Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File:                     MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier:          hac6pqJLPXAYC/5+xoHzqqmgsbZeLzRu9dZhmya+ijw=
Subject key identifier:   64:30:32:87:AF:E3:7F:B6:68:8D:7A:86:35:07:DC:9A:53:CD:29:15
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer:       /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number:          0256
Signing time:             Sun 05 Apr 2026 02:07:48 +0000
Manifest this update:     Sun 05 Apr 2026 02:07:47 +0000
Manifest next update:     Sun 12 Apr 2026 02:07:47 +0000
Files and hashes:         1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: FS3B23DkbxncwkW/sabx/jrAgQVX0FE0EvCOtlQHV5c=)
                          2: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: gHUta7y8pC3d2TOZ0QshxXr62KyKz6DtLyfNYCQhLTs=)
                          3: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: HzpFQGz5CVxBl9sbcVJvLDzRvcHkaj2Jp7niriD1Y/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
        Validity
            Not Before: Apr  5 02:07:47 2026 GMT
            Not After : Apr 12 02:07:47 2026 GMT
        Subject: CN=69d1c3f4-7c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:ef:98:ff:dc:9e:65:ac:ac:a1:d9:06:9e:
                    2e:b6:af:16:d0:2a:3b:3a:4a:e5:7d:7e:07:25:b7:
                    6b:fb:71:08:18:23:0b:e0:0e:13:fa:c4:66:e8:b8:
                    9c:3f:84:f3:81:db:30:a5:89:71:fe:07:f6:e9:6d:
                    2c:78:b2:30:d1:07:7a:10:56:59:37:55:41:98:7f:
                    a4:5d:4b:0b:12:b0:91:f4:c6:d5:2b:ab:07:5c:df:
                    35:85:3d:28:4c:14:25:9c:67:97:bf:de:b6:1b:fa:
                    22:4f:12:e5:ef:d1:db:94:1f:1b:01:7f:60:2c:27:
                    a7:4f:c3:92:a3:01:50:39:1d:43:a3:30:d2:dc:ad:
                    9e:4f:e2:11:d0:f2:37:61:3e:05:4c:cc:e5:cb:57:
                    96:4c:1e:65:0a:76:6b:ac:ba:94:01:4f:a5:f7:80:
                    96:a4:a8:55:46:e6:1a:2f:a7:5f:83:5a:37:86:65:
                    67:11:02:a4:c9:e3:97:59:f5:15:85:2a:4b:3f:58:
                    51:6a:fe:b7:07:1c:88:85:ea:d0:94:5f:41:66:7e:
                    ea:8a:66:d4:ad:17:8a:f0:d7:8c:4b:8f:46:4c:ae:
                    4c:5e:2d:ee:dc:8a:a3:1b:49:df:c0:bb:18:1f:e6:
                    75:95:ed:aa:22:4f:3d:06:34:df:2f:c9:17:e4:87:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:30:32:87:AF:E3:7F:B6:68:8D:7A:86:35:07:DC:9A:53:CD:29:15
            X509v3 Authority Key Identifier:
                keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:0f:df:8f:71:27:f0:51:26:48:53:9b:64:18:2e:f6:2a:95:
         67:97:c3:2c:c1:a7:de:25:ae:a7:87:d8:1e:2f:5a:1c:eb:b2:
         fc:9c:d1:b4:ca:50:00:1d:bc:f2:9e:b0:6c:f9:63:34:9f:8f:
         7b:e0:c7:7c:d0:c1:21:4a:cc:d0:cd:fc:6f:1b:4e:50:fd:ce:
         fa:62:fc:e7:d9:0a:b3:28:74:5c:9b:79:e1:8f:c4:36:e9:16:
         bb:81:0c:89:2e:e6:97:73:b6:1f:86:01:2a:b2:d0:73:71:57:
         56:7f:38:68:a9:04:19:85:c3:7a:e0:10:0e:34:9e:87:96:c8:
         e8:88:20:74:16:5c:73:b8:42:57:7d:82:7f:b0:89:90:75:8c:
         a1:79:91:dd:3b:b5:8a:42:dc:ec:0e:cd:f7:a9:69:f5:5c:22:
         af:74:22:42:82:7f:75:f3:48:37:94:68:e4:4c:d2:24:2c:1a:
         d5:fa:cf:5e:c9:90:cb:06:4d:96:e6:73:49:48:ba:2e:79:57:
         37:ba:91:48:47:58:2c:ef:b1:29:8e:7b:b1:11:41:ab:4e:24:
         88:97:35:d7:ae:7f:f9:af:2c:cb:b2:6f:9d:66:3f:d9:81:2a:
         fc:6e:22:5d:87:29:8a:58:64:72:e5:e5:f7:32:10:21:41:01:
         80:27:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:34 2026 by rpki-client