Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File:                     GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier:          vIBSZh0qiXlCECF+Vcb/zf5Ct38Uz8QFuMyb0GS0fa4=
Subject key identifier:   1B:0A:DE:B3:D2:25:05:40:55:6B:B0:13:DA:6F:11:EF:0C:F9:97:BD
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer:       /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial:       0AE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number:          0AD8
Signing time:             Thu 16 Apr 2026 19:21:43 +0000
Manifest this update:     Thu 16 Apr 2026 19:21:42 +0000
Manifest next update:     Thu 23 Apr 2026 19:21:42 +0000
Files and hashes:         1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: 4kIflccBCBmBv+jV/E3T0q7VVL7CsuEiPGEENTMFu64=)
                          2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
                          rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788 (0xae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
        Validity
            Not Before: Apr 16 19:21:42 2026 GMT
            Not After : Apr 23 19:21:42 2026 GMT
        Subject: CN=69e136c7-dd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c5:58:a6:c2:7e:08:ef:c1:19:d4:00:56:b2:
                    bd:06:a1:f4:d8:57:8c:9e:a4:4a:6f:b5:4b:88:ce:
                    74:7c:57:b8:5f:db:d4:7f:8d:af:fc:7c:d4:f9:d5:
                    2a:f8:99:9a:0e:17:91:d9:47:43:b7:60:68:cc:62:
                    d4:cd:de:0e:4b:8e:e0:18:9a:d3:76:c0:2f:66:5b:
                    cd:7e:c4:5f:6a:6b:30:61:14:b7:17:7e:bf:0c:0d:
                    f3:07:e8:31:d8:3e:48:fe:21:5a:85:57:12:ea:7b:
                    e1:93:ac:27:23:18:08:ed:e8:f0:23:63:86:58:19:
                    32:6c:d5:ea:ac:3b:c5:2f:09:1f:e0:d8:84:6c:3d:
                    70:d7:d1:bd:32:20:e0:73:c4:bf:0b:62:47:f4:00:
                    0b:0c:75:0c:7d:fb:88:5d:2f:20:c3:47:eb:7e:bc:
                    4a:7a:e2:75:d2:93:9b:2b:a9:e4:8f:64:fa:32:74:
                    d0:b2:4b:c9:54:e1:8c:17:30:26:56:9d:26:d8:0a:
                    1b:12:4e:c2:01:29:11:74:b7:f8:a3:7c:52:b0:98:
                    c4:37:83:38:80:11:68:d1:8e:24:22:4f:d3:96:37:
                    92:c9:80:57:78:44:37:62:09:7d:e2:62:d0:1b:52:
                    2a:24:53:b7:44:39:c1:92:ae:83:f0:97:76:43:31:
                    7a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0A:DE:B3:D2:25:05:40:55:6B:B0:13:DA:6F:11:EF:0C:F9:97:BD
            X509v3 Authority Key Identifier:
                keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d1:2d:a4:6f:20:a4:ec:40:36:b1:77:ef:88:94:d0:33:e3:
         4c:90:11:3e:5a:5c:73:d6:02:7f:a8:9e:1d:05:cb:7d:5f:68:
         c6:46:f4:3d:42:73:d6:2c:76:28:f9:8e:ac:13:4a:4c:8e:88:
         3e:7d:ed:55:07:05:06:6d:46:61:83:62:95:b9:e7:e0:d3:28:
         b7:27:21:5e:f1:e9:97:02:d8:27:00:84:1b:f1:6b:38:57:39:
         cb:af:af:ec:08:f2:b7:cb:60:19:83:f2:07:ee:94:32:e1:64:
         7f:1f:f1:4d:a6:ea:30:6d:28:3a:f6:80:58:ed:82:03:d8:e3:
         59:fe:f6:7c:3a:24:d7:3f:b9:2b:20:4d:26:1e:e1:7d:e1:b0:
         67:26:dc:23:aa:cc:4c:4d:67:d3:69:c0:f2:88:10:6d:ff:14:
         c9:38:cb:d2:f3:56:70:2a:99:a5:35:e8:d7:6f:ea:5c:f8:66:
         00:55:59:6e:31:0f:5e:27:5c:a5:fc:0f:d9:74:e6:79:d8:5f:
         40:5b:1f:36:48:cd:0d:7d:2c:f0:f0:97:48:21:4a:9a:dd:d2:
         5f:80:ae:4a:f8:3a:20:66:88:34:b9:94:01:c2:ee:f7:96:df:
         2e:f9:b0:dc:b0:4d:0f:fb:ae:7b:19:3f:16:b1:fc:c9:91:a5:
         a1:db:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:06 2026 by rpki-client