Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
File:                     gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json)
Hash identifier:          X05j6rs74yVwoUk1qBDbmQ9BLmYb1fDWXQnlyO0ZovU=
Subject key identifier:   E6:FE:8C:68:B3:25:30:58:D3:C0:FA:EA:7A:7E:0F:9F:43:25:85:B3
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Certificate issuer:       /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial:       0716
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
Manifest number:          0707
Signing time:             Thu 16 Apr 2026 21:54:47 +0000
Manifest this update:     Thu 16 Apr 2026 21:54:47 +0000
Manifest next update:     Thu 23 Apr 2026 21:54:47 +0000
Files and hashes:         1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: 3U8nvCTapTu1XXigzOfAskC+umxcwyGUzcAtK0k7YTs=)
                          2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: AvFpiPzoylVw4G/MsLt4TbCQjir5YYIiqW7GJXdzpek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
        Validity
            Not Before: Apr 16 21:54:47 2026 GMT
            Not After : Apr 23 21:54:47 2026 GMT
        Subject: CN=69e15aa7-3b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:f4:77:cd:b0:ba:23:ce:81:89:58:89:69:
                    f3:89:72:82:d0:0b:1e:37:ae:f9:d0:e0:53:08:9c:
                    41:1b:07:a4:62:ac:db:ac:47:e3:4f:1b:6d:34:c7:
                    1e:21:ea:9f:6b:74:3c:47:98:01:64:06:3f:61:29:
                    04:07:fe:e1:a6:c5:7f:49:79:89:74:3f:8d:cf:d0:
                    af:95:2a:79:f0:b5:2d:c2:9b:63:19:10:4f:69:2d:
                    10:f7:06:b4:5f:28:aa:38:e2:94:02:b5:00:ed:36:
                    40:b6:64:9f:8a:e7:49:5d:e4:14:24:08:7e:2c:d8:
                    dc:60:c1:28:37:34:25:74:97:80:29:47:82:6d:7c:
                    59:e5:63:9a:4c:59:21:6e:a1:6a:fd:17:d0:06:3c:
                    14:be:37:19:94:c9:35:7b:69:43:3b:c9:78:24:b3:
                    9b:84:b9:04:34:fd:41:05:7e:8e:2c:d9:68:b7:f2:
                    9b:dd:d1:95:05:4e:62:83:51:24:97:82:df:69:52:
                    19:33:39:c1:80:35:e8:2d:2c:ad:76:9b:49:7c:f2:
                    ef:fb:b5:7c:d4:47:28:ef:e3:75:cc:4a:a9:d7:5f:
                    10:71:6b:21:76:cf:3b:40:7c:76:3f:65:08:18:7f:
                    16:d4:0c:2e:3d:3d:a5:3b:09:7e:34:43:70:3a:77:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FE:8C:68:B3:25:30:58:D3:C0:FA:EA:7A:7E:0F:9F:43:25:85:B3
            X509v3 Authority Key Identifier:
                keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:54:c7:13:be:aa:10:5c:ac:b0:75:d7:75:83:9f:fd:ea:
         79:eb:4c:b7:a5:c5:1e:ed:f3:45:8b:b3:1e:10:d5:d2:14:02:
         fd:50:2d:6e:08:85:9e:e8:e1:e5:12:c8:47:33:e4:8a:2b:95:
         4c:d9:1f:c8:2f:b8:24:0c:b7:68:d0:b4:d8:50:3a:a5:75:45:
         e3:d2:b3:a0:8a:23:fd:cb:de:54:6f:5e:24:de:3f:5b:7e:a4:
         db:18:c3:26:a4:f3:a8:3e:60:1d:23:33:14:dd:e5:84:0a:69:
         a7:c8:d8:68:ee:09:a6:ab:c5:da:35:98:23:10:b8:94:89:77:
         db:50:d6:5a:a0:c1:6e:ed:29:5e:1e:38:9a:98:82:10:2d:a7:
         6b:09:9c:02:4e:fe:6f:7e:2b:99:0c:c0:f0:b3:de:22:a5:22:
         16:d0:a5:6c:00:a5:56:ff:79:d3:ae:4f:b8:3a:d2:e9:54:1e:
         73:ca:ad:05:39:55:3f:28:60:d0:64:47:41:78:85:06:53:0e:
         4e:81:26:e5:53:59:3b:ee:0f:d9:7b:4c:21:91:93:3c:c2:36:
         c5:f0:ea:e1:77:f7:27:01:bf:1f:09:9a:80:34:eb:51:26:af:
         0b:a4:0c:9a:89:fc:ed:17:fc:0d:30:ad:f0:ce:44:60:16:a3:
         18:9e:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:43:14 2026 by rpki-client