Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
File:                     Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json)
Hash identifier:          YVDfNCYnS5ZOnjEqq/9nL5uQpG1UPBfH0fcVv1f9z20=
Subject key identifier:   6B:2B:19:92:9D:10:D7:C3:A2:B7:B6:2D:34:5E:A2:B2:1C:11:68:4A
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Certificate issuer:       /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial:       19D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
Manifest number:          19C1
Signing time:             Sat 04 Apr 2026 16:17:44 +0000
Manifest this update:     Sat 04 Apr 2026 16:17:43 +0000
Manifest next update:     Sat 11 Apr 2026 16:17:43 +0000
Files and hashes:         1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: emV5LCBMXlOTw3hOy+POTnzfca38OTPyG6TKlJ8F1cE=)
                          2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: ZQpN4eFzD7d15/pql3WL2/ZjZDYkswUqki4AmBgOAPo=)
                          3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: 7rH2iv1QGdm3csS4MeZCYlgwaz57wBm4i8OcDaisDdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
                          rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6616 (0x19d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
        Validity
            Not Before: Apr  4 16:17:43 2026 GMT
            Not After : Apr 11 16:17:43 2026 GMT
        Subject: CN=69d139a8-dce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:b4:ce:65:8c:53:4d:fb:7f:6c:ab:f1:28:
                    ca:23:a4:54:32:f0:a7:65:d4:fa:38:6b:3b:43:d4:
                    40:8c:04:14:7e:74:79:dc:4d:7d:c6:2d:e2:cf:16:
                    4b:18:ac:6c:de:0b:15:2a:95:ed:de:eb:19:e2:b4:
                    a6:ea:ec:00:07:f8:54:be:c8:c6:1c:cc:77:41:5f:
                    bb:94:a0:30:e5:0f:60:c6:85:c2:fb:27:0d:5a:75:
                    68:2c:c4:07:39:72:0b:45:48:8c:71:d9:2a:5e:93:
                    92:4e:29:b0:40:34:16:0f:9b:b1:eb:b8:bf:b3:23:
                    8a:aa:48:85:69:a2:80:d9:24:44:a9:97:85:51:4c:
                    a5:de:c2:23:ed:ee:58:10:b6:28:18:79:b3:b5:d4:
                    78:2b:85:a9:a4:21:47:61:2b:90:00:85:a1:40:0f:
                    f5:63:c2:1e:ac:b6:e9:f6:41:58:d2:70:3d:3e:7e:
                    b5:71:0b:7f:2e:7e:d0:3b:b3:48:cd:91:84:c2:fd:
                    3f:9f:3b:c4:35:26:90:c6:0e:a5:14:c2:b9:14:08:
                    9e:c1:06:00:e7:0e:b4:2a:df:37:15:46:82:6a:3f:
                    d3:fa:ea:be:e5:ad:0d:2e:00:86:c1:bd:73:7c:fb:
                    be:a2:88:ff:8b:d8:f0:52:ef:a9:9a:fe:97:93:57:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2B:19:92:9D:10:D7:C3:A2:B7:B6:2D:34:5E:A2:B2:1C:11:68:4A
            X509v3 Authority Key Identifier:
                keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b9:7d:da:0d:bf:cd:8c:37:d8:64:26:19:26:75:9d:e9:f9:
         8a:51:84:b6:17:9f:d3:ed:be:1e:1d:28:06:e1:d8:00:27:02:
         08:d4:dc:0e:60:73:7d:c6:5d:ea:e4:32:b6:92:e8:5f:e0:42:
         17:65:c5:1d:fc:0d:15:6d:96:3f:3b:a5:58:c7:37:bb:c4:91:
         e6:e1:a0:79:a1:a1:0e:9d:49:63:c9:19:18:f7:0b:4a:d9:da:
         a3:cb:7a:13:04:88:83:e1:f7:7e:6d:92:35:68:77:ee:ea:c3:
         c2:aa:18:7d:e5:37:84:5b:e3:e6:37:9f:9d:d4:40:59:b1:19:
         b5:05:25:92:c7:ac:7b:a1:4a:44:f1:c5:8e:e1:76:13:ab:72:
         93:23:27:3b:ac:a6:cc:3f:ad:d7:02:12:94:0b:b4:89:cb:6b:
         93:1a:5f:9f:12:cd:04:ea:28:e4:60:7d:a3:7b:d7:fd:36:b3:
         16:51:31:3b:f6:ab:5c:f5:65:94:93:1f:23:92:61:cb:ad:a9:
         b5:50:c1:58:d0:37:2d:df:30:53:e5:5d:49:b2:85:ed:35:e0:
         f6:80:1e:47:e1:0e:b4:5c:a1:ad:da:6e:91:5a:3c:4b:28:1a:
         55:e4:39:1c:b6:90:d2:76:02:41:71:e0:d7:38:2d:0c:45:b6:
         c1:a0:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:57 2026 by rpki-client