Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
File:                     gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft (raw, json)
Hash identifier:          N3HQbEBUvMqh0sZwk3tAYjVi2AJDs74vG09OMUieyNE=
Subject key identifier:   01:B7:06:CE:82:00:54:6F:D9:FC:36:CF:1D:EA:20:9B:20:71:33:E4
Authority key identifier: 83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
Certificate issuer:       /CN=A91357FC/serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
Manifest number:          3C
Signing time:             Tue 03 Mar 2026 08:06:02 +0000
Manifest this update:     Tue 03 Mar 2026 08:06:02 +0000
Manifest next update:     Tue 10 Mar 2026 08:06:02 +0000
Files and hashes:         1: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl (hash: U7jZoYYtxGixNdQQHyUoHRg8Ou6Hl/wq/z9W9yX9JW4=)
                          2: 11D4EBBABDFA11F08D47856DC4F9AE02.roa (hash: 3X+EOsnNO57Tvw+PE+y9DH9UPpOfFFAiDnB8nkxzx7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
        Validity
            Not Before: Mar  3 08:06:02 2026 GMT
            Not After : Mar 10 08:06:02 2026 GMT
        Subject: CN=69a6966a-1390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ab:69:6d:c1:4f:e8:a1:c0:98:61:47:32:c1:
                    08:4a:56:79:9d:91:cd:14:d1:97:60:a5:12:dc:93:
                    f5:47:a0:5d:bf:d9:78:b7:c4:53:b3:7e:9c:5c:72:
                    17:9f:1c:b5:1a:b0:bb:2c:df:1e:ec:bd:50:db:d0:
                    9d:62:f5:cf:87:f9:5d:9d:3c:49:57:a7:46:ad:73:
                    6e:49:49:35:a9:54:c3:e0:46:a0:41:2b:09:af:a0:
                    66:0c:22:ba:8f:58:96:da:65:14:1c:e2:6b:e8:00:
                    c3:b9:2c:ca:71:2d:c0:8c:ff:f7:5a:b3:ee:71:42:
                    73:ea:ff:16:6b:e1:fe:2b:a0:12:2d:e3:b7:f8:12:
                    84:51:5a:d5:0b:02:3d:ba:d1:dc:d2:c6:83:68:a5:
                    39:35:ad:60:a4:83:f8:35:fa:38:d2:e0:a6:6a:34:
                    89:3a:ff:70:0e:58:fc:27:6b:0b:90:78:09:45:12:
                    b6:d3:92:d1:4f:8b:ed:a3:39:09:83:a8:94:e9:b5:
                    61:af:9e:77:46:af:17:20:ea:76:d2:41:e3:9a:0c:
                    6b:e0:f8:4b:cb:66:79:88:13:a4:2f:0a:d8:f9:83:
                    5b:49:86:0d:e3:fb:fb:9b:a6:48:b1:11:97:62:dd:
                    79:5a:43:5b:21:71:1a:24:ba:ad:d5:63:54:95:2e:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:06:CE:82:00:54:6F:D9:FC:36:CF:1D:EA:20:9B:20:71:33:E4
            X509v3 Authority Key Identifier:
                keyid:83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e3:f2:be:a2:55:0f:d3:20:44:8b:01:da:20:19:01:2f:9b:
         da:6e:91:64:4d:23:27:4e:ed:e9:a4:0b:b4:52:c5:72:f1:3a:
         db:bc:24:6d:5f:22:a3:8a:01:b6:e9:44:da:ef:7c:7f:cd:cd:
         00:0f:20:46:41:72:eb:73:4f:72:1c:83:64:ff:0d:6a:4a:e1:
         b2:de:23:14:d1:f8:d0:0f:1b:62:f4:6f:f4:1c:ba:3c:0e:5f:
         13:ad:c5:ab:c6:c3:0e:55:85:3f:9b:66:3c:d6:35:91:a3:8e:
         72:a9:95:0d:5e:51:52:85:52:b1:93:8b:8b:e3:f1:7b:dc:97:
         54:cf:3e:b3:48:eb:f3:08:2e:8c:1e:70:f9:4c:7f:f9:7a:a4:
         a7:2a:83:d2:79:b8:a3:cf:ae:f6:07:0e:cb:b0:4d:9a:43:a4:
         7d:69:e0:42:29:bc:78:be:34:97:ea:4f:1d:0f:c3:06:39:14:
         de:dd:26:a2:30:ff:e0:1c:85:e4:2c:31:cb:61:fe:55:73:73:
         4e:e2:be:33:87:02:05:af:8c:b5:bb:c1:46:c5:0e:89:b3:3c:
         2b:f4:e0:df:83:a9:4e:36:ae:b3:12:5b:e3:a1:be:10:bc:5d:
         57:29:02:13:69:9f:6e:6d:9b:8e:08:f5:cc:8e:cc:cb:a0:48:
         96:2b:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:00:16 2026 by rpki-client