Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft
File:                     A01GK1-vanw40CAcBdHfwtFikHU.mft (raw, json)
Hash identifier:          Kjs/pNdUAiXeCWqiLKdUHQmBct1xBU/3J1ZZqmHd3OM=
Subject key identifier:   D5:21:8D:F5:CB:22:3B:8F:15:92:40:57:B6:2A:E6:E9:B9:C8:27:A6
Authority key identifier: 03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75
Certificate issuer:       /CN=A91CDFF8/serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft
Manifest number:          71
Signing time:             Fri 17 Apr 2026 07:33:16 +0000
Manifest this update:     Fri 17 Apr 2026 07:33:15 +0000
Manifest next update:     Fri 24 Apr 2026 07:33:15 +0000
Files and hashes:         1: A01GK1-vanw40CAcBdHfwtFikHU.crl (hash: vxMxBUDsfmaGsw9zYYZ6L0EXTWqPAwyERmomGU6M6DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl
                          rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDFF8, serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075
        Validity
            Not Before: Apr 17 07:33:15 2026 GMT
            Not After : Apr 24 07:33:15 2026 GMT
        Subject: CN=69e1e23b-d4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:9f:a9:fe:09:f7:f0:1c:3e:c0:ab:f7:33:
                    1c:8d:5f:27:a3:71:35:90:9b:bf:18:49:df:f9:49:
                    7b:92:ce:e0:fb:dd:ac:52:fc:10:c5:aa:7f:3c:fc:
                    e3:45:e6:ed:5f:0c:6f:43:86:8b:9f:7f:e1:b4:01:
                    ef:f5:f0:fb:8a:69:fd:6c:e9:dd:27:c7:bb:ca:6e:
                    f5:c7:4e:fa:4b:ee:7f:5b:14:27:a9:17:28:07:55:
                    77:65:c9:18:b6:ab:81:0e:e9:fb:9f:83:bb:f4:ab:
                    af:86:7a:a3:c5:52:9c:fc:7d:b2:3f:57:f7:71:99:
                    d1:f0:f8:f3:b0:02:95:38:14:55:13:d1:aa:b8:1d:
                    e1:23:df:00:14:4f:cd:9a:23:65:86:ca:e7:ef:f4:
                    48:9b:1b:a7:0e:d0:83:86:12:5c:6a:df:33:3e:d7:
                    5c:0a:e9:35:74:47:7b:88:39:4b:b1:87:72:d5:8a:
                    fb:f9:5b:8b:99:be:f5:cd:2e:97:51:64:a6:3f:5f:
                    9e:3b:c9:04:67:3e:cb:2c:12:89:ce:12:db:53:d5:
                    a9:fd:72:98:28:cd:f1:e8:54:28:79:8c:76:da:ce:
                    82:e6:f2:2e:7e:3f:ae:bf:41:94:6b:ae:65:5d:d8:
                    e3:15:e1:00:f0:82:8d:db:e4:dc:7d:bb:93:9b:81:
                    7a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:21:8D:F5:CB:22:3B:8F:15:92:40:57:B6:2A:E6:E9:B9:C8:27:A6
            X509v3 Authority Key Identifier:
                keyid:03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8a:58:fe:0a:e7:de:68:ae:72:7c:60:91:13:07:7e:8c:87:
         76:36:c6:18:40:c6:1c:60:e5:e2:16:49:b1:58:62:8d:92:2e:
         c9:30:78:f8:6b:af:89:01:07:54:a7:e8:43:b2:95:f4:a7:88:
         69:04:3c:0b:22:84:e0:da:6e:27:f5:06:e8:4a:92:e5:aa:ef:
         d3:90:ca:27:75:5e:1a:49:c3:07:ba:1a:bb:4b:79:21:e7:f6:
         e9:2e:82:0d:7c:06:f1:a2:83:38:47:ba:4d:10:52:d4:49:04:
         5b:a9:8f:a4:3f:d0:f8:aa:6b:83:c0:22:85:25:63:7a:f2:67:
         f8:32:98:89:4e:64:18:59:a0:32:fa:af:9d:5d:ed:3f:e0:7e:
         74:21:83:03:c6:25:44:37:1f:f3:04:24:47:c8:dc:6a:36:cd:
         ef:4a:d4:b9:9c:c6:36:4d:11:15:3c:72:2d:72:92:5f:8e:7d:
         b1:97:03:1b:fc:14:4f:29:64:76:93:1d:75:72:55:ea:30:33:
         40:73:41:68:c8:fb:f2:6d:8a:2b:f9:07:eb:47:2f:25:93:44:
         44:fa:61:1f:9f:3b:a4:11:2d:18:0d:8f:81:a1:60:b0:d6:3a:
         04:2b:0c:22:ca:05:b6:51:20:02:4b:42:e7:02:ef:44:a4:cf:
         68:2a:91:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:28 2026 by rpki-client