Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File:                     GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier:          Lf9Or/4ufRftqhAzXIaY4auacAchb2JfPNZmVG8pUjY=
Subject key identifier:   5A:59:AD:55:0B:7E:07:98:23:79:70:27:09:53:AE:4D:42:64:4F:92
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer:       /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial:       0314
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number:          030D
Signing time:             Sun 05 Apr 2026 00:57:45 +0000
Manifest this update:     Sun 05 Apr 2026 00:57:44 +0000
Manifest next update:     Sun 12 Apr 2026 00:57:44 +0000
Files and hashes:         1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: uEktfQVmZfASLyILqgtM4OaXi6U7T5JoIGwbK4y6IdU=)
                          2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: /c+Xc/pq6gS3lH+dpF5Op6yyoSbbMrofTbdHTbTMtyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
                          rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
        Validity
            Not Before: Apr  5 00:57:44 2026 GMT
            Not After : Apr 12 00:57:44 2026 GMT
        Subject: CN=69d1b389-48af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:41:d6:68:e7:17:79:f3:3e:ec:3f:f0:6e:
                    ec:f2:c8:68:f1:0e:bb:4c:86:e5:ae:44:0f:a1:64:
                    43:2e:f5:04:f7:f1:c3:0b:f5:bf:3e:7f:7e:6c:6a:
                    e8:9d:18:3f:e6:ed:a8:f7:b9:7f:35:ee:19:01:56:
                    7c:06:c7:28:07:b9:c3:7b:e8:8b:46:62:55:38:a7:
                    f2:c4:54:b0:47:df:55:73:3d:c7:58:fd:22:37:4d:
                    3e:a8:07:1b:e8:31:7b:8f:d4:87:3e:5c:d3:63:80:
                    59:d9:27:b5:69:40:8d:fc:44:e2:8d:97:74:39:7b:
                    30:d0:09:21:82:da:37:c7:d0:72:88:52:41:f9:b0:
                    36:3f:a0:19:5e:d6:b8:54:d8:40:53:54:28:6c:b9:
                    35:91:49:2f:34:27:a5:c0:e7:ac:64:ab:89:0d:5e:
                    c5:1c:04:ea:ca:93:07:18:7f:c3:ce:c8:8a:8d:4e:
                    9d:17:17:04:5e:92:f2:e2:0d:2d:f3:6a:8c:d6:aa:
                    66:82:bb:a8:44:94:a2:56:7e:28:bf:72:85:39:63:
                    0e:e6:b3:a3:79:6d:a8:06:ff:27:30:17:f8:03:fc:
                    b6:e2:4e:ef:a5:d3:e5:b6:c0:6d:0f:79:96:90:25:
                    1a:3d:39:46:93:75:d1:e7:02:5a:ee:4b:b5:fb:4f:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:59:AD:55:0B:7E:07:98:23:79:70:27:09:53:AE:4D:42:64:4F:92
            X509v3 Authority Key Identifier:
                keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e0:ff:f9:6f:22:09:cb:46:64:85:de:ac:4a:12:99:24:bf:
         67:e1:12:97:b5:a5:8d:4e:c1:64:1a:b0:87:26:7f:b4:ea:ab:
         e9:89:d1:41:c8:4a:23:22:6d:f3:8c:8e:8f:d3:14:76:a8:40:
         f4:1f:b5:e4:c0:ff:14:b9:04:34:84:28:16:bb:ca:1c:6f:7f:
         aa:94:41:ec:3f:f2:53:77:36:6b:b5:67:ae:0c:cb:f6:fe:c6:
         8e:f5:8a:37:5c:6a:59:cd:5d:62:32:85:24:cc:75:4b:3e:6b:
         2d:67:db:bd:1b:98:fa:3d:f7:c8:7c:10:a8:f5:13:9e:ab:80:
         f8:f9:09:ca:f5:e5:b4:f0:dc:47:cd:b8:be:8b:94:85:d9:40:
         f2:41:53:0f:bd:50:a7:23:5f:1b:b8:37:d2:46:f1:11:38:d8:
         dd:76:fa:a0:51:cb:a1:b4:61:81:72:46:cc:7b:02:67:ad:92:
         f9:a4:f7:83:62:b2:86:e0:27:54:ec:a3:25:1f:3b:5b:63:f8:
         3b:ad:da:c0:a8:09:1d:a0:50:f5:b6:6f:37:99:30:51:f3:18:
         52:52:5b:9a:1b:d6:b2:42:5c:49:c6:b9:c0:b9:39:9d:c1:7c:
         b8:53:10:67:7e:22:56:e7:10:aa:24:1b:49:3b:8a:e5:ea:60:
         ae:e2:2f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:07 2026 by rpki-client