Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
File:                     GumvOruKc-8m-TT5izpsq5UXrKY.mft (raw, json)
Hash identifier:          1+JU9hoyXp2v0j+jIbqFaHZAxl3hbHoAa2WQAtWNrkc=
Subject key identifier:   E6:57:2E:B6:83:2B:7A:0F:9F:DB:36:5D:7F:FA:23:A0:00:62:8E:0E
Authority key identifier: 1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6
Certificate issuer:       /CN=A91D194C/serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
Manifest number:          026B
Signing time:             Fri 17 Apr 2026 01:51:22 +0000
Manifest this update:     Fri 17 Apr 2026 01:51:21 +0000
Manifest next update:     Fri 24 Apr 2026 01:51:21 +0000
Files and hashes:         1: GumvOruKc-8m-TT5izpsq5UXrKY.crl (hash: +4JQGCkBmGMe71dW9papYSOQX0jflh+unaJFMi9bFBM=)
                          2: 7370EDA48A8D11ED942E6F74C4F9AE02.roa (hash: QvPlcj9x4+KWRcmHg6G457lhmSFv1sU+IhtQBebWw+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl
                          rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D194C, serialNumber=1AE9AF3ABB8A73EF26F934F98B3A6CAB9517ACA6
        Validity
            Not Before: Apr 17 01:51:21 2026 GMT
            Not After : Apr 24 01:51:21 2026 GMT
        Subject: CN=69e19219-a2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:bb:31:15:67:31:a5:9f:9c:94:a2:bb:18:
                    cc:07:52:8a:7a:70:1a:85:44:8d:4b:d9:4c:db:6a:
                    6c:e6:01:99:18:8f:88:98:fb:f0:72:2a:0c:a3:ce:
                    9d:7c:d3:6a:c9:a3:5c:b2:a5:70:e6:13:26:b2:c7:
                    35:51:01:da:1e:5e:5a:53:4e:69:79:10:4e:d7:82:
                    f7:04:8f:3f:21:1a:94:35:b7:8d:ae:19:c4:47:b3:
                    4a:f4:db:eb:55:8e:88:d3:09:8a:54:26:f2:a5:5d:
                    c5:0c:f7:29:f9:88:99:68:09:d4:61:1c:a8:bf:15:
                    48:4e:3f:69:87:6d:44:b5:f9:95:57:f9:eb:c1:e0:
                    58:a9:8e:7c:e8:33:fd:b6:ae:b7:da:ee:16:b6:95:
                    aa:21:38:a9:24:e2:a6:2b:b3:31:4a:08:8c:bd:84:
                    30:87:f4:01:55:f8:10:fc:32:08:d4:68:1d:79:c8:
                    0c:37:5b:42:ff:c5:64:f4:47:5c:fd:8d:72:6d:c1:
                    df:58:cd:e8:f5:ce:11:75:1d:0b:e0:c5:36:77:a9:
                    56:9d:71:61:3e:c1:a6:79:fb:61:3e:cd:d3:4e:c6:
                    bb:85:65:87:a0:76:70:ee:2c:5f:91:86:3f:aa:90:
                    5f:a6:78:cc:04:4e:21:21:fe:40:ad:65:9b:c0:5e:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:2E:B6:83:2B:7A:0F:9F:DB:36:5D:7F:FA:23:A0:00:62:8E:0E
            X509v3 Authority Key Identifier:
                keyid:1A:E9:AF:3A:BB:8A:73:EF:26:F9:34:F9:8B:3A:6C:AB:95:17:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GumvOruKc-8m-TT5izpsq5UXrKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D194C/119FEB488A7411EDB3213E3DC4F9AE02/GumvOruKc-8m-TT5izpsq5UXrKY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f6:b7:6c:c9:60:44:17:ea:be:05:b4:b1:c8:f4:e8:76:6e:
         59:3c:8a:1d:e2:84:99:70:6a:fc:c5:1c:48:8e:90:fb:85:89:
         fe:fd:5b:8f:8a:02:ca:a5:eb:46:07:f6:b9:58:ee:fa:fc:d3:
         17:b1:56:c0:f0:80:d2:8b:11:e1:05:fc:47:ca:3f:15:9e:17:
         d1:06:26:09:9b:8c:2a:bb:60:9e:d7:7c:a3:c3:15:ef:8f:0e:
         21:3a:d0:4d:e7:96:d7:da:cb:ac:e4:71:ca:22:6e:c5:ef:ab:
         b9:d0:e7:3b:0d:6f:2b:b7:2b:89:8b:08:63:01:ab:39:ea:49:
         2a:ba:0c:42:99:fe:79:01:9e:95:c9:0c:bc:02:3c:c0:ad:7f:
         60:b3:55:d0:f5:db:3f:cb:56:1c:f4:3f:b6:9c:a8:95:7a:64:
         6d:13:a3:c6:34:44:51:ab:cb:be:fd:72:bf:39:61:0a:eb:49:
         c4:35:bc:54:02:81:af:7c:94:c2:6f:a8:d9:84:ec:4f:27:62:
         63:4d:77:38:eb:3f:bd:ba:dd:99:a7:b9:bc:21:f2:97:4d:0d:
         cf:db:38:62:08:31:77:4e:79:06:7f:02:12:65:42:fb:c5:d8:
         30:b1:12:95:71:ca:86:35:26:1b:be:b7:8f:56:85:50:db:3e:
         9d:36:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:35 2026 by rpki-client