Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
File:                     GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json)
Hash identifier:          hh4t1UDIR/DLNz2iJhbIb7oSUVfG+Ktp6qNWVEwT1kg=
Subject key identifier:   EC:9F:3A:26:BF:E6:87:AA:C1:EF:F3:2F:A9:BA:49:29:22:64:54:70
Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30
Certificate issuer:       /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
Manifest number:          AB
Signing time:             Fri 17 Apr 2026 06:52:59 +0000
Manifest this update:     Fri 17 Apr 2026 06:52:58 +0000
Manifest next update:     Fri 24 Apr 2026 06:52:58 +0000
Files and hashes:         1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: JBJ4E0nE9tjiqHU0ygbYZMxMIo46nniE3WxNuLLnAdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl
                          rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530
        Validity
            Not Before: Apr 17 06:52:58 2026 GMT
            Not After : Apr 24 06:52:58 2026 GMT
        Subject: CN=69e1d8cb-757a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:04:02:ff:be:a2:2f:91:cc:f6:bd:9c:b5:24:
                    79:84:ba:3d:ce:d3:ef:7c:ae:c7:8f:11:a0:fc:42:
                    91:4d:7e:9f:72:5d:d4:d5:b2:fb:a3:4b:e6:7c:8c:
                    7e:88:49:15:2b:ca:57:2d:3c:62:bd:da:72:93:cd:
                    67:06:c6:e9:d7:4e:49:29:9a:05:2c:22:b1:da:95:
                    33:f5:19:93:bd:56:00:5a:8a:55:fb:4d:aa:5c:47:
                    d8:70:78:e4:bd:c0:dd:ba:a1:f6:67:7e:54:7b:80:
                    49:dc:d0:33:ee:5b:6b:32:b6:3e:37:9d:36:3a:62:
                    eb:1c:d1:68:e6:a4:c6:10:6f:1f:73:00:c0:8f:bf:
                    83:69:0a:d8:4d:10:21:c8:e3:99:d7:d8:39:cd:1c:
                    9d:74:2c:dc:40:67:2b:13:25:4d:34:7e:24:81:15:
                    1b:80:73:b0:2d:88:72:90:21:50:f1:ed:38:e1:e7:
                    4a:12:54:80:42:70:01:c2:11:64:f7:47:9a:bd:3f:
                    df:02:e2:34:cf:b1:da:4c:9a:32:19:54:76:78:a9:
                    68:07:00:63:b3:c7:46:c1:77:8d:d4:89:1e:4b:02:
                    33:20:16:bb:7a:90:4b:b1:f8:f9:55:54:c6:71:c0:
                    da:1d:fb:91:fc:0a:03:f2:14:77:99:2f:b5:a8:35:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9F:3A:26:BF:E6:87:AA:C1:EF:F3:2F:A9:BA:49:29:22:64:54:70
            X509v3 Authority Key Identifier:
                keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:86:82:8b:3a:06:b8:a5:ef:a3:87:5a:29:df:dc:3d:ea:75:
         c4:77:19:de:cb:23:4a:bc:44:d6:34:08:3d:46:dd:61:0e:49:
         72:67:e5:ef:9c:b7:d9:56:35:b6:44:74:a8:63:b5:d5:90:a3:
         fe:b6:15:40:19:32:ad:4b:fe:c4:49:92:8c:d5:8d:0f:bf:de:
         48:af:2c:87:8c:1a:5e:cb:92:b2:fd:c1:7d:5c:7f:9c:39:84:
         08:a9:e4:e8:3f:cf:93:22:1e:75:c2:85:21:04:a4:1c:91:16:
         33:89:80:03:25:36:4c:01:d7:26:b5:d5:27:57:d4:b1:ff:87:
         59:7f:81:3c:65:de:34:c6:ba:88:56:57:16:db:80:cc:0f:96:
         96:cd:da:f9:62:99:77:96:78:13:8e:2b:5e:8a:40:1f:cf:de:
         e0:60:76:99:69:90:95:43:6e:0d:ff:57:f6:5e:a9:0d:b7:7e:
         a9:75:23:08:07:11:7e:d1:38:78:c0:45:21:9f:6b:d6:aa:a3:
         09:0a:37:cb:45:c4:4d:ca:f7:c9:c0:86:5a:a7:e5:09:d7:d8:
         22:b7:27:7c:1c:5e:90:5b:ec:8f:6d:60:85:18:50:b8:03:87:
         91:dc:27:9b:a2:ea:35:54:39:1b:c0:00:6e:07:82:a9:7d:39:
         79:62:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:05 2026 by rpki-client