Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
File:                     GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json)
Hash identifier:          SZbhR6zrSfZe4by/ckVfTM5zlOyHAeKzdQooiniDQl0=
Subject key identifier:   BF:25:6F:21:9F:05:F6:DF:E6:4D:BC:2B:2D:80:CD:78:43:C2:BA:9D
Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
Certificate issuer:       /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
Manifest number:          E3
Signing time:             Wed 15 Apr 2026 06:05:07 +0000
Manifest this update:     Wed 15 Apr 2026 06:05:07 +0000
Manifest next update:     Wed 22 Apr 2026 06:05:07 +0000
Files and hashes:         1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: 9kd/5Fm+wgtth/pUQ3wHgOGQy0H4KQDQPKG+LDxmuZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
                          rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8357, serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
        Validity
            Not Before: Apr 15 06:05:07 2026 GMT
            Not After : Apr 22 06:05:07 2026 GMT
        Subject: CN=69df2a93-a972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1c:38:a7:db:bd:01:64:66:f7:8b:15:b1:a4:
                    4c:d9:08:79:45:fb:f6:dd:7e:ed:b0:83:ac:7a:b5:
                    6d:8d:9e:5e:e4:c3:b9:da:f7:cf:1e:5a:97:e2:9e:
                    b6:bb:08:82:88:43:23:06:24:39:d9:b6:66:32:0f:
                    01:0a:a9:42:61:12:de:e4:2b:9d:6b:fc:12:4d:d7:
                    30:38:af:8b:5d:60:d3:2a:08:18:41:cd:f1:cc:08:
                    98:1a:13:9c:06:55:55:e2:4c:a9:a8:84:eb:75:8b:
                    cf:33:69:21:c2:ce:fb:06:ed:54:bd:1b:68:c3:f0:
                    9b:ec:3b:1b:c1:c3:c3:85:6c:34:45:4b:b7:a3:cd:
                    7c:9b:ae:2d:28:30:9c:a5:5a:80:a4:f3:81:18:5c:
                    43:e2:ff:79:e7:2b:f7:cf:f6:0c:e0:7e:4c:ae:e6:
                    4a:29:ab:2e:10:9d:d5:30:b6:36:df:a4:5a:b8:b0:
                    34:cb:38:f9:0f:aa:6c:71:7a:a0:4b:2a:64:30:32:
                    76:75:b4:9a:c3:1b:60:3f:1c:a2:c6:a4:9a:a7:21:
                    45:97:35:b3:f4:30:00:d1:f6:56:84:45:8c:9f:24:
                    02:b6:cd:5a:6f:2c:eb:31:ba:7f:d6:85:b4:7e:a9:
                    85:55:fd:ac:87:ee:72:64:43:9e:04:72:83:b7:ca:
                    89:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:25:6F:21:9F:05:F6:DF:E6:4D:BC:2B:2D:80:CD:78:43:C2:BA:9D
            X509v3 Authority Key Identifier:
                keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:c2:1d:8a:3d:35:17:2b:a8:18:73:2d:9d:79:c5:0f:ba:47:
         ac:ca:c3:04:22:6d:e3:af:5b:a9:83:97:30:19:33:ad:5e:78:
         2e:8d:21:59:6d:70:ae:ad:68:df:c3:f6:03:91:04:d0:00:cc:
         7a:58:97:7b:1e:41:f0:80:79:ef:b3:e5:dc:9e:ac:56:25:35:
         48:43:61:80:a5:51:dc:b9:d0:e5:78:b8:6d:93:41:db:ec:ef:
         a9:a6:0c:9a:5f:90:d5:a3:be:4d:9e:dd:49:27:be:21:91:5c:
         53:da:f6:c8:29:60:e6:81:f0:de:ee:86:18:44:2b:13:7f:f0:
         8b:93:7a:d9:ec:dd:3b:34:fb:26:32:86:33:f8:4a:6a:89:56:
         78:8a:6e:24:cc:65:5b:e0:c7:5c:be:23:3a:cd:7f:de:80:df:
         0a:6d:b9:1b:a2:c6:df:28:73:42:83:f7:9a:be:48:41:87:c7:
         97:38:bf:e7:fb:b0:c9:ad:70:70:68:c5:9c:ac:97:b0:1d:ab:
         b9:d8:99:c1:30:44:2c:a5:b4:53:8a:06:6b:17:93:9c:33:56:
         9f:65:fe:e1:a5:34:95:09:b6:b9:25:8e:97:4f:79:fe:4a:18:
         68:c9:4d:1e:be:07:d9:70:13:d8:9e:9b:af:da:74:33:19:4c:
         90:c4:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:07 2026 by rpki-client