Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
File:                     gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json)
Hash identifier:          QrvFn6uTTF8PvIVbbQnvm3gHWl4BvLQf2Gh+vGpa4Iw=
Subject key identifier:   54:19:5F:46:D0:F5:94:06:19:FF:E8:C8:40:CD:18:F1:E6:68:CB:E8
Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A
Certificate issuer:       /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
Certificate serial:       0461
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
Manifest number:          045B
Signing time:             Sun 01 Mar 2026 00:55:30 +0000
Manifest this update:     Sun 01 Mar 2026 00:55:29 +0000
Manifest next update:     Sun 08 Mar 2026 00:55:29 +0000
Files and hashes:         1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: T41q+AAkVxtmhYRWQZFQxpHFO3plrmWlKV1Aa6O6gyw=)
                          2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: bpLtQ8qLL6l2ZogXhZIDbdT4T6FC+6P3DrjrNo4piak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121 (0x461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A
        Validity
            Not Before: Mar  1 00:55:29 2026 GMT
            Not After : Mar  8 00:55:29 2026 GMT
        Subject: CN=69a38e81-ba69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:9c:d1:b7:77:42:31:b4:03:27:3c:37:33:
                    21:2a:cd:e9:c9:88:77:67:c4:31:ca:52:74:de:66:
                    3b:ad:a5:34:8d:e9:a8:b7:5a:c4:33:38:12:68:a5:
                    82:ea:e4:f8:75:0a:e5:9c:53:82:f5:74:56:d2:b2:
                    0a:c0:98:9f:e8:65:30:e7:1f:94:2c:8c:b4:28:bf:
                    4d:3d:3a:e8:52:b0:d7:ac:ae:fa:41:67:39:1e:cf:
                    1b:3d:8c:90:02:da:d8:4d:b2:9b:21:78:1b:69:74:
                    e2:0a:4b:d9:1a:7e:e3:70:66:4f:28:7f:ec:ec:96:
                    57:2e:4b:4a:6a:e5:f2:20:dd:96:2f:fb:f4:ff:d8:
                    43:65:b0:98:03:d0:ef:28:b4:3d:6c:13:29:c2:f2:
                    26:53:b8:9b:51:d2:d7:d1:a0:0a:55:bf:86:11:22:
                    4e:bb:d8:67:33:e8:81:93:ac:4a:82:31:a3:54:2f:
                    c6:d6:0b:2c:85:ad:d0:f2:e4:26:07:2a:b5:30:05:
                    f3:b8:92:d5:f3:a9:96:9a:2f:74:72:b1:c8:dc:25:
                    8a:4a:75:35:67:b3:94:f4:74:b2:92:e9:12:84:a3:
                    50:6a:99:ae:5f:7e:f9:8d:41:39:29:e5:13:65:05:
                    b9:f1:a2:9e:33:6c:8e:58:9a:22:e3:ea:ee:eb:a9:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:19:5F:46:D0:F5:94:06:19:FF:E8:C8:40:CD:18:F1:E6:68:CB:E8
            X509v3 Authority Key Identifier:
                keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b1:82:32:05:3c:5c:d5:36:e7:07:52:aa:b5:3c:c9:f7:53:
         95:bc:e6:62:00:93:08:8a:43:a3:5e:56:eb:e4:c4:3a:de:3d:
         52:14:1e:57:b6:82:69:f9:8d:66:1d:bb:6c:8c:df:be:e1:7b:
         b3:ac:1b:45:f2:db:80:bc:32:71:99:82:e5:3a:e2:4c:51:1a:
         a0:f1:fd:49:78:69:c2:4c:9c:3e:04:76:a1:37:a1:1a:5d:ca:
         0f:10:db:51:21:00:ea:ea:42:0d:cc:00:83:e3:9d:ad:0f:5a:
         4c:44:fc:90:a7:b7:b5:10:96:ac:23:6e:13:b6:e9:80:64:30:
         9c:bf:c8:97:bf:c6:7e:43:dc:d4:9c:be:5f:61:18:0d:60:ad:
         29:16:9e:83:24:86:ae:47:ba:6d:9d:cf:82:11:57:b4:51:49:
         be:8c:0f:fd:4e:ce:61:79:b7:1b:ed:cf:13:fb:2f:9c:d0:01:
         25:26:0e:69:c7:b9:f5:e6:80:84:7a:d7:cb:14:06:b1:dc:46:
         49:24:bc:5d:ba:d1:e3:62:5e:9d:3a:84:f3:fb:7a:75:2d:6a:
         5d:6b:b5:12:6a:cd:78:71:f6:e4:aa:58:24:cf:d3:20:ee:4b:
         1d:ea:52:0d:ec:a5:16:49:d7:ae:f0:0f:0b:b8:76:24:35:82:
         f3:c7:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:05 2026 by rpki-client