Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File:                     Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier:          wt/huTs2xSnAl7empehnJoQoYDpK8Y7v2tRww4OCBkc=
Subject key identifier:   79:35:3B:7E:80:7D:2B:28:1F:94:8F:71:05:50:CA:24:3B:60:AE:3D
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer:       /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number:          0230
Signing time:             Sun 05 Apr 2026 02:12:48 +0000
Manifest this update:     Sun 05 Apr 2026 02:12:47 +0000
Manifest next update:     Sun 12 Apr 2026 02:12:47 +0000
Files and hashes:         1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: KuWZi9DeCUf/VGOQZlJElQ5aKYiZbwrXey4APlaucmI=)
                          2: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: CsD2M4xYWmD+4KZHvogCG8jsC1NzwYJkcqvvaiFYMlM=)
                          3: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: 9lrxfUBWBmg3EvWvMM3CqOq7J9rwqvVHXsxONFDg0xI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
                          rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
        Validity
            Not Before: Apr  5 02:12:47 2026 GMT
            Not After : Apr 12 02:12:47 2026 GMT
        Subject: CN=69d1c51f-2a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:34:33:c5:6b:14:df:5d:b5:1d:25:05:13:
                    bd:ff:b1:47:ef:bd:b5:b5:c4:69:80:5d:33:4b:bf:
                    c2:f1:75:4e:38:2a:f9:97:02:b6:ef:22:5b:54:05:
                    f6:6b:78:85:63:97:63:d8:8c:8d:8d:16:e1:e9:22:
                    79:01:a5:b0:44:8e:55:7d:48:33:c5:47:4e:42:d1:
                    a2:79:0f:c9:5b:0a:24:dc:69:64:6b:d5:67:ec:06:
                    c5:b2:b4:7a:17:db:1a:68:7c:ca:09:ec:15:57:13:
                    bf:ab:8c:ac:43:27:63:4d:c7:71:f8:2a:12:eb:af:
                    25:10:02:e9:e0:d0:50:32:b9:85:5b:35:0c:0f:db:
                    e2:b9:f9:0b:72:de:44:9d:ad:2c:26:17:70:b9:a2:
                    83:20:40:f5:09:6b:24:51:f3:7e:56:19:ca:6b:b7:
                    92:4a:01:cb:20:67:70:b3:be:98:08:31:4b:9c:0f:
                    92:59:d4:07:a9:c2:8d:da:33:b4:75:45:a4:af:54:
                    96:ca:90:7b:19:00:bc:1b:a2:ae:a6:96:4d:f6:c0:
                    34:1e:62:70:5e:f6:19:4d:58:83:69:64:26:19:78:
                    e4:5c:f6:87:67:37:f7:f1:49:bf:78:64:9b:a1:21:
                    83:ce:0e:33:a7:aa:27:bd:6b:b2:e1:19:4f:06:ff:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:35:3B:7E:80:7D:2B:28:1F:94:8F:71:05:50:CA:24:3B:60:AE:3D
            X509v3 Authority Key Identifier:
                keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:29:eb:c6:9e:30:c0:e9:b7:dc:dc:a7:da:7c:37:31:4a:5a:
         a8:d5:f6:95:43:97:aa:98:fd:28:7e:ea:4e:5c:f0:fa:b9:d2:
         ad:1d:d4:b4:84:4a:89:57:dd:bf:c3:ef:93:c7:f2:e5:9c:94:
         40:1c:29:57:d3:93:97:3a:37:82:81:b9:a0:ef:b5:f8:98:db:
         72:70:a7:67:bb:d4:ad:9d:30:75:ef:33:2e:32:4e:c4:b2:1b:
         1a:2f:a9:9f:cf:9a:05:f3:e6:cd:ad:f3:63:ea:34:a0:b8:5e:
         86:4a:b5:6d:38:8f:10:3a:57:93:54:a8:5a:46:24:25:2b:62:
         b2:b5:42:63:69:9c:38:c5:08:08:21:10:33:bb:f2:b5:3e:07:
         4e:cc:9a:fa:d2:55:53:21:f3:a1:6a:8f:89:94:8c:f7:8a:1d:
         26:c8:c9:6b:22:11:a0:cc:91:3b:04:83:d2:9a:14:26:26:37:
         85:f2:79:44:a1:07:f4:63:38:b8:b0:92:2c:bc:86:4f:47:38:
         ba:ea:5d:84:87:30:31:fe:25:46:58:3d:6b:d6:7d:0e:70:ed:
         31:02:22:2d:55:3f:7a:55:43:ce:93:5e:25:3b:af:a4:af:62:
         47:6c:01:2e:09:8e:0b:04:76:b5:b9:81:7b:67:33:70:64:b0:
         02:d3:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:17 2026 by rpki-client