Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
File:                     gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json)
Hash identifier:          K12d7kQV0bOuJAoe576ksvSCNVF8Yg/CJ0mJRqjN9NA=
Subject key identifier:   A5:C9:BE:C5:C6:DE:A7:89:BB:C5:CB:3B:5F:15:2E:E2:B8:4A:9C:E7
Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
Certificate issuer:       /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Certificate serial:       02BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
Manifest number:          02B1
Signing time:             Sun 05 Apr 2026 01:13:05 +0000
Manifest this update:     Sun 05 Apr 2026 01:13:05 +0000
Manifest next update:     Sun 12 Apr 2026 01:13:05 +0000
Files and hashes:         1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: q5awpxQpjMTNJ1O7LEL586TS/QZLnZzQBLaIZBDn8MQ=)
                          2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: IyTEBSq+h6NoQhhHzczMCk59IciuuwHY1nkOvHooqW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
        Validity
            Not Before: Apr  5 01:13:05 2026 GMT
            Not After : Apr 12 01:13:05 2026 GMT
        Subject: CN=69d1b721-3331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:49:a8:be:3e:d8:62:01:b7:49:04:2c:eb:05:
                    9e:95:db:62:f5:07:fe:c8:6f:46:b5:99:cc:cd:2a:
                    d9:f2:06:eb:9c:44:df:e7:ae:1e:a7:d1:e5:e0:5b:
                    c0:57:e5:ff:55:b9:f9:39:f5:e9:da:88:bb:2c:36:
                    ed:f9:1b:f6:20:5b:50:33:59:4f:18:76:cc:3d:20:
                    75:21:87:db:7f:13:19:ae:41:0d:de:a7:5c:18:97:
                    2e:15:09:11:d1:e6:94:d0:8f:f7:4b:8e:0e:af:e9:
                    3c:48:16:56:e9:02:6e:29:67:fa:c7:e9:f0:02:11:
                    3c:25:5d:8a:52:29:c9:e2:c0:a3:9d:b7:32:5f:17:
                    db:b1:06:54:11:b1:f2:6d:1b:4c:eb:cd:87:e1:cf:
                    7e:9e:33:31:67:1c:95:cd:05:ab:05:7a:c1:db:56:
                    7c:71:93:30:6a:81:36:20:d7:bf:76:2d:9c:c8:f6:
                    81:fe:1e:d5:8b:9a:ce:50:ee:38:d1:e4:5c:85:2a:
                    bb:fd:ff:75:d6:86:b9:ca:14:f1:b3:3d:26:65:fe:
                    da:88:82:70:e4:c0:fc:bc:6f:00:6e:39:45:68:3c:
                    a6:b9:69:fb:3f:68:28:e8:64:95:97:61:5c:22:ab:
                    29:6d:c7:81:b7:ac:ef:af:74:24:2f:ad:ec:3a:6c:
                    5b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C9:BE:C5:C6:DE:A7:89:BB:C5:CB:3B:5F:15:2E:E2:B8:4A:9C:E7
            X509v3 Authority Key Identifier:
                keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:38:8b:6d:84:11:e0:4b:90:7a:90:90:3c:a0:96:5f:f3:
         dc:9e:fc:c6:22:65:5e:0d:ea:37:45:cc:9d:45:1d:63:25:01:
         5a:af:41:36:2f:f5:b7:4e:22:73:59:5b:53:03:0f:93:05:bc:
         0f:6f:92:4e:53:6c:ee:4f:05:6f:46:1a:c5:8d:e7:45:49:b4:
         ab:e2:a1:3d:b9:97:d9:4c:aa:a7:af:79:0e:06:f8:7e:33:98:
         e0:dc:4a:f8:db:12:38:26:5f:d2:92:16:4b:d5:dd:a4:d6:b9:
         10:05:73:48:19:50:56:fa:2c:5e:3b:9c:3f:e8:66:a8:be:94:
         08:60:7b:51:3f:e4:98:3c:ce:5b:fc:07:30:ff:6c:f5:39:68:
         fe:fa:27:22:a7:1a:b5:4d:cf:54:1a:05:e4:75:73:1d:ee:5e:
         81:1f:69:73:05:d1:24:09:23:ea:4c:13:c8:83:5e:c4:ed:b6:
         ab:ad:8e:3e:7e:b2:fe:a0:05:d1:72:73:a4:ee:41:51:05:16:
         75:80:d6:d2:cf:a6:a0:b5:5c:2b:bd:85:29:1f:d3:4d:bf:e4:
         88:27:da:92:c4:8c:bd:1c:ea:d7:f7:3f:df:67:92:1d:4b:c2:
         5c:20:38:fd:e0:1e:b3:81:99:20:63:f3:c8:a2:66:da:06:d6:
         a9:08:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:48 2026 by rpki-client