Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
File:                     gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json)
Hash identifier:          8Mrutqf6xjIgM3SYZWTG6GtKrX9Bt687VjuiwX7HsIw=
Subject key identifier:   75:D2:0B:C8:BF:F8:C3:3C:1A:66:82:FC:C8:DC:AA:64:09:46:8C:D6
Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
Certificate issuer:       /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
Manifest number:          D2
Signing time:             Fri 17 Apr 2026 06:26:41 +0000
Manifest this update:     Fri 17 Apr 2026 06:26:40 +0000
Manifest next update:     Fri 24 Apr 2026 06:26:40 +0000
Files and hashes:         1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: ChbCUofWtjp3MTE6otfXCdf/kdDoFS4uzmGCUHrRBz0=)
                          2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: Az2YFmLh2UdhhRQEO6OH55PrWIA1OjwsVS+BS3c5lCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
        Validity
            Not Before: Apr 17 06:26:40 2026 GMT
            Not After : Apr 24 06:26:40 2026 GMT
        Subject: CN=69e1d2a1-ec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:39:aa:ed:5a:11:37:2c:7f:3c:68:c4:6d:
                    6c:23:d0:60:90:44:aa:08:2e:67:7f:14:d8:29:c0:
                    d4:dd:08:a9:1b:7b:56:43:84:e3:bd:dd:bf:a3:24:
                    cb:44:77:da:59:8d:89:b5:c8:f6:b6:83:96:08:db:
                    53:e8:81:d5:f8:15:fc:d8:84:9d:ad:61:5d:93:d7:
                    40:f3:77:32:e0:a4:a8:d3:48:64:af:cc:9b:94:76:
                    28:45:d6:33:b8:96:75:81:8a:43:c1:48:ce:b2:ee:
                    19:60:16:ba:03:6b:28:ef:5a:4a:69:3a:83:dd:a3:
                    75:3d:7d:c2:c6:e2:b0:24:38:21:f3:23:c7:a9:18:
                    d5:1c:e4:09:92:60:ac:8c:4e:da:90:bc:d8:cc:a9:
                    d9:ca:f0:73:fe:db:06:7a:c6:f7:3d:82:6e:b6:09:
                    86:e5:57:41:f0:a9:2c:ae:c2:ac:e5:84:04:ef:6c:
                    e0:d1:30:5f:ed:7d:ba:07:04:94:6b:2c:29:c6:ee:
                    95:69:d3:d5:14:ff:5f:ba:31:a6:4c:fe:ab:fb:e0:
                    af:8f:55:e6:9f:ab:8a:3b:d3:b8:c5:85:d4:ad:b0:
                    ae:27:cf:d0:27:63:2a:55:92:53:24:86:30:0d:c9:
                    fb:c5:c6:a3:17:c3:6c:54:01:49:36:79:b7:88:96:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D2:0B:C8:BF:F8:C3:3C:1A:66:82:FC:C8:DC:AA:64:09:46:8C:D6
            X509v3 Authority Key Identifier:
                keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:cc:ac:5a:fe:c4:a3:bc:ae:0e:d7:77:28:fb:48:ea:2f:62:
         62:8e:fa:f9:22:36:28:13:ea:82:6d:15:2d:8f:35:64:a7:e1:
         29:8a:9b:fb:9f:62:15:63:33:9b:13:98:b9:db:dd:93:68:8f:
         85:7c:21:ca:9d:9b:0f:95:62:3b:63:f2:07:b9:ea:90:ae:56:
         0e:13:bb:9f:7a:11:fd:43:45:45:9d:78:79:ac:4e:cd:21:e4:
         36:2a:4c:ec:d5:10:32:eb:b3:96:b0:92:86:32:20:bf:5e:c4:
         a9:87:f6:2e:31:2a:08:03:5a:3f:32:7a:d5:c2:9a:27:a0:8a:
         8e:8c:56:95:b3:58:08:09:b3:d4:71:3d:9a:83:89:86:1a:02:
         04:4e:f6:fa:a7:3e:ec:c2:b5:2c:8f:0d:d3:c8:71:75:da:00:
         cd:35:87:73:bc:0c:b2:bc:af:c5:1f:a2:99:8c:56:79:d8:98:
         1f:c0:90:37:32:aa:db:2d:e1:a8:b0:d8:78:bc:b7:4e:3e:29:
         81:2e:61:50:70:29:f9:4d:0b:0c:0a:a9:e0:b2:28:5e:ed:e3:
         2d:93:0e:61:84:e7:b4:1f:b5:e6:79:ca:9d:d5:78:b5:84:41:
         7d:d2:c4:8f:e8:6d:a0:ad:9b:95:ca:db:62:90:67:f8:a8:97:
         89:16:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:56:41 2026 by rpki-client