:37:60:55:22:1B
            X509v3 Authority Key Identifier:
                keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a6:57:b9:07:a1:a1:73:70:1f:46:d3:fe:13:bb:0a:26:f0:
         78:d3:e6:6e:63:0e:a2:af:44:c6:5d:6d:97:b1:4e:e7:39:34:
         7f:0c:3e:43:bf:ca:92:28:06:a9:d8:32:b6:e1:43:5b:b6:03:
         00:0b:77:b4:39:1e:0e:dd:4c:48:5e:97:8c:22:29:a2:58:d0:
         a1:d7:6f:6c:aa:8d:28:17:57:88:d7:36:db:21:a9:5a:09:8b:
         80:a9:30:36:d4:a3:a2:27:ef:d1:be:86:85:5f:70:b7:80:95:
         34:66:9f:f8:76:71:42:3c:f2:26:00:19:ee:94:a1:2b:f1:ec:
         15:7c:ac:0f:5d:67:4d:84:2f:59:b2:1c:f8:db:d2:df:29:26:
         e6:ec:07:f0:dd:5f:f4:3f:f7:85:82:f6:fd:0a:5d:a3:0b:18:
         a6:a8:45:1a:27:3f:c1:2e:c4:ab:4c:c9:23:1f:89:8c:8d:8d:
         28:ab:f1:32:d3:4b:9a:16:c8:72:ed:e2:64:47:4d:73:04:05:
         d6:9f:e9:3f:9b:3e:7e:ff:f5:dd:52:61:38:6f:b9:e7:6c:74:
         76:6c:f5:8d:44:d2:f4:1a:c2:d9:01:89:cf:e8:2e:d5:08:f8:
         1f:1a:f7:1b:d6:fe:12:99:f0:38:94:69:c6:10:f4:bc:2a:0a:
         f3:24:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:24 2026 by rpki-client