Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
File:                     Gns-z0RjPh6iTJBhetOXRV505rI.mft (raw, json)
Hash identifier:          V9dBDLis6q/zQggYNHGXcIXBcFlbcii/iluFy8Dcbmc=
Subject key identifier:   C1:A6:A1:31:F1:8D:7C:FE:43:8D:98:70:27:E1:8E:16:A7:30:98:2B
Authority key identifier: 1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2
Certificate issuer:       /CN=A91CE9F1/serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
Manifest number:          01AA
Signing time:             Sun 01 Mar 2026 04:48:46 +0000
Manifest this update:     Sun 01 Mar 2026 04:48:46 +0000
Manifest next update:     Sun 08 Mar 2026 04:48:46 +0000
Files and hashes:         1: Gns-z0RjPh6iTJBhetOXRV505rI.crl (hash: MXC+zCAcRKgNe3mo5YuEYuytGfH3nLH1UQ+1DxZ0Wb4=)
                          2: 398B4EEE875E11EEBCAB2514C4F9AE02.roa (hash: uXbJ5eievhRi1JcELWkz+fcnXhb/y0aWhBNoVIZNw4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE9F1, serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
        Validity
            Not Before: Mar  1 04:48:46 2026 GMT
            Not After : Mar  8 04:48:46 2026 GMT
        Subject: CN=69a3c52e-7e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:5b:df:ee:85:ff:62:5a:23:d1:a6:48:13:
                    a6:f6:27:51:04:bf:c4:db:75:c1:ca:ad:02:2d:de:
                    78:e0:f7:8d:dd:22:c8:b1:76:a1:76:06:f6:c1:95:
                    29:61:e2:00:82:d8:c7:0a:03:3e:1d:d8:4c:8e:a5:
                    2e:37:7c:68:68:ef:42:75:59:6b:96:1e:c1:37:1d:
                    66:9e:2e:03:05:4e:cf:da:f1:09:8e:56:e6:01:ce:
                    0e:08:f8:c6:9a:f5:6f:29:d4:14:4c:d7:ba:c3:1d:
                    61:ca:b1:f9:b8:b2:32:b4:7f:e3:45:30:6b:13:3a:
                    d3:87:14:e5:0b:98:cd:d1:fd:75:03:65:d9:ce:14:
                    c7:b4:8f:66:7b:50:16:c6:11:5c:b6:60:cc:cb:26:
                    56:a7:c8:bd:c5:ec:46:62:dd:a8:6e:48:c9:04:78:
                    ca:91:4f:b8:77:70:43:aa:dc:ac:1b:94:1b:a6:ff:
                    b3:16:c8:bc:54:01:43:bd:61:46:25:c7:14:2f:af:
                    86:43:7f:ef:70:2e:5d:c4:fd:34:2d:66:45:cb:42:
                    df:53:a0:4b:35:97:11:25:f6:f6:f6:30:7f:94:6a:
                    c2:c8:02:35:cd:3d:85:3a:5f:7c:b9:f6:e8:e0:89:
                    98:81:52:c4:5d:8a:52:14:3b:57:fd:2a:80:84:5c:
                    99:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:A1:31:F1:8D:7C:FE:43:8D:98:70:27:E1:8E:16:A7:30:98:2B
            X509v3 Authority Key Identifier:
                keyid:1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:f7:d7:97:82:9b:9f:48:1e:f6:d9:13:e7:9f:39:cb:38:
         8c:00:a7:89:46:40:a4:f4:92:fb:e0:9f:6b:20:f0:21:45:bd:
         df:e3:07:ff:23:48:4b:09:36:4f:65:dd:c4:cb:c1:27:b2:42:
         5f:e1:08:c1:bf:57:53:49:c8:d7:6d:91:b2:70:92:c7:15:64:
         42:a1:eb:e8:24:1b:e2:e4:c5:f9:7b:57:c2:c1:0a:58:cc:96:
         5e:3e:2b:d4:e4:56:65:a0:db:f1:f6:0e:9b:3c:79:df:e3:fc:
         43:0f:85:4e:ad:b4:77:1d:12:59:67:a2:84:4f:c2:37:7e:9f:
         f6:8c:77:f6:0d:31:d2:6e:69:a6:f7:2e:a2:52:38:02:b8:59:
         20:66:40:23:59:d8:ca:42:b8:74:28:25:65:34:3d:33:b9:57:
         20:6b:35:2c:59:19:15:b7:a6:80:06:c3:dd:c9:62:27:0b:9f:
         4c:d7:6c:49:cd:dc:40:70:d6:ec:7d:86:db:84:a7:0d:00:33:
         bf:8e:a6:94:d6:9f:24:f6:b1:75:31:5d:21:f1:95:70:5d:16:
         ba:69:71:15:f3:86:63:23:8a:7c:9e:11:99:32:47:17:bf:e7:
         98:d2:84:a8:50:d3:b3:8a:75:a8:de:7a:50:5f:b0:83:3f:c6:
         e7:8f:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:03 2026 by rpki-client