Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File:                     4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier:          STwR/Zhnr/Ag0Sa9F3jow3U4QW8cGhNJp70YH+Ro4Hk=
Subject key identifier:   DF:B6:73:F3:93:0F:C3:96:3B:D5:90:F5:62:03:AE:3E:8E:81:04:4D
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer:       /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number:          0190
Signing time:             Sun 19 Apr 2026 04:09:02 +0000
Manifest this update:     Sun 19 Apr 2026 04:09:01 +0000
Manifest next update:     Sun 26 Apr 2026 04:09:01 +0000
Files and hashes:         1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: BlnhiH34LHbFiPU9y7UITtV52uLvyffce6DH4KSrWRY=)
                          2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: /p0IRebK1ecfFLpUcCA3qAEpMKVqatFf1hx/y6EBTmI=)
                          3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: XjHUkWL+sFmZoNR2qFeU0dNbQ2ZM/7PQGFCwI1qnX4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
        Validity
            Not Before: Apr 19 04:09:01 2026 GMT
            Not After : Apr 26 04:09:01 2026 GMT
        Subject: CN=69e4555e-2d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dd:8a:fa:67:a7:e6:85:2a:33:6f:60:45:07:
                    5c:a8:f7:62:f3:c1:df:25:c3:77:7f:7e:90:bf:e8:
                    45:8a:21:d5:57:1f:c8:61:f2:89:77:24:49:67:55:
                    21:9f:df:29:b5:ff:98:bb:d7:a0:60:1d:c5:a3:28:
                    2c:e3:2a:cd:a9:b4:b1:bb:87:39:cd:c6:92:94:34:
                    ce:5c:cb:0b:62:1a:81:f2:b3:9f:55:0b:5a:ff:ef:
                    86:54:88:a0:2f:2d:ce:0e:04:19:20:f7:d3:1d:f6:
                    b8:de:ff:02:99:71:c2:c0:d6:5e:d8:63:b1:57:40:
                    3c:6f:70:a0:dc:99:f2:9f:1a:45:22:3f:d5:a3:21:
                    ca:97:11:32:a9:90:0f:10:65:0c:1d:f9:7d:ac:8f:
                    4b:b5:46:d9:e6:fb:77:e1:da:67:3a:b2:55:b0:9f:
                    70:22:7c:87:31:73:4c:4c:c0:51:d3:be:0f:57:0e:
                    ad:f0:6f:10:1b:34:7a:6a:75:05:21:ad:f7:52:2d:
                    31:d9:f8:bf:85:44:e3:2a:92:5a:03:fe:3f:0d:84:
                    80:39:9f:ea:d5:99:0d:83:ba:a0:a9:2b:e8:99:19:
                    6a:0d:a2:37:bc:57:81:23:a6:1b:b9:84:f8:57:47:
                    ab:e8:36:5a:8c:e9:f2:6d:2c:11:a9:d2:9c:3a:4d:
                    8c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:73:F3:93:0F:C3:96:3B:D5:90:F5:62:03:AE:3E:8E:81:04:4D
            X509v3 Authority Key Identifier:
                keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4f:21:d0:7f:b9:51:84:a5:65:d8:08:a6:f2:bf:07:5f:ff:
         34:8b:ae:60:b7:f9:af:bb:03:f8:58:03:cd:97:5e:0e:bf:ac:
         9d:3d:48:b4:8b:80:86:fc:51:19:fe:dd:13:f2:c2:e8:a4:10:
         87:3c:ca:fd:3f:b0:7f:75:c8:96:a3:ad:9d:9f:a4:bd:cc:18:
         ff:ad:36:6e:ca:97:ae:5a:9e:5a:a7:02:16:33:f0:93:a0:d4:
         ca:9d:72:1d:62:d5:42:98:41:76:89:e1:a3:fc:c4:3d:ea:8b:
         c2:8c:b0:66:0d:ab:ff:0e:83:04:97:8f:ca:62:d0:5c:74:d8:
         1b:f4:fb:0a:7d:77:41:9e:4b:35:07:98:5c:5a:9d:0b:45:bc:
         03:a2:d1:3a:1b:4f:1c:cc:dc:fe:8c:ce:81:a6:e7:4c:1e:96:
         5e:1c:1f:67:5d:33:cc:30:0f:cf:ca:3c:b0:f2:d3:b8:e7:65:
         2d:83:c3:7d:28:7a:24:e9:7c:21:9c:d3:51:7c:86:0e:40:df:
         a6:e8:3d:9b:4a:5c:0a:8a:93:71:51:13:0e:d7:52:be:95:be:
         5b:ee:2f:99:91:59:62:c8:cb:d1:f4:5a:d0:39:a0:eb:64:b3:
         cb:92:47:90:be:04:08:e4:41:5b:2f:0d:49:b4:c7:58:a5:2e:
         c5:35:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:50:29 2026 by rpki-client