Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
File:                     GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json)
Hash identifier:          xMKBkWnAaWpU6/9UIlihtif+RppvNckTxOBfsueUllk=
Subject key identifier:   63:FD:CB:8D:D5:DA:78:D4:65:5D:AE:2B:13:91:29:99:A8:92:6B:00
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Certificate issuer:       /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
Manifest number:          72
Signing time:             Mon 01 Jun 2026 08:45:50 +0000
Manifest this update:     Mon 01 Jun 2026 08:45:49 +0000
Manifest next update:     Mon 08 Jun 2026 08:45:49 +0000
Files and hashes:         1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: ZnoJpCgeibyEbaApXAtd+JeXJzfb5LLeTjzrNr0pAlQ=)
                          2: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (hash: NnPs85doUGI8wBjuyfyV3CMN9xCSIH8SHzO99MPJ70I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
                          rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
        Validity
            Not Before: Jun  1 08:45:49 2026 GMT
            Not After : Jun  8 08:45:49 2026 GMT
        Subject: CN=6a1d46be-38c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:f3:ee:81:44:7d:c7:a0:6c:93:26:80:bb:
                    2d:a8:19:39:fd:dc:c9:a2:08:78:82:b3:99:0e:b8:
                    88:08:36:35:c9:c4:1d:00:08:ee:09:eb:63:37:a6:
                    a5:04:7f:55:97:ae:c8:ce:54:9f:78:90:b6:f5:83:
                    64:9d:a6:60:e9:45:43:87:a4:4b:a8:ee:5d:b8:83:
                    11:ee:de:73:72:06:06:d3:3d:9f:86:66:35:18:28:
                    2e:66:fe:b0:58:62:31:1c:ad:bc:16:63:30:ba:43:
                    73:d3:62:6f:3a:9e:9f:34:d9:33:49:57:d8:1e:5c:
                    f9:6d:ec:d8:55:d5:e2:39:eb:c5:cd:4a:84:57:5e:
                    fc:bd:04:ad:28:31:bd:51:0a:1a:f3:79:c8:fa:97:
                    70:27:7b:58:5d:ef:b5:4f:66:d6:78:1a:7d:cc:77:
                    bf:5e:86:7e:c9:09:f2:7e:08:79:9a:9a:eb:a7:8b:
                    e5:4d:0d:8e:f3:9c:41:df:a7:58:1a:2e:6c:4b:04:
                    26:74:55:0c:11:21:85:9f:bb:a9:37:60:21:50:e4:
                    0a:9e:4c:8a:a2:38:b9:63:72:78:83:37:68:17:e7:
                    29:06:4c:43:28:73:60:47:64:2b:b7:96:28:27:92:
                    76:ee:27:a0:68:06:4f:e7:04:f8:8a:d4:57:c5:05:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FD:CB:8D:D5:DA:78:D4:65:5D:AE:2B:13:91:29:99:A8:92:6B:00
            X509v3 Authority Key Identifier:
                keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b6:92:d2:3f:68:1a:34:d8:9f:e1:77:71:46:49:8c:68:87:
         26:1f:f4:68:73:3e:b6:b1:b6:b6:13:3d:22:24:3c:a0:d4:00:
         68:89:eb:7c:15:ac:1f:c8:c2:3f:fe:e6:da:2b:39:1f:29:e2:
         b1:2a:c9:8f:15:2c:25:45:b6:cc:1d:ba:97:60:14:bb:d1:92:
         c4:4d:5c:28:9e:35:0a:3f:e2:b7:12:e5:c4:69:94:8d:6e:f7:
         85:4e:eb:ee:49:af:64:0a:8a:d2:39:81:d6:07:c5:53:0e:1a:
         54:71:ed:14:73:28:13:0a:26:f1:46:dc:b0:2f:a1:e5:62:69:
         38:84:51:b2:84:e4:2d:6f:29:e2:e1:c9:bf:f7:93:24:bc:9c:
         b9:f0:34:8e:a1:2d:28:a3:3b:bd:ea:a6:2c:18:a0:4a:88:6b:
         65:f8:27:3a:ce:13:80:da:65:93:3f:b5:f6:a4:67:c8:52:d7:
         f8:53:b7:c9:ad:9a:08:37:da:c3:99:08:c1:e7:74:20:f7:99:
         f7:a1:1c:74:8e:46:88:0b:af:22:b7:ff:0d:49:b6:18:b4:ee:
         05:c1:58:ac:12:18:63:3b:c6:00:d6:d3:4a:e5:52:48:6e:45:
         34:39:e9:38:04:be:9d:1d:34:0a:28:1f:7f:93:f3:d0:a3:65:
         f5:68:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:35 2026 by rpki-client