Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
File:                     GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json)
Hash identifier:          ZqmBtSpS4ycZqKITmUPEHaKFDacBbtH4T0Wk4b+S2q0=
Subject key identifier:   60:AB:F8:40:26:8B:74:DD:67:DD:A7:15:58:17:DF:1D:CF:DB:5C:44
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Certificate issuer:       /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial:       1AEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
Manifest number:          1AC1
Signing time:             Tue 02 Jun 2026 16:19:07 +0000
Manifest this update:     Tue 02 Jun 2026 16:19:06 +0000
Manifest next update:     Tue 09 Jun 2026 16:19:06 +0000
Files and hashes:         1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: g3Uovq/0q7WGy7fu4IbLPVUXU4LsrtbLxAqiadKNJwU=)
                          2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: M9XcsGu+O0Zk52IzM7Z06ElXp8zYwD2w5zBvqMmkl5E=)
                          3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=)
                          4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: QYJCGTrhNobc9om3BoJ26lPH+BId3l/MUNDCYqKgq0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 16:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6892 (0x1aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
        Validity
            Not Before: Jun  2 16:19:06 2026 GMT
            Not After : Jun  9 16:19:06 2026 GMT
        Subject: CN=6a1f027b-fe89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:d5:e3:a1:53:44:dd:47:2c:f6:9c:ed:a5:
                    89:30:19:c4:67:52:2c:ae:0c:42:b9:a7:c7:55:c7:
                    e8:c4:01:ee:e7:d0:e0:a2:6b:6d:42:78:6b:f0:fa:
                    f0:6d:d6:db:66:e0:4a:4c:fc:67:7f:2b:b5:84:aa:
                    6c:79:89:09:4b:4d:28:7e:3c:51:1f:9c:84:87:06:
                    3a:df:41:4a:a4:f9:62:ea:e4:70:9b:48:21:0a:d2:
                    12:0a:fd:9a:2a:44:7c:99:e5:a0:26:2d:fb:df:24:
                    65:42:2e:38:00:ad:aa:94:10:cd:cb:0a:6a:4b:8b:
                    ea:49:84:12:90:59:ef:16:34:70:06:2d:28:41:6a:
                    90:7b:35:67:f4:bf:0e:9e:9f:71:fd:48:e3:06:41:
                    04:52:7b:15:06:db:f2:c4:e1:02:d2:22:57:00:38:
                    94:d9:21:26:e9:a3:40:da:0f:a6:23:36:48:41:83:
                    6a:ad:40:74:a1:41:41:8e:5d:d7:2a:b1:a3:9d:8f:
                    87:ff:62:54:97:b9:22:b0:03:83:67:c2:5a:5c:62:
                    e5:0d:38:2b:82:5b:a9:40:47:e5:89:1f:bc:01:4f:
                    5b:9c:7a:a2:b1:06:da:e5:09:56:de:6c:57:21:a3:
                    a9:80:ce:93:4d:ae:2b:c6:f4:8c:f4:d9:d1:e5:e5:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AB:F8:40:26:8B:74:DD:67:DD:A7:15:58:17:DF:1D:CF:DB:5C:44
            X509v3 Authority Key Identifier:
                keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:98:b5:04:e6:e4:69:2e:15:75:0b:ce:cd:bf:e2:71:ac:d3:
         be:ae:1a:c3:ef:59:22:24:29:67:e0:23:f5:3c:f1:4f:ab:37:
         52:02:26:8c:1d:33:62:be:c9:d1:40:53:9d:fd:37:2b:eb:0e:
         d2:63:5a:ed:70:86:8a:0d:53:a5:e5:a1:89:81:e4:2a:99:8b:
         4b:ab:fd:e2:b4:c2:d7:5e:f4:b3:0d:ec:41:55:15:4b:0a:0a:
         f4:e1:00:a9:82:f6:a0:5f:41:27:e7:97:78:7d:fd:36:ba:dd:
         3c:f0:7c:9c:c2:48:76:1a:eb:1a:e0:81:03:97:dd:ff:3c:95:
         2b:4f:df:8c:9d:3a:67:47:cf:f1:e2:cc:ad:c0:3a:97:48:ef:
         00:c2:95:ce:3f:62:d7:a4:24:48:60:2b:e8:7b:6d:dd:bd:4c:
         ee:f0:ae:7b:f4:1e:36:57:3f:31:3d:11:fe:fb:23:5b:af:d3:
         9c:81:83:32:3d:68:a4:00:cf:47:da:ac:40:f1:8e:66:70:74:
         9f:ef:43:a5:bc:9f:32:e3:d6:2f:de:2d:5b:d0:7d:13:04:03:
         12:c4:91:a6:b1:56:8b:1a:e3:af:0e:e8:bf:77:4c:a8:31:c9:
         5f:78:1e:bc:ef:23:71:c4:0d:42:21:4f:f6:84:72:97:cc:e7:
         c3:f1:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:26:37 2026 by rpki-client