Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
File:                     _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json)
Hash identifier:          YdfNxxN5fUy3mdYNtt0HkfbZ/qDeZDRYUdz30uz4MMU=
Subject key identifier:   68:15:7A:EE:82:7B:D2:0C:63:DF:89:A9:8A:EF:8E:51:4C:1A:E8:09
Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E
Certificate issuer:       /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E
Certificate serial:       19ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
Manifest number:          201D
Signing time:             Thu 16 Apr 2026 16:18:43 +0000
Manifest this update:     Thu 16 Apr 2026 16:18:43 +0000
Manifest next update:     Thu 23 Apr 2026 16:18:43 +0000
Files and hashes:         1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: VR+mVszjruIfWW6sb79CKAI2Cl+SjewA3SsHDlMhcAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl
                          rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6637 (0x19ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5FCD, serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E
        Validity
            Not Before: Apr 16 16:18:43 2026 GMT
            Not After : Apr 23 16:18:43 2026 GMT
        Subject: CN=69e10be3-c5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:7b:f7:8f:38:ab:02:23:9a:39:10:e8:98:
                    fb:c3:d5:70:a2:95:ea:c5:1a:18:9e:7a:05:15:43:
                    ab:a8:67:91:2f:ec:c5:24:54:09:2d:18:db:04:de:
                    ca:2b:12:04:33:fd:f4:0e:87:cc:8a:d9:c6:92:d8:
                    b7:b6:40:7e:7d:b3:1c:60:e3:d7:c8:3a:d5:8c:12:
                    62:f1:47:a8:dd:cd:47:e6:d3:a3:6c:68:15:82:c7:
                    1d:7e:d1:5d:d2:cb:a4:f1:46:f8:4c:d1:05:bd:2b:
                    0a:cf:82:fa:bb:f1:7d:8c:cf:2a:70:af:3d:c4:5b:
                    af:f8:75:87:9a:11:97:8b:15:9e:f6:d1:a0:0b:8c:
                    cf:fd:d8:09:3e:4b:7c:56:3e:6c:54:8a:b6:b0:e7:
                    38:b6:58:4e:f1:36:4e:4e:6b:04:38:65:71:7b:a5:
                    48:42:48:dc:e7:43:39:f8:d6:10:97:24:cb:fc:16:
                    9e:b9:ed:61:6a:db:fd:1d:1a:48:b0:df:7e:29:5f:
                    02:e9:d5:7f:99:f0:ed:fa:ea:9b:7a:e2:40:ed:22:
                    fb:80:02:ab:d0:8b:1a:06:be:fd:b7:cd:36:94:87:
                    f2:95:00:46:39:fa:d1:92:69:a1:0a:49:9b:79:be:
                    82:48:6f:d4:aa:04:07:26:3c:b0:14:2f:54:52:61:
                    9b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:15:7A:EE:82:7B:D2:0C:63:DF:89:A9:8A:EF:8E:51:4C:1A:E8:09
            X509v3 Authority Key Identifier:
                keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:e5:f3:2c:48:1e:e8:12:dc:ce:d5:89:06:ce:76:bf:3f:
         78:23:f7:a3:11:7c:38:34:df:5f:b0:1e:2a:f6:74:ac:76:5a:
         a0:b0:e4:61:ec:1d:14:06:37:ea:3a:c3:47:07:c0:b5:4f:9a:
         1d:b8:de:82:38:15:b4:7c:d3:af:2a:c0:0b:b4:69:d5:ab:94:
         6a:5f:39:e0:51:3d:7c:61:f5:bc:8c:bb:03:ae:4f:07:d2:13:
         b3:2c:a4:d8:01:77:d9:e1:85:df:fc:8c:41:99:1b:ae:1d:2e:
         9c:bb:3e:9b:f5:9e:f7:d0:e0:7e:f4:32:1e:3b:3b:e7:05:17:
         41:97:8b:33:de:1a:eb:30:0e:e9:7b:9b:49:67:72:04:d7:8b:
         58:43:a8:a0:d4:98:fe:f3:b4:ee:70:8d:e8:df:d7:13:dd:ba:
         c7:e1:6e:bb:8d:05:8a:5f:2f:79:86:b4:01:5a:b5:8a:c7:45:
         c0:6e:79:98:b9:c5:3a:f1:1b:a9:0d:1c:52:19:79:40:4d:55:
         7a:ef:a9:8e:f9:cb:1a:9f:bd:3b:c9:ff:35:59:81:b8:d4:a5:
         29:27:d0:2e:4a:a0:b8:8e:2e:40:c8:f3:7b:82:e1:cc:6b:be:
         2b:d2:56:68:3c:c8:62:26:78:c5:80:e4:0e:70:2a:c0:c0:51:
         83:0c:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:30 2026 by rpki-client