Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
File:                     Gb4TIRiPCXbTLoNtGvulRidmV-M.mft (raw, json)
Hash identifier:          qBL2Aj9VoOh+op5C2sPtQXKzd7zZqjznqRp5hxqTiF0=
Subject key identifier:   B1:CD:7B:84:04:A0:CF:8E:CE:5F:1F:47:D3:AA:81:34:93:25:1C:3B
Authority key identifier: 19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3
Certificate issuer:       /CN=A91174DD/serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
Manifest number:          32
Signing time:             Fri 17 Apr 2026 08:22:08 +0000
Manifest this update:     Fri 17 Apr 2026 08:22:07 +0000
Manifest next update:     Fri 24 Apr 2026 08:22:07 +0000
Files and hashes:         1: Gb4TIRiPCXbTLoNtGvulRidmV-M.crl (hash: qwZ3znRjSRMuct1cJy+vCRnvtUol3tqe4SPjY0zc0Y8=)
                          2: 2D7906B2FC6B11F0A5B719B8506F56BC.roa (hash: TMdBXinxPpiTYgWnOTR0cMMMv1bmh583ZOWw9hN4sKc=)
                          3: 321730E4F5D211F0882E5659486F56BC.roa (hash: 3VgrH2bQyaBcgb08AqR1YTYcVneSVR2xlGdpz2xEp1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174DD, serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3
        Validity
            Not Before: Apr 17 08:22:07 2026 GMT
            Not After : Apr 24 08:22:07 2026 GMT
        Subject: CN=69e1edb0-c941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:ee:0d:37:4c:f1:de:28:cb:c3:c0:0e:87:
                    ae:f4:57:75:05:46:9b:6d:c5:1d:0f:9d:33:db:37:
                    89:6e:14:b3:90:de:79:ab:52:dc:10:5e:3c:22:61:
                    16:d5:df:84:4c:53:8c:67:2a:86:6a:53:7f:97:a4:
                    1c:a1:cf:63:ac:d3:db:d7:2f:55:40:b4:cb:1f:74:
                    51:43:43:e4:95:68:57:2b:c9:ab:9d:e8:25:f7:97:
                    84:13:2b:10:8e:07:48:07:ae:56:6b:9e:0f:1f:9b:
                    6a:26:6d:23:60:50:ea:a0:cc:ca:f4:db:41:a6:62:
                    aa:03:82:be:0b:60:35:4a:46:08:fb:26:d0:ea:8f:
                    41:8e:ae:e3:77:32:36:e4:b3:20:3e:12:b2:a6:ce:
                    69:a8:be:4d:1a:79:9a:48:51:06:97:1a:0f:ab:5c:
                    3a:50:9e:4a:1d:55:df:de:03:86:7e:38:a1:98:ae:
                    9e:fd:ef:6a:6f:96:fd:35:53:dd:3a:9e:5a:e8:ee:
                    6a:d8:04:b5:0c:97:a0:ac:e7:34:81:b3:4e:56:bc:
                    22:bf:be:a2:96:33:56:ab:86:27:34:ef:0c:73:a6:
                    bc:94:63:a2:3b:83:5f:43:9c:97:35:e3:90:b8:7a:
                    9a:b2:0f:90:11:0d:92:28:ef:4d:c2:a5:c0:91:e4:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CD:7B:84:04:A0:CF:8E:CE:5F:1F:47:D3:AA:81:34:93:25:1C:3B
            X509v3 Authority Key Identifier:
                keyid:19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e3:05:72:41:3b:1a:f7:06:88:71:ec:0c:8e:2a:a5:f7:e9:
         fb:2d:af:a5:65:7c:0c:60:d2:3c:34:35:4b:db:3f:41:5d:fd:
         82:cf:ea:ee:d6:47:26:7f:cf:d5:31:4b:44:19:1d:b3:e3:e0:
         ec:54:46:e2:c8:3c:2c:ef:ab:97:5c:b0:89:f0:4a:a5:bb:b1:
         bd:78:da:a2:ff:65:3b:1c:cf:56:00:1c:65:67:96:4f:7f:3b:
         e0:c5:1a:33:fb:04:15:07:05:18:8b:4f:16:ea:4f:1e:b1:32:
         2a:85:5b:d4:46:62:eb:11:8b:ef:a8:8d:15:8e:ac:d7:23:ba:
         52:e7:61:69:d3:3b:66:52:93:26:64:f2:c5:ee:12:2a:3b:af:
         ad:5e:ca:c3:c6:b2:b8:9e:3f:fd:2a:78:bb:46:0d:77:92:fa:
         b7:6f:b5:67:4b:2c:4c:e7:34:41:bc:e1:de:78:47:dc:ed:a3:
         71:3f:88:6a:ab:19:ed:6e:30:fa:b3:f2:18:85:f7:a5:35:68:
         3b:8b:10:aa:a3:93:ba:ec:28:fb:5a:ce:61:37:8d:cb:9e:4f:
         f0:9c:92:5a:2d:a4:00:36:a9:88:e3:8c:6f:91:6e:4d:d5:60:
         b2:a8:26:1b:8f:57:9f:6b:4c:e9:21:b6:88:dd:30:c4:49:93:
         46:0d:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:58 2026 by rpki-client