Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File:                     gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier:          sqcEpHgQzlJDzLRqmf3jVv0VuJY+0I0AGFxQZwE8T7I=
Subject key identifier:   B2:30:22:CF:CC:BF:B8:16:96:C9:38:8C:B3:34:F0:B0:4E:8D:58:2A
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer:       /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number:          0118
Signing time:             Fri 17 Apr 2026 05:35:45 +0000
Manifest this update:     Fri 17 Apr 2026 05:35:44 +0000
Manifest next update:     Fri 24 Apr 2026 05:35:44 +0000
Files and hashes:         1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: /OrDIbO7y32L8KFRgas0FjAD2n1FtO4UQX7qjCxstNc=)
                          2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: qRLyslYx22+qKxQxzfTyLV443rh4uNIFMoyDuD/9wGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
        Validity
            Not Before: Apr 17 05:35:44 2026 GMT
            Not After : Apr 24 05:35:44 2026 GMT
        Subject: CN=69e1c6b1-a0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:c9:fc:81:70:4f:3f:35:51:35:55:ec:12:
                    6a:01:57:63:b4:63:c3:65:43:94:d3:6c:1c:6e:31:
                    32:c9:87:73:8e:dd:f6:e8:10:d3:73:dd:fc:36:7d:
                    d9:2c:dd:4b:cf:cf:1b:6f:a0:d6:3a:49:b2:35:79:
                    10:ec:87:08:d8:95:ec:a2:3a:51:72:3e:6a:0a:ad:
                    52:d8:c1:51:9a:ba:bb:40:b8:34:e4:b2:71:ee:2c:
                    fe:5c:91:6a:10:86:b7:1c:78:29:a7:48:13:e1:e1:
                    d1:ac:ea:9c:3a:5c:95:19:5d:1e:75:ca:11:d4:08:
                    d7:1c:1c:0e:d8:40:a1:5c:92:0b:c0:eb:8e:ae:ef:
                    d9:2d:a4:d2:bc:98:c5:35:b4:fe:f3:55:82:f1:33:
                    14:10:8b:86:f2:cd:1f:f4:48:d1:50:9a:c5:6f:e8:
                    a0:47:b3:99:33:4e:8c:c9:72:f5:f1:c1:b9:d5:07:
                    33:24:4c:f7:0a:62:f5:3b:15:76:40:aa:18:21:72:
                    6e:b9:d5:a6:27:5a:f2:d4:b9:3c:0a:fe:2c:9e:42:
                    38:e4:a1:02:f9:6d:9a:92:bc:0e:bb:24:b0:f4:27:
                    b5:07:28:4e:15:e0:96:ba:27:70:d6:8c:9d:ac:9c:
                    4f:96:35:c4:d0:88:0f:05:24:07:97:25:23:ad:12:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:22:CF:CC:BF:B8:16:96:C9:38:8C:B3:34:F0:B0:4E:8D:58:2A
            X509v3 Authority Key Identifier:
                keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:96:e1:85:cd:16:4e:21:91:17:22:df:19:92:78:86:14:9f:
         15:e4:74:39:79:39:22:e0:67:33:55:cb:ff:7e:8d:c9:60:9e:
         96:33:9e:1e:1f:f9:ca:5d:f5:20:16:4a:6d:ac:a1:82:36:be:
         2a:9c:dc:75:4e:fc:05:4b:5d:05:a6:c3:5e:34:98:74:58:11:
         b6:16:37:73:1e:15:0c:9e:00:f0:98:c3:bd:25:7a:bb:cb:b4:
         ca:a6:ce:b0:42:82:47:23:29:6c:0e:41:22:53:a5:90:c5:72:
         60:1f:ff:b4:be:bf:b7:86:61:c6:75:7a:c0:2a:aa:db:7e:3d:
         1f:b5:f8:05:bc:13:d0:29:1a:4f:e3:59:a8:7a:d0:b2:f9:7e:
         ff:26:ec:25:19:58:ca:d4:d7:51:38:86:fb:f1:f3:0d:ff:6e:
         0a:ef:88:e6:68:3d:ab:cc:2d:0f:31:9a:62:d0:75:f8:7a:ca:
         a0:5e:b3:0a:53:e4:0f:e8:e3:2d:37:9d:7b:a0:bb:b4:5f:4f:
         bc:e5:d6:29:b9:95:00:2b:1f:38:f7:3b:9e:9c:5d:39:d9:81:
         5b:d9:fb:79:44:f5:1b:10:f2:78:7a:b4:59:cf:e1:e0:66:55:
         56:8e:5a:9a:73:0b:a1:b7:b8:a9:8d:ec:42:8c:f9:55:e5:12:
         16:f7:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:22 2026 by rpki-client