Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File:                     GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier:          RAMayRaClyS2nGDWEi5pCsausdU9gRRTB0n2Fdbwsxs=
Subject key identifier:   96:3A:76:47:D9:92:3F:3F:B7:11:B7:AB:5D:2F:85:AF:97:34:4D:F4
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer:       /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number:          3A
Signing time:             Fri 17 Apr 2026 08:16:06 +0000
Manifest this update:     Fri 17 Apr 2026 08:16:05 +0000
Manifest next update:     Fri 24 Apr 2026 08:16:05 +0000
Files and hashes:         1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: cy7QtOJiJgPEj9J/YutUUGJtGGFRFiiPTOxAuF79wBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
                          rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
        Validity
            Not Before: Apr 17 08:16:05 2026 GMT
            Not After : Apr 24 08:16:05 2026 GMT
        Subject: CN=69e1ec46-9992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:ce:58:91:df:40:2f:4e:60:bc:54:5e:6a:
                    5c:e5:38:06:df:a1:0e:c0:bd:7b:99:63:db:cb:27:
                    0d:cc:61:21:91:f0:50:50:ee:57:4e:7e:53:ba:b4:
                    af:13:6c:f7:6f:4a:f5:3f:33:18:23:4d:4a:30:00:
                    f7:ab:88:9a:be:ff:92:bf:7a:c0:49:a2:41:7f:ca:
                    78:d6:4d:46:b0:27:f7:cd:6f:5a:28:79:fd:e5:a3:
                    46:da:6f:31:c2:61:84:8b:15:50:4f:ae:a2:ce:84:
                    83:52:0e:e8:25:ed:96:59:6c:32:de:2c:b1:34:36:
                    d2:ce:3b:4c:85:ae:b6:01:da:29:b2:19:ad:fa:0a:
                    fe:8a:c0:d8:22:7b:b1:aa:12:68:5f:7c:2a:b3:6a:
                    7d:d1:48:de:5a:b7:6c:e8:de:0d:b6:9a:9e:80:67:
                    6c:66:11:5a:94:47:f3:1b:eb:a7:39:4a:05:9f:5b:
                    75:44:aa:2d:eb:99:8b:bf:87:c3:25:0c:36:e2:42:
                    68:af:4f:3c:d2:e1:4e:95:a2:e1:cd:e3:9c:60:96:
                    b6:d3:d3:51:e0:fa:a9:0d:0c:05:66:a3:54:2a:4f:
                    bc:59:05:4f:44:f1:9c:61:16:93:61:95:38:8d:8f:
                    68:64:43:6c:bb:ba:e4:48:5d:b4:53:a3:b5:15:22:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:76:47:D9:92:3F:3F:B7:11:B7:AB:5D:2F:85:AF:97:34:4D:F4
            X509v3 Authority Key Identifier:
                keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:aa:d7:d7:bc:07:8e:2d:b2:8d:d8:3f:da:b8:f4:4c:6c:
         69:76:c3:6d:af:e3:35:f6:ff:67:28:fd:56:44:8d:8e:57:c4:
         17:d4:a7:eb:8a:da:64:dd:73:03:91:25:5b:b5:85:c2:90:5d:
         9b:7a:5e:bc:d2:f9:50:e6:09:bd:53:e0:02:20:db:db:eb:1a:
         a5:48:b6:50:80:e6:a8:75:f3:02:fc:3c:92:17:82:fe:ff:4e:
         ea:c2:6d:62:ff:f7:0a:4c:b3:88:8a:67:61:ab:1e:ce:44:78:
         fc:37:a6:17:f9:79:e1:fa:c1:f3:13:50:10:19:ef:90:d5:3a:
         c6:15:ad:44:55:f1:36:6d:f5:19:92:74:6e:3d:6e:cf:b8:80:
         ec:11:4f:bc:01:c1:b2:3c:91:85:b0:0c:4c:3c:3e:81:0b:a7:
         28:eb:1d:90:2d:ee:c7:e9:67:fb:67:7e:12:e5:15:ac:18:ab:
         68:c1:18:3a:b9:42:3b:7e:b5:d6:9b:39:4c:ab:09:5d:70:14:
         a1:1b:3d:09:4e:70:23:d2:96:48:4e:26:42:bb:ef:44:2e:4f:
         c5:7e:c2:9a:7b:df:ef:d6:64:3d:25:70:7c:21:0e:72:fa:a5:
         82:5e:c3:35:a0:21:fd:d6:c2:8a:44:2e:d6:ec:5a:d4:6f:cb:
         72:b0:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:17 2026 by rpki-client