Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File:                     gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier:          QopVDx8/4O/AjL4kMBCLuzIsdrk9DvRD1MzPR4i9SOg=
Subject key identifier:   B3:A1:CF:40:3B:C3:45:20:97:46:D8:B0:0D:42:88:63:9C:5F:34:B4
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer:       /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial:       02AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number:          0289
Signing time:             Fri 17 Apr 2026 01:33:56 +0000
Manifest this update:     Fri 17 Apr 2026 01:33:55 +0000
Manifest next update:     Fri 24 Apr 2026 01:33:55 +0000
Files and hashes:         1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: 5SyYXdPnnW2VwTjvUHIBs0vAAyz5Y3i36fdACRobKRo=)
                          2: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: qF8UQpduJURSSws6qaTkNhteNuCF3Xv0DEEsWe94W2k=)
                          3: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: Av4mHmkvx3iYn7v4H7bW4jhBpHBzklQ4N3gttmKh3/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
        Validity
            Not Before: Apr 17 01:33:55 2026 GMT
            Not After : Apr 24 01:33:55 2026 GMT
        Subject: CN=69e18e04-e386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:4b:bc:a5:59:da:2a:ca:26:24:2a:a5:4b:
                    37:22:d7:6d:72:eb:4a:f8:73:70:bc:5f:b6:03:5f:
                    30:6e:09:57:f7:fd:b7:24:b6:f9:c6:90:11:a8:50:
                    74:bf:79:70:2a:80:ba:58:44:2c:2f:fc:d2:5b:aa:
                    27:81:fa:7a:51:e2:27:d5:25:21:5f:4e:63:6b:85:
                    97:44:eb:2d:8c:d9:d0:5e:1e:04:b8:9a:7c:5d:57:
                    11:f0:8b:0d:db:a2:2d:3a:9b:da:96:c9:12:9f:91:
                    33:70:97:3f:db:12:02:52:49:f5:c8:44:c4:2f:22:
                    2a:4a:9f:30:3b:df:4d:fa:04:30:0b:70:18:27:20:
                    bd:dc:38:40:82:dc:e7:d4:3a:0e:bb:aa:4f:07:b4:
                    03:e2:ce:30:00:9c:6e:de:fa:f7:e6:a5:ce:94:81:
                    80:0c:b1:c3:7e:aa:c3:6d:8c:32:25:61:5e:bd:e9:
                    a8:f1:cd:4e:e0:65:cb:cf:90:c5:71:fd:42:d2:07:
                    a0:ce:92:2e:d3:9d:db:91:64:f6:bc:0f:1c:ab:e9:
                    72:a8:c2:b6:33:b5:d4:88:4a:cf:8a:d1:94:01:10:
                    df:90:7c:a1:11:b8:4d:c5:bf:20:60:b1:f0:7d:a7:
                    95:35:d8:32:38:30:71:7e:39:f3:64:0c:b2:4a:81:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A1:CF:40:3B:C3:45:20:97:46:D8:B0:0D:42:88:63:9C:5F:34:B4
            X509v3 Authority Key Identifier:
                keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:59:c9:58:db:74:19:be:c0:2f:19:fd:24:23:8d:ba:dc:2e:
         62:3a:86:78:75:85:9e:46:e8:55:9a:ad:c9:5d:1e:f8:34:84:
         e7:7f:12:2d:8b:88:3f:c1:10:7e:5c:fb:d0:7a:0b:55:55:a8:
         1c:50:61:8d:dc:07:b4:07:7b:28:2c:48:b7:d4:bd:8e:37:19:
         95:d3:f7:a1:24:39:61:f8:df:eb:91:e8:a2:1b:ed:60:29:aa:
         f1:23:43:e6:bf:f9:fe:19:ed:b8:c2:f0:fe:50:49:0a:9c:78:
         60:a8:a9:f8:81:e3:68:24:7d:ee:93:b3:14:b4:7f:4d:da:3d:
         f0:54:c9:88:5d:e9:e3:2c:cc:1c:d7:df:ba:5b:4f:45:b7:e6:
         33:c4:5d:5f:e7:8b:5e:e5:dd:a1:c5:98:3e:1d:eb:ee:0c:68:
         9a:47:f0:5f:b8:17:f3:9c:b1:28:b8:2f:32:62:60:70:80:de:
         1d:54:d1:2e:5c:c7:b9:ea:98:a2:be:36:d3:d6:3d:6d:3e:4b:
         b9:e2:80:c7:65:79:be:d4:2b:68:1a:2b:39:30:15:8a:3c:15:
         04:50:20:4d:21:b4:11:40:94:b8:9d:d4:fa:1a:a2:39:4c:91:
         eb:d3:9f:ef:c3:06:5c:46:66:83:8e:30:f5:a7:fb:73:6e:bc:
         29:1c:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:42 2026 by rpki-client