Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft
File:                     GwdUmyUM_APdrXtURD2oOIkYEco.mft (raw, json)
Hash identifier:          wJftQDdmzZzSgQu4bnvgDsGVkZjVk/PNPhoOagduf2I=
Subject key identifier:   BF:0D:F1:40:65:01:EE:86:31:8A:44:54:68:1E:DB:84:23:8F:92:BC
Authority key identifier: 1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA
Certificate issuer:       /CN=A91D18AC/serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft
Manifest number:          0112
Signing time:             Sun 05 Apr 2026 05:15:24 +0000
Manifest this update:     Sun 05 Apr 2026 05:15:23 +0000
Manifest next update:     Sun 12 Apr 2026 05:15:23 +0000
Files and hashes:         1: GwdUmyUM_APdrXtURD2oOIkYEco.crl (hash: wzs1M0OEW9/OfR1xTgPMzHc4UJCx36sIvkZnpSDtXbE=)
                          2: 34BA37F6976E11EFAEB6A258C4F9AE02.roa (hash: GuBhGybCWeyGqqI+tDy//PPqxlsEHSc9ReRR3T+GKIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl
                          rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D18AC, serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA
        Validity
            Not Before: Apr  5 05:15:23 2026 GMT
            Not After : Apr 12 05:15:23 2026 GMT
        Subject: CN=69d1efec-702b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:93:84:09:b5:77:5d:9b:1b:05:32:56:b0:63:
                    03:db:58:89:7f:75:e5:92:16:38:2a:b0:e9:ec:5b:
                    6a:0a:e0:44:88:27:93:d7:7e:e9:71:f1:a5:b4:93:
                    82:05:9c:fc:bc:78:bc:a3:ce:b0:c5:30:f7:59:ac:
                    ff:24:8c:83:5b:fe:52:01:e4:66:c6:ee:1b:39:76:
                    90:60:43:34:c1:62:eb:ed:71:af:6b:58:6b:b7:00:
                    72:af:25:2e:a4:f8:3e:bc:52:43:e4:ba:f0:d9:2c:
                    50:d2:31:c2:43:b7:20:aa:fd:40:15:4c:08:a8:a7:
                    90:07:fc:8e:af:e8:92:bf:da:02:f9:59:11:b5:e8:
                    06:99:85:a9:91:ba:b5:34:97:78:7a:50:80:c4:92:
                    dc:ce:84:aa:ea:ac:95:55:eb:d1:e3:6e:0e:c5:55:
                    b4:5e:c2:f4:9c:f9:c3:f2:ec:11:35:cf:6d:c5:69:
                    14:07:12:7c:99:12:5c:af:7e:ce:f6:3c:3e:cc:f8:
                    19:7c:24:f6:19:87:01:9d:ef:39:d6:1e:13:7a:79:
                    c0:37:88:82:87:39:60:9c:a1:02:40:53:2b:cc:9a:
                    49:e8:54:ba:ae:42:5d:07:fe:ee:f1:f4:06:86:f9:
                    16:db:5a:a7:d0:f9:be:27:65:09:50:29:5e:56:b1:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0D:F1:40:65:01:EE:86:31:8A:44:54:68:1E:DB:84:23:8F:92:BC
            X509v3 Authority Key Identifier:
                keyid:1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:94:fd:7b:96:39:a6:3f:7f:a1:df:ac:34:b4:b5:88:17:38:
         65:7b:07:ec:9c:ce:3f:f8:9b:6c:95:9b:b9:ed:8e:05:c8:46:
         1a:d9:22:61:68:f0:94:1d:ad:56:d6:63:e9:55:10:3a:61:db:
         5e:c9:8c:0e:16:13:35:d2:51:f2:c0:ce:d7:2c:18:92:9f:52:
         f0:27:6d:2f:09:57:3d:42:46:ca:5b:07:cc:85:d6:c4:37:26:
         d2:12:d9:1e:e0:fa:43:7a:68:9a:bd:7f:b6:0d:b6:52:fe:22:
         8c:3d:1f:4f:a8:9e:9e:7f:82:7c:58:bd:cb:d9:4d:d2:f8:38:
         25:de:1a:78:5c:69:df:81:dd:9e:1c:4b:12:fc:3c:b4:2c:39:
         b7:7b:49:d3:4f:ed:c1:a5:a8:ad:43:e1:54:72:85:25:70:e1:
         74:b8:13:a3:43:7e:30:b0:4c:b6:c6:e2:f4:e6:7f:4c:5f:a8:
         e2:81:53:b2:2a:c0:a2:7a:ce:94:94:b3:e3:99:cf:dc:09:dc:
         78:d2:2d:52:f2:56:2d:00:b2:37:1a:85:45:31:22:79:33:53:
         2c:2f:0d:23:e0:fa:62:58:6a:2d:10:a0:6d:85:f1:ea:33:6f:
         3d:64:84:ec:0b:bf:59:c3:0a:5c:d0:1d:67:80:7e:5c:11:8e:
         c7:82:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:52 2026 by rpki-client