Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File:                     _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier:          Of5WbSluE7HxEkMaHIy06DlvNvemQh+cFMopQfoMDZ4=
Subject key identifier:   DD:3B:2C:45:96:90:3A:85:99:48:C4:28:33:14:92:7A:3B:72:CF:FB
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer:       /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial:       03A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number:          039D
Signing time:             Fri 17 Apr 2026 00:39:32 +0000
Manifest this update:     Fri 17 Apr 2026 00:39:31 +0000
Manifest next update:     Fri 24 Apr 2026 00:39:31 +0000
Files and hashes:         1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: SMiD/baWQBGQxHOQHdio4G1AOQC5nRmzzMQLCcOaFfg=)
                          2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: hEszwjLLlGjAQWr8R8eiMuWITyAjg0iy90PkI3Yb1NY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
        Validity
            Not Before: Apr 17 00:39:31 2026 GMT
            Not After : Apr 24 00:39:31 2026 GMT
        Subject: CN=69e18144-8d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:5b:fc:33:0c:b6:ec:78:20:68:15:63:aa:
                    ad:6d:f5:bd:a2:21:1c:cc:b9:fa:5c:47:4a:04:0b:
                    83:d4:b1:5c:71:b4:06:7f:55:2a:7d:50:18:79:32:
                    36:72:20:1b:80:41:f2:5a:c0:9e:bc:b6:c7:80:e0:
                    22:8a:c7:f6:dd:6a:48:f2:a2:ef:f1:d0:81:9b:df:
                    a5:0a:8b:78:51:95:74:01:ee:dd:53:6d:2d:fe:1f:
                    10:53:f6:bc:28:d5:a1:a8:ee:5c:82:0d:6c:87:86:
                    ec:cf:ac:62:cf:04:e8:4e:87:5e:97:c4:49:f6:38:
                    a3:6d:41:66:e8:1d:5e:82:c5:ec:52:02:15:d5:8f:
                    5f:12:03:d5:38:0c:80:3a:e0:a1:ff:16:1f:23:d2:
                    98:ed:b6:f9:d3:70:2b:5e:c8:d8:1e:46:67:cc:37:
                    18:59:b2:ed:54:d8:ec:32:91:d6:60:09:7f:04:c7:
                    ca:86:2d:77:ad:60:98:2a:7e:a1:fe:c4:34:eb:05:
                    c3:c7:95:29:35:b1:dc:5a:17:0e:83:2b:3a:61:51:
                    68:8c:f8:ca:5f:1b:b2:0a:4d:fc:9c:b1:2f:a8:1f:
                    38:d7:a3:38:f5:24:26:53:7b:63:56:1c:63:fe:90:
                    2b:fa:6c:60:9b:36:97:cf:fb:19:75:af:f6:54:54:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3B:2C:45:96:90:3A:85:99:48:C4:28:33:14:92:7A:3B:72:CF:FB
            X509v3 Authority Key Identifier:
                keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6c:49:da:d2:e7:f6:15:b4:2f:49:71:25:a0:23:46:ee:db:
         08:1b:5d:f0:66:8e:f1:33:65:ce:92:63:21:8f:1a:69:b7:a1:
         36:07:64:d5:30:be:14:21:be:6f:62:50:75:32:83:a9:7f:47:
         01:cb:bf:c0:56:5d:21:af:17:ae:e3:de:0c:d1:fc:91:4f:42:
         94:69:53:73:cb:81:eb:d9:45:ae:ef:c2:63:ef:4f:35:8b:f5:
         0c:02:2f:90:a4:2e:d8:03:c7:8d:61:ad:9f:b2:43:66:0b:0f:
         50:4f:e6:f9:92:6a:34:0f:c7:98:00:48:67:b1:48:95:58:ab:
         ae:23:28:09:fc:6a:cd:64:25:ad:ce:22:5f:61:1d:16:e2:bb:
         92:99:46:04:93:1a:65:ee:c9:53:64:96:fa:82:5d:ff:66:27:
         3a:ac:42:2d:f2:9f:38:70:d1:d6:df:99:e0:88:b2:95:49:10:
         7a:89:5d:31:7a:c7:32:b9:96:58:a6:0b:57:a1:1d:77:dd:d7:
         6b:7e:7b:47:ba:18:f2:4c:7c:3d:4c:5b:29:a9:03:f4:89:a9:
         09:a4:dd:ab:c5:cf:2e:8c:a6:04:a8:c9:61:b8:1d:c6:71:c5:
         b0:57:22:81:46:71:49:29:a8:a8:5b:16:db:38:db:26:90:c6:
         e4:8c:ae:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZENDMxMTAvBgNVBAUTKEZDNjg4RkI5NUNDNTIwNUUwM0U3MEE2MDVDOTk0QzVE
NDk1QUIzMzIwHhcNMjYwNDE3MDAzOTMxWhcNMjYwNDI0MDAzOTMxWjAYMRYwFAYD
VQQDEw02OWUxODE0NC04ZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlJBb/DMMtux4IGgVY6qtbfW9oiEczLn6XEdKBAuD1LFccbQGf1UqfVAYeTI2
ciAbgEHyWsCevLbHgOAiisf23WpI8qLv8dCBm9+lCot4UZV0Ae7dU20t/h8QU/a8
KNWhqO5cgg1sh4bsz6xizwToTodel8RJ9jijbUFm6B1egsXsUgIV1Y9fEgPVOAyA
OuCh/xYfI9KY7bb503ArXsjYHkZnzDcYWbLtVNjsMpHWYAl/BMfKhi13rWCYKn6h
/sQ06wXDx5UpNbHcWhcOgys6YVFojPjKXxuyCk38nLEvqB8416M49SQmU3tjVhxj
/pAr+mxgmzaXz/sZda/2VFRB8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN07LEWW
kDqFmUjEKDMUkno7cs/7MB8GA1UdIwQYMBaAFPxoj7lcxSBeA+cKYFyZTF1JWrMy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ0My83RDk5ODA3NkRD
RDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklGNEQ1d3BnWEpsTVhVbGFz
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19HaVB1VnpGSUY0RDV3cGdYSmxNWFVsYXN6SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkQ0My83RDk5ODA3NkRDRDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklG
NEQ1d3BnWEpsTVhVbGFzekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApWxJ2tLn9hW0L0lxJaAjRu7bCBtd8GaO8TNlzpJjIY8aabehNgdk1TC+FCG+
b2JQdTKDqX9HAcu/wFZdIa8XruPeDNH8kU9ClGlTc8uB69lFru/CY+9PNYv1DAIv
kKQu2APHjWGtn7JDZgsPUE/m+ZJqNA/HmABIZ7FIlVirriMoCfxqzWQlrc4iX2Ed
FuK7kplGBJMaZe7JU2SW+oJd/2YnOqxCLfKfOHDR1t+Z4IiylUkQeoldMXrHMrmW
WKYLV6Edd93Xa357R7oY8kx8PUxbKakD9ImpCaTdq8XPLoymBKjJYbgdxnHFsFci
gUZxSSmoqFsW2zjbJpDG5IyuAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:05:37 2026 by rpki-client