Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
File:                     GnpQ1SFaklkRBAawtpNvrhTqfYM.mft (raw, json)
Hash identifier:          jjhna7IR7LPC3DU62A5FI75uIkRKbj7c0MjmB1KghSw=
Subject key identifier:   D6:3D:42:0A:8C:9F:91:9B:2D:92:C4:A3:DF:28:0F:01:F7:A8:9D:15
Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
Certificate issuer:       /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
Certificate serial:       057B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
Manifest number:          0573
Signing time:             Sat 04 Apr 2026 23:05:56 +0000
Manifest this update:     Sat 04 Apr 2026 23:05:56 +0000
Manifest next update:     Sat 11 Apr 2026 23:05:56 +0000
Files and hashes:         1: GnpQ1SFaklkRBAawtpNvrhTqfYM.crl (hash: jbYFrpojQsJcNsjJgYlNrZlp/qTfDkUDFZarl7FBFIc=)
                          2: 6458CE6420F711EC896F8D43C4F9AE02.roa (hash: v2hZ59ja2UU2McZ0+iZGCOqhJExzjUDbBoc152csioY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl
                          rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1403 (0x57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91944F8, serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
        Validity
            Not Before: Apr  4 23:05:56 2026 GMT
            Not After : Apr 11 23:05:56 2026 GMT
        Subject: CN=69d19954-166d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:e7:7b:bd:a4:c7:ff:36:1a:76:5e:8c:c1:
                    fd:43:1b:6a:15:5e:a3:51:a4:17:d8:77:d8:0f:e1:
                    44:47:93:5b:f7:f1:9e:95:2a:20:fc:c4:7a:0a:df:
                    e1:c8:3f:13:de:58:1c:6d:e8:7a:e9:67:4a:98:09:
                    f4:83:de:89:bd:44:e6:69:57:42:9e:3c:c2:13:87:
                    8a:fb:bd:83:40:c1:5c:dd:02:ca:0b:7a:ef:50:a0:
                    13:ff:53:7b:11:d7:97:42:a6:68:8d:94:b4:04:c2:
                    5c:bf:a4:5a:b0:ec:97:72:db:65:f1:dc:00:bc:6a:
                    42:e2:5a:1d:06:e9:23:60:ce:4b:13:2a:3c:98:5a:
                    81:5e:9a:cd:37:c9:f0:2a:4c:15:c2:d7:d2:f9:b3:
                    46:9c:1e:1d:72:2c:2c:9c:99:67:5f:ec:2e:90:15:
                    de:51:3d:b6:b8:4e:a8:0c:87:d2:a0:72:0e:bb:6c:
                    c2:e9:25:1c:64:c6:01:45:9a:82:0d:83:64:3e:28:
                    45:3e:d3:29:7e:8c:dd:26:38:09:13:b4:be:4c:51:
                    8e:c2:45:44:55:ca:6a:e4:10:d5:80:e8:15:e2:e1:
                    5d:c4:b9:3b:05:2e:bf:bc:1e:a6:78:00:b6:61:77:
                    37:1e:67:23:cf:d9:b1:01:c9:36:55:79:2c:f0:ed:
                    15:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3D:42:0A:8C:9F:91:9B:2D:92:C4:A3:DF:28:0F:01:F7:A8:9D:15
            X509v3 Authority Key Identifier:
                keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:43:1f:02:27:2c:b9:f6:12:d1:99:7d:91:b1:f4:cd:e8:
         7b:7d:28:cc:cc:d4:bc:5e:83:87:07:4f:76:31:90:87:65:e7:
         6f:27:0f:64:a8:e9:6f:8e:f5:0f:7c:12:f1:40:a7:f1:e0:3e:
         a1:09:67:78:18:f2:d9:d9:ab:f2:95:f0:5a:63:02:8a:9b:2b:
         54:12:47:87:66:49:7b:d0:ec:5d:e5:7b:51:1e:d8:d3:c9:0f:
         8a:25:85:cf:6d:a9:bb:1a:8c:30:98:2a:e2:58:46:54:b8:89:
         d0:08:9c:68:a5:23:99:b4:e0:af:42:c8:db:78:93:20:5a:93:
         7e:21:39:29:b3:86:a0:96:97:52:d7:6a:5c:94:cd:59:37:a2:
         21:48:80:45:b4:2a:34:28:91:cd:f3:de:ad:80:b8:f2:51:ff:
         5e:1b:40:87:38:71:85:2d:3c:bb:d0:41:7c:9a:4a:96:f9:0e:
         84:b7:48:e3:13:b5:a1:82:e6:fc:ee:04:1e:61:44:98:87:5e:
         0a:db:a6:53:8c:80:0f:d7:d5:db:0b:1b:44:e8:67:d1:0e:75:
         65:b3:86:16:b1:5d:7d:48:a8:4c:01:0f:72:51:b6:08:0a:e2:
         a7:38:24:59:9d:d9:d4:53:12:59:59:49:e3:79:1c:ec:a9:d7:
         6f:89:7a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:23 2026 by rpki-client