Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
File:                     gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json)
Hash identifier:          BUZ301Zmd33bAKnuDsYcjBLhDcPhukg9Ed7Btm+wt0Y=
Subject key identifier:   BE:EC:85:ED:9F:25:D8:32:59:22:96:06:26:A6:47:4B:8C:64:BA:02
Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
Certificate issuer:       /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
Manifest number:          0151
Signing time:             Sun 05 Apr 2026 04:32:11 +0000
Manifest this update:     Sun 05 Apr 2026 04:32:10 +0000
Manifest next update:     Sun 12 Apr 2026 04:32:10 +0000
Files and hashes:         1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: 59IoXH/J2xLbdkxy6Yt3bQ4Pc+dTg4SF1htWr/4Fwjk=)
                          2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: A3r5oycefhtIGPh3bGr3xmf0SQaU01HwzyTzf26yGko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl
                          rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
        Validity
            Not Before: Apr  5 04:32:10 2026 GMT
            Not After : Apr 12 04:32:10 2026 GMT
        Subject: CN=69d1e5cb-fa61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:20:5a:86:16:92:9e:40:d5:a2:a6:ee:3e:de:
                    fc:5c:ce:e6:8b:b9:94:27:29:cf:df:b3:91:04:6a:
                    ae:2c:67:f5:c3:0b:76:91:ff:85:a6:b3:2b:03:ca:
                    fd:80:52:cc:99:96:7c:59:55:41:c1:4c:2f:dc:43:
                    87:1e:a2:96:a3:c9:30:34:27:24:77:05:5a:36:ed:
                    43:a0:bf:b2:d5:20:bd:d7:df:40:26:72:0b:a6:50:
                    0e:f2:36:72:97:de:d0:cf:e5:07:7c:33:14:7c:e4:
                    d2:f6:ac:a5:df:8a:0b:cc:e2:ba:4c:46:34:83:84:
                    05:9e:a0:29:b5:0b:4c:b6:9e:f1:11:cf:ab:c8:d7:
                    f6:07:ba:df:95:ac:9d:f9:d6:fc:39:1b:cd:a8:61:
                    6b:74:54:7a:c3:4c:85:01:d2:b8:c1:ed:7f:1b:21:
                    46:1b:35:cb:b3:16:01:d4:fb:1a:9b:9c:ce:f8:a4:
                    90:7b:62:35:b7:c4:05:0d:9e:bf:44:55:f0:1e:7a:
                    3b:76:4f:00:bc:e4:a7:aa:7c:db:37:f3:de:ab:0b:
                    8b:e3:fa:f1:fd:7c:fa:56:4f:ed:6f:47:b1:7a:ba:
                    fa:1d:f6:8e:1f:32:76:d7:10:05:3b:72:89:4b:6f:
                    36:00:aa:c0:55:1e:5c:06:81:91:41:02:94:b1:a1:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EC:85:ED:9F:25:D8:32:59:22:96:06:26:A6:47:4B:8C:64:BA:02
            X509v3 Authority Key Identifier:
                keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ae:ce:57:df:c5:9d:af:85:f7:35:d9:4f:4c:21:34:72:b5:
         f1:de:37:63:ca:9c:b1:2f:da:b7:96:39:33:35:df:9b:a1:67:
         17:76:df:79:4e:5c:c4:73:91:6d:cf:a7:55:91:1a:90:13:a5:
         b5:4c:c0:93:9c:94:4b:6b:da:94:d4:0c:a0:41:2c:83:81:ac:
         f5:aa:72:87:a1:9e:4b:9e:a5:3e:dc:9e:6a:14:b6:7e:8f:59:
         49:1b:96:36:d7:15:ee:37:c6:29:81:63:43:6c:6f:cb:2b:89:
         b2:38:0d:27:6b:f4:f8:af:ff:40:6c:34:c1:5b:dc:1b:8e:1b:
         87:da:c7:1a:fe:af:c9:8f:a6:8e:5e:13:8d:fd:76:b7:fe:50:
         c3:51:10:d9:7a:1a:7b:2d:d7:2b:a2:d2:28:03:88:94:2e:c5:
         d8:a1:ea:4c:55:03:5e:82:c1:58:1c:a2:bd:a0:53:22:11:2d:
         30:60:70:6a:8a:86:a8:5f:fd:4c:14:59:33:6a:9b:f8:da:2f:
         cf:83:a2:0d:9b:34:70:55:08:a7:e2:4e:52:96:ab:9b:21:65:
         5b:f5:6f:49:05:7c:20:2d:e6:79:1a:c1:3f:4a:03:ed:50:54:
         fa:e4:25:b5:48:79:b3:46:48:2e:84:d5:5f:41:b1:79:3a:5c:
         1f:66:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:44 2026 by rpki-client