Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
File:                     gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft (raw, json)
Hash identifier:          1faKqKpZ+48P54rjYFWp/RpEJ4tSdxzsLuXN6A7PLlg=
Subject key identifier:   E4:C3:F1:22:B6:0D:C1:B2:EC:AB:F2:D8:CF:E0:09:1F:CE:AB:DD:D0
Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3
Certificate issuer:       /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3
Certificate serial:       0573
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
Manifest number:          056C
Signing time:             Sat 04 Apr 2026 23:06:44 +0000
Manifest this update:     Sat 04 Apr 2026 23:06:43 +0000
Manifest next update:     Sat 11 Apr 2026 23:06:43 +0000
Files and hashes:         1: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl (hash: HMJdC7LJuBol5kVCscLD/sho/kvIHRvgI1ZkwCMyXSs=)
                          2: 81764BC4235511EC976AC464C4F9AE02.roa (hash: migaqbEcW6XD+P9JpAfJqP9HFbVfjDU1wFPykXbQFyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl
                          rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3
        Validity
            Not Before: Apr  4 23:06:43 2026 GMT
            Not After : Apr 11 23:06:43 2026 GMT
        Subject: CN=69d19984-1c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:07:8a:62:86:15:f3:15:89:88:04:15:fe:3c:
                    52:83:70:ba:93:ad:ed:2b:55:f4:76:43:38:08:a7:
                    54:b0:6b:72:6c:10:0c:c6:67:8d:e8:1f:e6:d2:9e:
                    d2:da:57:de:a7:ef:37:45:43:bc:fb:1a:0a:13:fe:
                    cf:05:44:2f:e8:2d:9b:1d:12:82:f7:88:18:08:85:
                    f0:93:60:2e:03:c2:c3:2c:06:44:78:07:d0:ad:76:
                    2f:56:e5:1b:20:fc:c8:59:5b:be:72:5e:b2:65:99:
                    36:b2:c5:02:a1:60:d6:50:23:f0:d2:8f:8e:8e:be:
                    d4:24:55:9a:40:41:32:ad:da:96:2f:b6:5b:3a:b0:
                    00:c5:a0:d2:52:a2:31:c9:e0:10:73:86:16:50:6c:
                    b8:b0:0e:88:ed:bd:5f:9d:9e:79:eb:30:20:e5:21:
                    2d:79:40:a7:1a:91:22:dd:45:de:52:21:52:d5:dd:
                    61:ad:91:9d:5f:ea:07:06:ce:0f:de:c5:0a:e4:a9:
                    5c:4d:e5:e6:7a:0e:4d:55:88:43:14:fe:8f:70:81:
                    92:41:7f:f3:95:f7:e2:b7:59:8c:45:29:05:58:2a:
                    fe:fb:2e:94:a0:e1:4e:c8:41:b8:2e:ce:1c:67:7e:
                    fd:bf:9c:12:01:99:9c:3a:bb:a1:f0:8e:a1:e6:a5:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C3:F1:22:B6:0D:C1:B2:EC:AB:F2:D8:CF:E0:09:1F:CE:AB:DD:D0
            X509v3 Authority Key Identifier:
                keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cc:e8:9a:0b:f3:d0:d8:43:b8:c1:82:49:c0:e1:87:07:89:
         d9:e2:f8:e0:6b:ae:8c:bc:d4:91:7e:a1:f3:d3:ef:0f:14:b5:
         16:16:2b:5b:dc:bc:8a:22:d9:91:f4:08:62:08:de:17:ae:06:
         fa:2d:5c:5f:86:88:11:ae:5f:b5:9b:4d:29:6a:f2:88:3a:20:
         77:f2:df:5a:7a:f0:54:c2:b9:89:2d:8e:2e:e4:3f:cd:15:cd:
         d8:64:a8:26:b6:43:a3:5a:46:cc:e2:bf:d8:74:be:00:77:19:
         98:5e:ef:28:71:45:cf:f9:b7:57:5f:fe:d4:f0:40:01:23:b6:
         e7:b1:fc:e6:db:85:aa:90:93:4b:ce:28:a1:63:de:37:0f:34:
         b8:60:8c:f3:b9:cc:9c:99:63:cc:57:f8:08:f8:45:12:ba:03:
         5f:a6:41:c4:49:97:a7:59:f2:0f:94:78:8b:95:12:2e:28:cb:
         a4:f3:84:18:c5:69:fd:5c:2b:41:36:c3:6f:f3:02:74:e9:48:
         b5:91:ce:c2:e1:5e:5a:c2:cf:62:f3:67:4e:8a:37:d9:c4:bf:
         74:61:3e:b9:09:1d:8c:56:b3:ef:41:6e:38:f0:33:4f:39:10:
         57:ff:92:ba:d6:16:ac:88:e7:42:19:59:62:56:ec:ee:1a:6d:
         a0:3c:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:45 2026 by rpki-client