Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File:                     Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier:          5HqFVFoX+2FPvP5iBfODRAVHwM96qkZjQ/Jt2n0VZ/E=
Subject key identifier:   7A:0F:C7:3F:47:72:4C:DF:FB:D7:81:B9:E3:28:97:F0:BA:C5:AA:C1
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer:       /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial:       0645
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number:          0622
Signing time:             Fri 20 Mar 2026 22:22:16 +0000
Manifest this update:     Fri 20 Mar 2026 22:22:16 +0000
Manifest next update:     Fri 27 Mar 2026 22:22:16 +0000
Files and hashes:         1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: z9CUC96SOVq2vcwhxmJYGi4gjK3dJicnFAeQshszuvQ=)
                          2: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: KQTVz0e1Zb1iLnhg7VrsR+eEdauEprxEm/t9De3WuEM=)
                          3: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: ebYT6JMp2+FGCLF90hH2BoNKGZH2g9kCtxGailuH/cQ=)
                          4: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: fWQraDGwJwPV67yFDAv4Z9YVrJg/aZyI/SUeFYf35jg=)
                          5: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: lxgbG6pkkYFXzxOLVtY4sU1vaYpcUs17yViYyAj/L48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 22:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
        Validity
            Not Before: Mar 20 22:22:16 2026 GMT
            Not After : Mar 27 22:22:16 2026 GMT
        Subject: CN=69bdc898-c25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:48:e6:77:51:cc:08:56:61:29:11:2f:4d:
                    86:e1:65:6d:53:e1:96:8c:26:da:fe:6b:d4:7a:22:
                    b8:7a:6b:72:f0:c4:9d:1c:af:a2:e9:ee:5e:80:94:
                    68:71:18:07:8c:0f:2a:95:b1:8b:20:b2:06:88:4d:
                    e3:7e:b9:63:20:13:0e:ff:d5:03:65:d1:c8:ca:9a:
                    7e:9e:51:ad:ad:9e:3a:de:25:e2:2c:4e:3c:d5:72:
                    bf:00:fa:a8:df:91:66:94:f8:fb:8b:f8:ba:6a:51:
                    72:02:1b:e6:03:bc:85:f1:2e:d6:d6:0b:3e:97:17:
                    75:36:ae:07:ab:f3:6a:fe:fe:81:2d:13:0d:d8:a5:
                    37:1f:18:20:44:eb:98:b5:37:8c:f8:a5:ea:08:a6:
                    61:7b:50:59:9b:b9:a0:d4:24:dd:04:b9:41:7f:2e:
                    08:f1:11:5e:0e:16:76:d5:72:69:b4:69:96:a1:97:
                    2a:88:ed:3d:d2:0a:d9:14:bf:6b:c0:85:6e:3f:50:
                    8a:74:8f:5e:e8:ff:25:8d:c5:b7:77:54:b3:98:22:
                    67:ce:1c:30:56:2a:1c:a6:c1:12:2d:61:a4:d0:18:
                    e9:4f:2e:be:77:45:3b:9b:3b:58:40:50:36:1e:98:
                    98:21:7f:34:6d:02:8c:b0:89:00:63:0b:19:64:5e:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0F:C7:3F:47:72:4C:DF:FB:D7:81:B9:E3:28:97:F0:BA:C5:AA:C1
            X509v3 Authority Key Identifier:
                keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:57:56:45:37:0f:de:b1:37:a9:60:1f:83:3f:3c:ed:50:fb:
         4b:d3:cb:53:9a:98:8f:28:7d:a4:f7:36:60:3f:15:cf:99:06:
         ad:56:0a:4a:57:c2:c2:3d:91:dc:c5:18:29:3b:8b:86:33:13:
         c7:0b:c4:d1:5d:fd:3c:06:30:a3:54:48:52:96:c0:fd:46:74:
         10:4e:5a:c6:8f:10:9c:fd:84:88:b5:8d:6b:27:9e:d7:09:74:
         c4:27:28:7a:f2:a3:13:ab:ec:72:32:d2:d9:9b:6e:e0:d0:fe:
         39:c2:f2:24:05:d6:3b:64:30:ae:26:ec:4c:64:2c:d1:11:e4:
         97:c7:3c:44:89:48:d9:37:ae:00:77:f1:78:12:68:ff:5f:7c:
         bb:5e:8c:fc:1e:70:d0:db:23:05:53:ba:e6:7a:71:ea:d4:a7:
         57:ae:ff:b6:62:f1:d5:41:15:8c:9d:b1:cf:4f:ee:a5:b2:ab:
         45:10:95:83:8e:5b:5d:c8:7d:24:f4:46:95:3f:1f:da:d9:97:
         9b:90:60:19:b5:81:10:3d:70:b1:6c:e7:68:51:5b:87:77:aa:
         a2:fb:e3:3a:5b:c8:56:54:65:0f:4c:4f:4b:79:14:2d:da:81:
         5b:51:64:26:29:4c:30:5b:8d:67:1b:9e:bd:5f:6a:48:c6:e9:
         c2:12:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 18:56:08 2026 by rpki-client