Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
File:                     gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json)
Hash identifier:          yuNzftw0zPgxqputTQgMHAeIJDsnRYkav8qyPpMcCec=
Subject key identifier:   97:5D:66:B2:9D:3C:4D:E7:DD:69:1E:1F:B1:02:0A:E5:FF:FF:63:97
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Certificate issuer:       /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial:       06FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
Manifest number:          06ED
Signing time:             Mon 02 Mar 2026 01:57:16 +0000
Manifest this update:     Mon 02 Mar 2026 01:57:12 +0000
Manifest next update:     Mon 09 Mar 2026 01:57:12 +0000
Files and hashes:         1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: bpvOxaH96Iwbxx1Q/fsE3cJpsoB7pMd7LHx2tmAIZsI=)
                          2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: euM4m6y+HWeOgBOgRlKJkFwGXEQIRQ/gnzbJUpnYNh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
        Validity
            Not Before: Mar  2 01:57:12 2026 GMT
            Not After : Mar  9 01:57:12 2026 GMT
        Subject: CN=69a4ee7b-7ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:34:c0:36:fe:29:50:e3:f8:e9:e6:78:4b:16:
                    f1:ca:76:72:71:ba:a2:6d:7b:c4:7b:24:cc:61:25:
                    17:6a:ab:fd:08:d0:31:b3:7e:60:31:6b:91:cc:f4:
                    eb:ef:52:dd:7e:f5:c3:48:d1:ab:02:30:79:2a:47:
                    b9:4f:83:7b:b0:a5:3c:3d:2c:e3:c2:ff:2f:23:f1:
                    67:88:28:b0:f6:ad:a2:20:13:06:a4:8c:03:db:3b:
                    ed:d0:29:06:c8:d4:eb:fe:5e:5b:93:85:35:ad:97:
                    78:e5:03:da:ae:86:59:c4:92:eb:9a:66:65:27:43:
                    98:eb:1a:a8:79:65:4d:b8:61:66:22:b8:b2:5d:42:
                    a6:3f:1a:05:e4:c7:4d:db:c5:4e:b5:37:ba:3e:aa:
                    4a:2b:1c:6c:94:3b:a9:58:36:65:48:38:12:f2:8d:
                    80:e2:5a:cd:97:f0:76:eb:33:15:5b:e9:46:00:e2:
                    98:00:1f:d5:61:53:b2:e8:36:d1:a8:7d:0d:e9:a7:
                    03:d6:28:39:a4:8c:bd:29:aa:0f:b6:43:fa:6d:20:
                    cd:fb:f1:59:9f:d5:31:3b:54:0d:7f:8f:1c:a1:b6:
                    0a:c3:3c:e3:3e:c3:6f:1c:7d:a1:6f:d9:8c:10:c3:
                    d7:6a:e3:09:e6:69:f0:60:57:20:5d:0c:f9:6c:16:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5D:66:B2:9D:3C:4D:E7:DD:69:1E:1F:B1:02:0A:E5:FF:FF:63:97
            X509v3 Authority Key Identifier:
                keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bc:ff:02:28:29:0d:2e:a0:c0:57:eb:16:17:37:f4:f6:70:
         4b:74:c3:b3:af:ed:08:0b:d5:ce:04:bf:32:1d:69:64:32:f6:
         0d:8f:6b:ef:51:d6:9a:1c:7c:b3:b4:87:f4:1d:9d:f8:d5:b3:
         a4:9d:be:1b:8a:1a:cc:ca:38:ab:4b:96:b1:d6:ae:e1:aa:dd:
         8f:93:60:d3:6a:b6:c7:71:46:83:c9:25:29:dd:ee:22:c9:cd:
         40:cb:6d:a4:cd:6c:9b:c2:1b:19:ca:57:a6:05:96:ec:0d:92:
         04:77:9f:c7:bd:90:1d:4b:ea:84:81:8e:26:ca:2f:e8:f4:e0:
         e2:8c:b8:80:60:7b:43:06:e3:e0:30:f3:c9:87:af:3d:36:43:
         60:be:5e:df:95:9f:47:ad:6a:6c:ff:b8:77:69:86:20:e8:f3:
         de:1d:c5:ef:e2:f8:fb:5c:e9:56:b3:3b:50:61:8c:9d:64:8e:
         03:52:3e:0a:d4:14:92:2d:ba:3c:f6:79:87:40:55:89:fd:f5:
         c3:0a:29:bf:ab:0c:70:71:fb:d5:fb:71:26:a2:c1:69:09:44:
         2a:a1:dd:67:05:65:19:db:bb:71:e3:37:b0:ef:77:5a:49:39:
         e5:dc:49:4d:2e:cd:19:fd:e4:c5:63:8b:87:b5:bc:30:fb:c8:
         24:b1:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:53 2026 by rpki-client