Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
File:                     gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json)
Hash identifier:          QN4dHHXPv0jb20jAcnQ5x7D4g0LFNs3daj7QDbufUi4=
Subject key identifier:   AE:6E:41:52:68:80:B5:21:78:D8:02:63:0E:D6:4C:32:93:A8:F6:73
Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
Certificate issuer:       /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
Manifest number:          016A
Signing time:             Thu 21 May 2026 04:54:41 +0000
Manifest this update:     Thu 21 May 2026 04:54:40 +0000
Manifest next update:     Thu 28 May 2026 04:54:40 +0000
Files and hashes:         1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: 703yZ9IbWImIEUuQ9TVQAVRkMaMkBdp9N7uKEkrcIBk=)
                          2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: 8vNtqHXYBEHG1BUuIx3hpyEUVshVqruHiCT2TQ+vhGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl
                          rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
        Validity
            Not Before: May 21 04:54:40 2026 GMT
            Not After : May 28 04:54:40 2026 GMT
        Subject: CN=6a0e9010-6262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:ee:15:81:4d:d5:ca:d4:6e:01:79:05:72:
                    99:40:e4:8c:77:db:7a:5c:92:01:bd:fd:39:93:4f:
                    4b:f4:81:88:07:f7:48:b1:38:54:f6:69:7f:d0:4f:
                    b0:d1:49:17:28:a7:01:a2:f3:0a:57:51:87:0c:93:
                    6f:52:b5:1e:98:79:3e:a9:aa:33:a3:70:59:87:e5:
                    99:60:6a:0a:92:a2:1b:78:33:f9:91:99:4d:41:fe:
                    1c:1e:6c:2a:22:36:e4:57:0a:8d:d7:c8:63:99:76:
                    ea:b7:3f:f5:25:94:7d:c1:eb:7e:41:6d:21:d6:08:
                    3a:9d:a2:aa:c7:a9:c0:f0:7b:8d:8d:ae:5e:5b:37:
                    24:7e:cf:f9:fc:f9:c8:8e:c8:d0:42:53:36:fa:d7:
                    ec:3c:3b:a5:4a:14:58:c1:88:66:3b:f6:b3:4c:18:
                    4b:93:be:40:b2:a4:98:fd:4b:66:f8:8d:0e:c4:a9:
                    1e:b7:be:63:79:f4:28:e0:78:fb:6a:b8:4a:6d:1c:
                    72:f5:8d:c1:0c:0b:73:84:1f:97:46:77:24:82:90:
                    e4:f0:9e:c3:46:02:ee:e1:11:90:f4:f9:2b:ee:6a:
                    4c:9c:10:83:19:89:01:79:16:35:31:4c:9c:91:c7:
                    dd:f8:3c:0f:71:ac:47:bb:a6:1b:cd:1a:1c:e1:b9:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6E:41:52:68:80:B5:21:78:D8:02:63:0E:D6:4C:32:93:A8:F6:73
            X509v3 Authority Key Identifier:
                keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d3:6d:4e:56:e4:04:5e:a1:40:d4:d0:03:1b:3b:a5:e9:ea:
         09:d7:19:05:1c:9d:c2:0b:0a:b4:e1:83:26:dc:8a:5b:30:fc:
         1e:43:9b:33:3c:4c:04:f3:85:e4:57:2a:ee:f4:9e:76:ba:a9:
         0f:ec:e1:c0:e0:51:ea:09:aa:50:48:66:77:3e:44:72:bf:e5:
         16:ae:83:4a:6a:8a:01:55:10:cf:ea:12:4f:5e:7b:79:2e:53:
         56:ec:e2:13:31:be:09:9f:be:fa:67:a0:5a:e3:aa:f4:b4:3f:
         65:fe:4b:7d:03:42:80:0e:e9:26:8c:ca:24:59:94:68:39:8e:
         92:4f:57:46:55:e6:8c:af:9a:bc:cb:0e:5f:4b:fb:71:12:03:
         a7:c3:ac:fe:6c:2b:8d:6f:c9:2d:97:ea:9b:87:bb:ac:88:f1:
         e3:93:25:17:28:46:a0:a0:fb:5a:b2:f5:38:52:f6:a9:7c:ae:
         9c:90:a8:31:bf:04:8d:30:b4:2a:23:77:5e:be:27:eb:89:02:
         b7:80:e0:33:fb:e0:7c:38:26:2a:0d:34:2d:a2:42:ba:cf:64:
         b8:14:81:db:d2:be:8b:4f:96:88:30:71:be:a8:f8:07:1c:7c:
         0c:50:06:c7:c3:a5:9f:e0:87:69:12:1b:ab:a2:a0:92:de:04:
         e2:79:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:49 2026 by rpki-client