Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
File:                     gmtVkqw4sBK358JzDdBgfhDbgQI.mft (raw, json)
Hash identifier:          MUBwx7NPEHABPdFSjjS9JbfdFxUzldSrUBLKeROQFsk=
Subject key identifier:   5F:B1:2A:E6:D4:0A:A5:9F:7A:4F:36:09:64:50:61:FC:E8:3A:0C:CD
Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02
Certificate issuer:       /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
Certificate serial:       05DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
Manifest number:          05D1
Signing time:             Thu 16 Apr 2026 22:56:48 +0000
Manifest this update:     Thu 16 Apr 2026 22:56:48 +0000
Manifest next update:     Thu 23 Apr 2026 22:56:48 +0000
Files and hashes:         1: gmtVkqw4sBK358JzDdBgfhDbgQI.crl (hash: Dm2tHDGjVuYBfSu+QydavgEKyhGB8WGqJedcTaizXwA=)
                          2: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (hash: DqhzTlL/TM9MCYZl1hZt1EMkx6698paItxMEmrPBJS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl
                          rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
        Validity
            Not Before: Apr 16 22:56:48 2026 GMT
            Not After : Apr 23 22:56:48 2026 GMT
        Subject: CN=69e16930-ebd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:1b:d6:5c:2d:12:8b:bc:ce:04:64:d9:ab:
                    3c:ae:f8:7a:2d:f0:54:76:16:2e:a9:ef:be:1e:31:
                    99:d7:bc:50:73:c5:56:98:bf:c5:94:62:13:c2:26:
                    44:0a:f9:9e:68:5a:0e:62:9b:ad:79:e1:9a:0d:09:
                    e2:22:9e:66:15:92:e4:6a:ca:f2:cd:59:ea:72:33:
                    b1:4f:c1:af:40:f9:9b:6d:6f:08:9c:cb:52:51:37:
                    7e:10:90:21:7d:af:55:20:30:2f:8e:f3:ff:33:84:
                    cb:e0:88:4b:13:8a:46:15:88:89:ca:55:8d:0c:12:
                    8e:46:6b:90:29:cb:3c:f4:19:7a:e7:51:a7:c7:e7:
                    63:6d:d7:9c:a9:ed:65:3c:9b:0c:a9:f5:50:82:89:
                    ad:4e:54:7f:32:d8:1d:fb:86:57:45:1a:92:59:4c:
                    96:da:7d:3e:47:38:9c:c1:3a:00:9d:97:2a:7d:d5:
                    ff:6b:02:96:f5:87:39:13:85:3b:84:b1:63:8b:ce:
                    2b:0e:5b:de:8b:66:92:ee:6a:a3:6d:a8:01:f1:a2:
                    41:6a:61:34:d9:e7:0c:a0:3d:b8:af:dc:8f:74:b6:
                    56:bf:86:4b:95:ae:cd:a3:04:a6:f0:e1:16:50:94:
                    cb:1b:b5:ad:63:fc:d9:21:4c:07:60:c3:04:0b:4d:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B1:2A:E6:D4:0A:A5:9F:7A:4F:36:09:64:50:61:FC:E8:3A:0C:CD
            X509v3 Authority Key Identifier:
                keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:bc:cc:f6:fb:5c:1b:f1:b3:67:6d:9d:c6:8b:1f:e8:2b:
         aa:57:3f:ca:6f:3e:08:ad:66:c2:c4:e2:43:0c:56:4a:a8:3e:
         52:ac:a8:30:b7:e4:02:c3:49:13:e7:c6:1e:9b:68:e2:2d:84:
         59:fe:4e:06:58:b0:df:df:ce:f7:5c:76:47:39:d9:74:51:6e:
         77:4c:a4:6d:21:fb:86:65:eb:ad:d4:aa:45:06:5e:9e:9a:78:
         74:11:76:eb:f7:18:a2:cd:a9:ac:2a:70:8e:22:88:ff:dd:d1:
         47:63:2c:b9:17:9f:35:c9:63:f3:1e:d8:8a:e2:ba:8b:23:ea:
         09:16:fb:c4:bb:7a:ec:5c:00:e8:ce:43:92:80:e8:d9:39:4f:
         61:9e:ce:f6:37:d5:3d:99:9e:8d:02:77:b6:aa:29:fb:72:99:
         08:8e:01:69:e1:6d:48:96:b1:31:ef:79:b2:da:bb:c5:a3:c7:
         08:c5:61:bf:59:4e:9c:3d:f2:a1:9d:0e:71:76:d8:e6:6a:53:
         a0:8e:09:dd:ad:28:10:5c:42:16:73:10:a7:3c:38:c4:ac:86:
         f5:fd:29:f5:8e:9d:7b:df:50:26:9d:4c:f7:45:cf:66:e9:43:
         60:42:44:a1:56:cc:90:96:8f:82:e6:bd:1f:64:1c:fb:91:6b:
         f3:a5:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:30 2026 by rpki-client