Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
File:                     gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json)
Hash identifier:          EczWvO1ZLCbo3KCKo3i/JpjejBaxRiHje+a7epW9udc=
Subject key identifier:   85:00:CA:1E:54:9B:E7:CB:2A:CE:C3:3F:95:8B:70:B4:B9:D0:EC:F8
Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
Certificate issuer:       /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
Manifest number:          78
Signing time:             Sun 01 Mar 2026 06:47:10 +0000
Manifest this update:     Sun 01 Mar 2026 06:47:10 +0000
Manifest next update:     Sun 08 Mar 2026 06:47:10 +0000
Files and hashes:         1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: EFxG3J2xDePdjkAMli6OTyVN37AZ1ar5xY9wvEjJ5sQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
        Validity
            Not Before: Mar  1 06:47:10 2026 GMT
            Not After : Mar  8 06:47:10 2026 GMT
        Subject: CN=69a3e0ee-a082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:3c:31:ef:bb:b0:94:0b:3d:67:03:e3:6e:
                    2f:83:19:eb:db:05:d0:30:d8:13:37:bf:2c:e9:d2:
                    8a:94:67:5a:68:4c:99:a7:c4:ec:07:01:37:36:e4:
                    5b:43:94:6c:88:49:5d:70:87:84:c3:d8:5f:1f:2d:
                    05:87:fd:de:11:0a:92:90:41:75:4b:6f:4a:db:a3:
                    98:53:04:f3:7f:b4:20:bb:9e:68:e8:4b:b4:02:71:
                    48:26:a1:f2:b7:53:43:1d:db:c5:de:ca:c6:06:aa:
                    fc:4b:84:77:50:87:01:47:44:95:a0:42:af:35:d2:
                    a8:d8:85:2d:96:ba:ee:bd:f1:3f:52:79:90:e0:44:
                    ec:3f:db:28:bf:23:fb:5b:0c:d2:c1:a3:10:d1:55:
                    4c:c5:95:e0:60:a2:50:d8:65:6b:d4:ea:90:fc:78:
                    a6:c6:08:ac:34:25:b6:0b:5c:cf:37:e7:1e:7a:1c:
                    c1:34:83:ac:ab:aa:fe:b4:8b:9e:93:0e:c1:5a:c5:
                    10:ef:3a:8c:c0:cf:f2:54:3b:92:18:ef:4e:27:f0:
                    ce:39:cd:5c:e1:43:c1:0d:3c:9c:50:d6:9e:b5:ab:
                    9d:d9:48:3b:2c:ab:1d:13:01:66:b8:c1:e7:ae:0b:
                    9b:d0:91:e3:1e:aa:1f:33:63:e5:6d:af:3e:1e:30:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:00:CA:1E:54:9B:E7:CB:2A:CE:C3:3F:95:8B:70:B4:B9:D0:EC:F8
            X509v3 Authority Key Identifier:
                keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:34:3e:d8:76:cb:23:c4:ac:4b:cc:43:3c:78:01:2d:58:23:
         8c:f1:84:37:ef:fc:b0:3d:c1:bd:a1:97:f5:ef:36:2c:d1:9b:
         1f:99:a8:28:0e:c6:92:91:ff:99:73:0d:ce:35:c3:83:ee:52:
         0a:91:2b:37:fd:dc:51:13:5e:2b:b3:b8:72:ea:29:6d:43:c4:
         c0:ec:1a:56:8d:17:4e:07:21:7b:c4:48:0d:81:b7:32:6a:da:
         86:69:b0:c7:be:c3:0a:21:31:9d:4d:4d:3e:90:bb:5c:9b:d0:
         b3:b6:29:ec:72:d0:15:1a:57:c9:c7:6a:e2:12:03:ab:a4:f8:
         8a:5c:9c:05:39:65:e0:f1:26:4f:16:74:45:c2:23:1e:35:ab:
         fc:34:a3:9e:6a:a3:56:c4:5d:f3:dd:1f:33:2d:2e:25:31:72:
         d1:12:30:fe:f3:4b:41:e5:22:eb:23:05:b8:00:f7:37:d8:82:
         c3:ab:24:8e:d2:6b:1e:e5:e9:1f:3f:e1:a1:1a:ed:41:99:b8:
         72:3e:fd:83:43:7f:be:1f:d7:7d:c4:28:db:6d:91:fe:06:a4:
         7c:84:64:84:85:19:f6:87:fa:e8:0c:27:73:3e:4a:fe:05:cd:
         72:84:42:b0:9f:f3:f5:01:ee:a4:20:f0:c9:94:8c:a0:2a:f2:
         2d:55:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:21:51 2026 by rpki-client