Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
File:                     gOknW25uvGrXWF12r7akALUULD8.mft (raw, json)
Hash identifier:          /yeGhlcqtRx8FGtySLY8gXHTP9liTj8Gc6uNpJh89pw=
Subject key identifier:   F5:C4:07:4C:EB:25:1B:6D:FE:45:2A:51:85:CE:36:F2:45:A5:1D:56
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Certificate issuer:       /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
Manifest number:          014A
Signing time:             Fri 17 Apr 2026 04:56:24 +0000
Manifest this update:     Fri 17 Apr 2026 04:56:23 +0000
Manifest next update:     Fri 24 Apr 2026 04:56:23 +0000
Files and hashes:         1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: lLXyPp3r9JC/dvIS8LnvNSlCbOMhGEXRJjI4Hxp2kjc=)
                          2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: K4s4bQ+AZEMbINRSOhh8kAqaJQUKtCHKATxaJcI+fSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
                          rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
        Validity
            Not Before: Apr 17 04:56:23 2026 GMT
            Not After : Apr 24 04:56:23 2026 GMT
        Subject: CN=69e1bd78-c478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8e:30:7a:e5:01:36:39:69:91:aa:39:80:e9:
                    12:a1:68:2e:31:b3:62:05:0a:9b:94:0d:3f:d0:de:
                    b1:68:eb:c9:bb:92:e0:63:47:39:1e:d7:01:96:63:
                    5a:52:e3:0c:b2:2d:64:66:e0:97:81:60:02:ec:95:
                    29:b6:e4:b1:ed:86:42:08:fc:0a:ee:7b:d5:4c:97:
                    3b:54:94:6c:20:a7:fc:0e:d8:ac:60:d4:0f:44:87:
                    ea:df:6f:39:f3:c0:70:e8:17:f3:1e:55:d4:aa:e2:
                    e1:33:1c:c7:27:6a:2d:15:24:ac:8d:32:4d:09:50:
                    17:b0:7d:31:e8:5f:56:85:4b:a5:0b:14:e0:23:a6:
                    e8:f1:b9:d5:d0:e8:b6:4e:76:c0:84:64:28:e9:8e:
                    23:5f:26:93:49:78:b7:6f:c6:25:3f:08:29:4a:77:
                    30:32:f2:3c:87:b4:80:79:fd:2b:6b:2b:73:bc:48:
                    56:b1:48:62:c8:0e:95:af:d3:da:49:7b:fd:6f:72:
                    84:1e:c5:05:90:ba:ff:12:5c:e8:40:6b:a0:44:b9:
                    87:a4:f4:01:20:43:ae:c7:76:e8:0a:9e:4e:ca:0f:
                    5c:c9:22:f7:e3:94:66:45:ed:df:44:b7:17:0d:9a:
                    81:80:c0:68:d2:b6:c5:91:1e:26:1e:67:f6:22:5c:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C4:07:4C:EB:25:1B:6D:FE:45:2A:51:85:CE:36:F2:45:A5:1D:56
            X509v3 Authority Key Identifier:
                keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:69:a9:4e:9a:5c:8b:35:a1:78:8a:f0:71:7c:ca:dd:3e:c7:
         39:23:2a:02:fa:73:d4:90:91:6f:69:ca:5a:f1:d2:91:22:77:
         d5:90:11:b9:ea:0e:e8:b6:2e:b8:4a:6b:56:2e:15:85:4a:83:
         c1:5c:31:7f:dc:51:4c:1f:06:b6:57:da:85:a7:ec:6b:10:a9:
         c3:a4:ee:63:15:b9:fa:4a:96:90:4c:fe:02:a0:53:0e:2b:6c:
         b1:b3:64:0b:71:e6:06:5b:41:d8:59:23:73:34:12:71:81:49:
         ab:69:14:3f:cf:09:4b:a6:0e:e8:36:2d:95:2a:8f:bd:66:6b:
         c9:97:f3:29:e4:85:56:d4:be:fe:70:55:55:e1:88:da:8d:e0:
         b1:b8:c9:b3:c2:b8:97:64:d1:73:84:e5:da:a2:5c:5c:68:93:
         12:9b:38:f2:df:de:26:5d:16:dd:c2:d7:98:f8:68:13:5b:0f:
         e1:e8:5f:34:7f:14:21:73:1d:bb:69:e4:d0:7e:4e:90:64:4e:
         de:0f:53:3d:e6:03:30:f5:55:4f:15:ff:32:0a:37:49:c7:83:
         e4:09:c5:0f:c5:83:17:8c:13:88:34:83:c0:5a:5e:8b:73:09:
         ea:9d:5b:05:38:22:51:0a:43:1d:3a:29:38:df:c7:5c:3e:7b:
         e5:67:06:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:37 2026 by rpki-client