Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
File:                     GmByWuQEWJbjBAgwAyE-6pUmfs8.mft (raw, json)
Hash identifier:          XN9mEFOFkEy5wu6eJxx0z1l/YptvlzTpW8xZfSrklVo=
Subject key identifier:   89:87:DB:E1:AC:17:B8:9E:8E:E0:E8:99:55:6F:F5:0E:2B:A5:6C:D3
Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF
Certificate issuer:       /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
Manifest number:          01FA
Signing time:             Fri 17 Apr 2026 02:56:25 +0000
Manifest this update:     Fri 17 Apr 2026 02:56:25 +0000
Manifest next update:     Fri 24 Apr 2026 02:56:25 +0000
Files and hashes:         1: GmByWuQEWJbjBAgwAyE-6pUmfs8.crl (hash: 6J3lCoq584VTmDS5VsODE943uAOFz6e0ivjGNfpKVLs=)
                          2: 1779BD7C3B2311EE91010B3EC4F9AE02.roa (hash: NX2zo596WFABHjOqY/7BHPvIqM7cOKNcg6FrWFpokQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl
                          rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB35A, serialNumber=1A60725AE4045896E304083003213EEA95267ECF
        Validity
            Not Before: Apr 17 02:56:25 2026 GMT
            Not After : Apr 24 02:56:25 2026 GMT
        Subject: CN=69e1a159-588b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:fc:c4:8f:07:3f:14:8d:02:18:bd:b6:ab:
                    0d:eb:95:2c:64:ce:30:44:29:cc:df:55:bc:3f:0e:
                    6f:16:cc:9c:dc:4e:a1:99:22:d5:e8:be:f1:e1:3e:
                    14:06:46:48:ad:20:36:f4:c8:52:8c:3a:7a:22:f5:
                    e4:37:c2:04:60:99:c5:bf:a2:46:23:5a:93:01:0b:
                    54:8e:66:e9:8c:7c:5d:89:4d:94:1f:7e:f4:51:bf:
                    93:91:3c:b6:37:4e:36:8c:af:7b:ef:c2:03:99:ec:
                    57:e7:e4:c5:a3:ea:b9:83:9d:64:44:93:40:f7:de:
                    bd:35:86:8e:64:6a:cc:48:9d:0a:3e:26:5d:ed:d8:
                    41:45:31:c2:04:81:88:49:1e:3b:c4:59:5e:78:c0:
                    1b:11:b3:d2:44:4c:9e:fd:fe:18:5d:75:f9:60:df:
                    4f:1d:b4:ed:df:e5:fe:ab:77:13:82:5b:96:b9:2b:
                    11:8a:fa:5d:2f:ad:06:8d:81:ee:6b:01:c8:50:6b:
                    02:7a:30:4d:dd:2f:98:0d:c5:ad:93:e9:5c:3f:f0:
                    67:41:52:4f:26:28:64:67:ba:49:f7:96:92:a9:1e:
                    d9:68:38:6c:82:2d:cf:8d:5a:25:c4:8a:7d:a8:84:
                    21:6f:07:1a:8d:dd:ce:6f:e9:f4:19:75:c3:95:1e:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:87:DB:E1:AC:17:B8:9E:8E:E0:E8:99:55:6F:F5:0E:2B:A5:6C:D3
            X509v3 Authority Key Identifier:
                keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a5:0f:42:ae:d3:ae:2d:68:5c:b2:81:72:cc:dc:1a:3b:9f:
         1c:88:c1:01:51:0c:d0:4b:d5:2e:4a:c5:07:46:e1:b7:28:09:
         7c:66:a8:64:68:56:a0:b2:16:c2:ae:a2:d4:fb:09:f0:a0:d4:
         e6:b6:4a:8c:67:53:04:79:c6:ba:7d:ed:cc:ae:46:6a:84:3f:
         0c:c5:20:8c:b4:ed:c0:de:a1:99:85:9d:c6:4b:fa:98:61:b9:
         70:3b:f8:ad:fd:2c:c8:a2:12:07:a4:d2:c2:73:65:2b:fa:cd:
         0f:4e:0d:28:a6:14:0b:63:01:57:7c:75:9e:c7:f1:7b:aa:b2:
         e9:8f:8a:21:a4:a0:56:46:1c:b2:ae:5f:00:e4:ae:29:9f:92:
         22:9d:c1:12:45:1c:9d:02:b1:2a:64:e0:74:49:c1:f9:0a:c7:
         4d:fb:97:df:11:0e:38:ce:0f:27:0e:5b:0b:8f:95:41:a4:9f:
         a3:6c:d4:e0:0d:12:01:6d:6b:f7:9b:d6:02:6a:c5:24:0c:96:
         19:9f:b7:2d:14:20:bc:d9:e8:4c:a5:a3:ea:8f:2b:e9:00:90:
         d8:f2:22:c3:84:b6:64:0a:f1:97:4c:86:2e:25:d0:c1:1a:75:
         f1:ba:62:e6:c4:d4:f2:3f:16:66:97:c6:34:1d:ec:f5:15:f0:
         95:48:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:45 2026 by rpki-client