Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
File:                     GHotNbr5BXwPC40mLS5dYiajI4I.mft (raw, json)
Hash identifier:          UDJQUBP0wmiq4mi12A21fZ7wu4hIMMQoG/4FXi/kx9M=
Subject key identifier:   0A:CF:45:A3:5A:B7:25:31:0E:60:A7:66:E7:88:CE:46:BB:39:FB:24
Authority key identifier: 18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82
Certificate issuer:       /CN=A91FD1C3/serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
Manifest number:          01ED
Signing time:             Fri 17 Apr 2026 03:08:01 +0000
Manifest this update:     Fri 17 Apr 2026 03:08:00 +0000
Manifest next update:     Fri 24 Apr 2026 03:08:00 +0000
Files and hashes:         1: GHotNbr5BXwPC40mLS5dYiajI4I.crl (hash: RZZbJjc754dS0YNd4nUS71VyofUSZRdzWikfWa+1h4o=)
                          2: 5773966456D011EE9C8F8C56C4F9AE02.roa (hash: V94XCH+V6AH+/jsR1uuPC4R2sBLnX4SmOxfv0adXwxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl
                          rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD1C3, serialNumber=187A2D35BAF9057C0F0B8D262D2E5D6226A32382
        Validity
            Not Before: Apr 17 03:08:00 2026 GMT
            Not After : Apr 24 03:08:00 2026 GMT
        Subject: CN=69e1a411-32fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:3e:66:72:24:56:cf:0d:de:b6:08:0e:0b:
                    1f:4c:71:90:a5:93:31:4f:e5:b5:6b:3b:8d:87:39:
                    fe:1c:3e:eb:c2:7d:5c:a1:7c:de:0c:2f:ca:75:e8:
                    87:41:0c:ef:57:fb:21:09:f5:71:7b:20:9f:61:67:
                    de:d2:b3:39:08:6c:7b:0e:01:01:11:94:c4:09:88:
                    41:0d:8f:01:79:f5:9b:66:36:a1:67:52:27:8a:bc:
                    ca:16:09:6d:58:9a:b4:a1:36:e8:c3:61:f3:5d:23:
                    51:16:06:65:87:ac:fe:49:c8:b0:79:ad:3a:8a:5f:
                    10:91:b4:cd:1b:b4:f8:af:e1:2b:ce:20:54:1b:e7:
                    d2:76:33:d2:47:d1:72:3e:a9:31:d0:b0:c8:b5:7b:
                    16:f4:3f:00:9a:ad:29:bd:70:4e:04:f3:e2:20:18:
                    c7:62:5c:81:c9:45:86:7e:43:49:6c:bb:a8:4e:22:
                    ce:d5:8d:f5:69:51:dc:7e:30:2d:55:2e:fd:97:05:
                    df:c0:12:b0:75:ac:d9:37:ee:76:74:d4:9c:d2:3c:
                    12:f0:c1:f4:90:68:1c:a8:97:b5:fc:2a:99:45:43:
                    a0:5a:54:22:43:54:a3:7c:75:cb:53:47:13:5b:6a:
                    99:d5:9b:81:cb:f1:26:55:09:1f:6b:e9:0e:a7:0d:
                    e1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CF:45:A3:5A:B7:25:31:0E:60:A7:66:E7:88:CE:46:BB:39:FB:24
            X509v3 Authority Key Identifier:
                keyid:18:7A:2D:35:BA:F9:05:7C:0F:0B:8D:26:2D:2E:5D:62:26:A3:23:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHotNbr5BXwPC40mLS5dYiajI4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD1C3/FB71C56656CF11EEA8C50456C4F9AE02/GHotNbr5BXwPC40mLS5dYiajI4I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ca:67:be:6a:a7:cb:45:41:ec:f8:f3:eb:14:db:c5:d7:79:
         71:01:40:de:12:18:05:63:6f:ab:26:a3:b6:c1:e6:d5:61:37:
         0e:a8:fb:12:47:fd:68:5f:41:f4:61:f6:ca:22:2b:99:d7:e6:
         b9:31:44:b6:b2:55:71:65:a9:ad:02:77:2e:ed:a8:5b:ef:10:
         e9:4f:db:d4:e7:c7:37:d2:9f:c8:35:97:db:f8:87:76:f1:78:
         d8:e0:4a:27:6c:ff:94:69:bd:16:0d:49:1e:59:4f:53:0a:84:
         67:d5:e6:82:ce:20:35:7b:10:1b:0a:a9:5c:43:46:24:44:3e:
         2c:62:63:8b:76:36:81:96:34:87:5d:0f:14:23:f2:42:a7:39:
         38:51:fc:02:ee:cd:e7:94:0f:d3:22:a3:20:a4:72:64:44:36:
         ed:b7:24:93:1e:95:66:b2:6c:89:58:01:94:dd:01:83:b9:9a:
         df:85:d5:d5:97:94:6f:18:cd:fc:a0:0f:db:92:fd:15:9b:ab:
         05:c6:10:ba:be:aa:53:28:21:33:ce:3f:cd:91:1f:51:4c:8f:
         8e:5b:d8:d5:d3:af:23:44:49:03:45:51:66:4d:04:1b:a3:e3:
         73:97:5c:fa:b2:0f:43:98:c6:2c:5c:e9:32:ae:30:f9:f7:b4:
         7c:14:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:25 2026 by rpki-client