Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
File:                     GOzmKe7ztqJpbrqzSz-wLviouIc.mft (raw, json)
Hash identifier:          Jvqm6KezhH9UyvuBXAp6HXTp5Tf159nac6oBoNgtoPA=
Subject key identifier:   5B:1A:2F:D2:CC:15:B7:66:1C:60:16:87:CA:B6:93:92:7D:85:52:84
Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
Certificate issuer:       /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
Manifest number:          5C
Signing time:             Fri 13 Mar 2026 06:58:55 +0000
Manifest this update:     Fri 13 Mar 2026 06:58:54 +0000
Manifest next update:     Fri 20 Mar 2026 06:58:54 +0000
Files and hashes:         1: GOzmKe7ztqJpbrqzSz-wLviouIc.crl (hash: rgFV9qk8OIOmxkTZlMo4qg0CyTREJWdd2SxnVMPaJVA=)
                          2: 8201D598AD9B11F080BD6B82C4F9AE02.roa (hash: p3ZoCtddv0DD9A8CHYHtHKNtwBeASX7tWihiJwJ4AOY=)
                          3: 9F82952895C511F0B89BD26BC4F9AE02.roa (hash: ry4N7sAZwt8kT9uayuzaqrICuRZLC5xmKbp22xFFGBM=)
                          4: 0A2469F095E011F0B2B5CE77C4F9AE02.roa (hash: yWuTHUjFQQOeDngy2y5CDj4FKIF2JeyL3URzK/Qg4Dc=)
                          5: 0A86FD7C95E011F0B2B5CE77C4F9AE02.roa (hash: 0j15PdC5hkiOJdDKSJMqwGQCvyEX5XT7bkPvF+W+KeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
                          rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 06:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
        Validity
            Not Before: Mar 13 06:58:54 2026 GMT
            Not After : Mar 20 06:58:54 2026 GMT
        Subject: CN=69b3b5ae-612c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:49:b2:f1:75:fd:7d:db:d5:7e:ce:95:ec:
                    6b:53:24:c9:38:da:8c:97:16:0a:2b:66:c6:87:8e:
                    d5:3e:7c:78:14:ea:c5:4f:d8:df:be:e7:c9:21:e0:
                    c1:ac:e6:4b:31:07:af:08:67:0a:28:1c:23:f8:cd:
                    de:f4:a3:81:5f:a7:2e:bc:37:a3:d5:64:1c:92:e7:
                    1b:fc:b8:e6:7a:5c:d4:8d:66:fb:17:08:e4:8b:2f:
                    76:e5:8e:8f:4b:08:81:2d:74:77:47:71:41:32:cb:
                    be:05:83:2d:59:eb:20:52:02:7a:1b:97:bd:48:d9:
                    d0:fe:bf:52:44:94:b1:29:35:ee:07:0b:ea:2d:6e:
                    33:c6:c1:b6:ec:5d:8c:83:94:59:0e:05:3b:db:0e:
                    1b:d4:49:94:e4:b5:d5:93:95:43:88:2c:2c:f1:6b:
                    33:32:de:a2:23:65:bc:ef:85:58:39:37:5c:b3:be:
                    4e:81:1a:ad:99:4a:3a:a2:67:d7:60:3a:82:da:e9:
                    2e:4f:1f:40:6a:ac:22:b5:5a:8b:73:33:46:a0:d8:
                    1c:4f:2f:18:19:f5:9c:1c:9a:0f:91:db:db:33:df:
                    6d:e5:d0:b7:00:74:8e:b0:c9:b0:2a:9f:14:41:8a:
                    00:a2:5d:4f:d5:47:e6:f2:34:f1:24:2d:db:30:a9:
                    24:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1A:2F:D2:CC:15:B7:66:1C:60:16:87:CA:B6:93:92:7D:85:52:84
            X509v3 Authority Key Identifier:
                keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c3:aa:1c:18:56:06:3a:a6:c0:05:60:73:de:30:1e:1b:d3:
         58:5e:d1:cf:fe:32:2d:fa:6c:c3:11:51:11:32:2a:a8:ce:05:
         10:ca:33:d1:a3:59:74:6a:bb:d4:b0:21:15:e5:80:b7:a2:cf:
         87:75:fc:f1:ed:a8:85:6a:bb:17:14:c9:46:72:e0:ce:49:3a:
         1c:54:ed:77:a5:bd:a1:60:68:1f:84:5b:f9:73:7f:9b:b9:29:
         5d:c0:dd:ab:ab:b8:92:9c:09:8b:33:94:8f:fd:41:95:7e:0b:
         f7:f7:83:96:ce:be:2f:f4:be:7a:ec:96:c4:bd:de:2a:b7:b0:
         a7:80:86:2a:7f:cc:ed:bd:04:69:44:36:e5:a2:df:0b:9f:78:
         44:dc:b0:e9:c1:55:5b:f6:9c:f2:b8:a7:b0:2d:d7:70:dc:55:
         24:e0:61:e7:45:50:f3:44:39:9f:b5:cf:4c:4d:63:fa:ee:63:
         e7:1a:60:99:63:9a:f1:ea:a0:c6:a9:e6:dc:3f:e3:42:16:a7:
         46:45:38:70:28:62:f9:c3:6c:ca:54:63:c9:ef:c7:a9:dc:0e:
         4a:39:8d:36:1f:81:01:07:1e:bc:2e:42:dc:a1:52:42:e2:14:
         cf:7d:23:69:ff:4b:42:5d:96:cf:3b:6e:71:c4:8a:61:b9:27:
         cd:27:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:15:19 2026 by rpki-client