Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
File:                     G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json)
Hash identifier:          eBxLolLGcNH3jMUI6m2e9KJSTrHIs7Cm03M9jqUdQAY=
Subject key identifier:   26:99:B4:97:27:24:E7:1A:4A:C5:F8:9E:CF:E8:19:2F:5D:0E:27:DE
Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
Certificate issuer:       /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Certificate serial:       0EDE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
Manifest number:          0ED1
Signing time:             Sat 18 Apr 2026 17:35:01 +0000
Manifest this update:     Sat 18 Apr 2026 17:35:00 +0000
Manifest next update:     Sat 25 Apr 2026 17:35:00 +0000
Files and hashes:         1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: k8Q20QLjuc2ykOj8c7GN/60tmyqujrKcWT2bzDMJVDo=)
                          2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: JeKAJdqbPEiYDYAJ1XzRDXMOefEFjZmJoWdofrNUX9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
                          rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3806 (0xede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
        Validity
            Not Before: Apr 18 17:35:00 2026 GMT
            Not After : Apr 25 17:35:00 2026 GMT
        Subject: CN=69e3c0c5-a14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:43:0c:06:fe:c5:00:44:3f:f3:20:46:77:
                    6d:09:9c:3f:90:57:4b:c4:c4:8c:a9:8b:36:83:c4:
                    9c:57:9e:ed:62:47:50:08:4a:e2:43:5a:cb:8d:c7:
                    ca:c7:59:ed:97:d4:95:52:a3:3d:7f:d0:94:7d:5b:
                    bf:47:b3:cb:7b:cc:fd:d1:7b:01:b2:be:22:af:c6:
                    a4:62:5f:7e:5e:84:31:df:b0:85:39:6c:cc:30:f7:
                    93:1e:0b:5d:7d:18:27:0e:ff:54:0c:12:6d:39:e3:
                    9c:eb:72:72:d5:54:df:7b:0a:f0:f6:8a:5d:f5:66:
                    74:c2:0c:96:ad:10:ea:92:9d:fb:f3:39:64:d3:d6:
                    e5:bb:42:36:c0:1f:27:a0:2a:0b:e6:e4:29:82:2e:
                    ee:2e:34:09:bc:3f:ea:fe:c9:b4:fc:79:74:43:b3:
                    e5:ef:f9:df:12:63:49:16:dc:79:33:56:4f:05:f6:
                    52:6c:45:81:b0:f9:f4:8f:a5:26:4e:b6:c6:b1:c1:
                    8d:f9:9c:47:87:82:b7:e0:37:fb:f5:77:6b:70:f0:
                    dd:1f:bd:1a:18:26:c6:01:d6:39:d7:2a:88:d3:b0:
                    aa:d7:7b:b8:1f:60:8a:68:4b:4a:04:5f:16:eb:64:
                    7c:4b:99:c3:b0:51:a8:4c:d7:7c:ed:ae:7b:4c:c5:
                    60:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:99:B4:97:27:24:E7:1A:4A:C5:F8:9E:CF:E8:19:2F:5D:0E:27:DE
            X509v3 Authority Key Identifier:
                keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:69:97:59:b5:e1:e5:ab:cd:0e:7c:f3:28:8e:df:6c:1e:b0:
         08:c4:b0:a3:bc:30:7a:35:02:e3:51:6d:4b:01:cc:e2:8f:54:
         c1:c7:00:ca:23:0c:b2:46:5c:80:25:c7:f8:a8:35:cf:01:3c:
         69:f9:43:96:e2:40:b2:d9:0e:49:ae:33:6a:89:37:1e:35:6f:
         1f:d7:b9:c7:a2:d2:cb:eb:1f:08:db:96:22:fc:b7:ed:dc:e3:
         8a:e3:7c:a9:b1:4b:5c:dd:42:ba:17:4d:fb:79:1f:20:09:f9:
         9c:84:2d:d6:7d:76:79:5a:d6:ab:a8:93:4c:89:f8:82:09:7c:
         47:65:12:6f:89:48:13:d2:b4:fa:4c:a7:5a:9f:27:f8:70:3c:
         bc:e1:3f:81:2c:a5:61:8f:44:a0:6e:ae:78:fd:25:13:c5:e2:
         96:f9:bb:4f:a1:b2:00:f0:d9:9c:2a:0b:9e:80:d2:57:d2:fb:
         ae:88:b2:e7:59:4a:65:74:d8:c7:97:06:a3:9f:4f:a2:55:ee:
         bb:7e:fd:b7:0a:c1:94:35:67:7a:fe:f4:20:51:0e:e4:37:ed:
         ac:c3:5f:fd:cd:f1:34:be:4d:5c:98:f1:1f:d5:09:66:f9:6f:
         6e:6a:b9:72:3a:66:e1:32:28:36:72:46:be:04:d5:02:8d:5e:
         1c:fe:a9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:59 2026 by rpki-client