Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
File:                     GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json)
Hash identifier:          kJeJxjApHUs956VVDfkIQiYzaVpa7SwJ00hi7Y2ShiE=
Subject key identifier:   69:19:0C:DA:13:E9:B5:4B:54:D4:B4:6F:9E:2D:50:74:6A:40:E0:CA
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Certificate issuer:       /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial:       0ADA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
Manifest number:          0ACE
Signing time:             Sat 28 Mar 2026 19:22:20 +0000
Manifest this update:     Sat 28 Mar 2026 19:22:19 +0000
Manifest next update:     Sat 04 Apr 2026 19:22:19 +0000
Files and hashes:         1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: oZvkSQG1XzW/bOYuVZJIS5d7pgj2FmHsYc0rg5w34Yw=)
                          2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: QfaWCwe/qZDBNL7SvK9BdlJZP0tZLuQpHfGjUMElff4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
                          rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 19:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2778 (0xada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
        Validity
            Not Before: Mar 28 19:22:19 2026 GMT
            Not After : Apr  4 19:22:19 2026 GMT
        Subject: CN=69c82a6c-13fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:ed:f7:78:11:c2:1b:37:af:a3:83:0a:9b:
                    63:12:d6:7c:03:cf:34:a3:88:f9:a5:39:6f:9e:52:
                    64:96:89:08:85:e7:17:33:59:6f:3e:f0:03:8d:f1:
                    3b:3e:a4:cb:6e:d1:dc:52:c3:c5:41:04:78:35:25:
                    ee:68:ae:13:d0:f2:95:7c:bd:71:d6:79:02:1f:c3:
                    94:4d:b3:62:c0:1b:29:ea:8b:a4:78:4a:13:31:88:
                    fc:c6:70:36:38:e3:db:7e:cd:ba:be:e1:e3:2e:b0:
                    10:be:1b:3b:ff:bd:a1:f3:4d:55:8a:fa:86:64:57:
                    3d:53:28:27:c3:3a:bb:62:db:af:0b:17:05:2e:83:
                    b8:cf:e8:f9:d3:88:5b:91:3d:1f:c6:26:6d:37:9a:
                    c1:7b:21:a1:35:34:e4:bc:2c:48:cc:bd:c3:a9:17:
                    91:ad:ae:52:fd:82:f0:87:fa:b5:6e:b9:33:51:38:
                    e5:61:7e:1c:7c:e0:ac:41:2a:52:45:08:53:ca:fd:
                    7a:10:eb:8c:a6:47:29:8a:36:0a:9e:0e:e3:26:a1:
                    17:95:fc:b4:5d:93:48:ad:32:7a:4b:db:f6:03:8e:
                    50:d1:01:53:2e:2e:f5:0f:b5:38:df:e5:86:e5:c8:
                    c5:24:56:9e:3f:6a:ac:50:d7:75:f2:64:bc:b4:0b:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:19:0C:DA:13:E9:B5:4B:54:D4:B4:6F:9E:2D:50:74:6A:40:E0:CA
            X509v3 Authority Key Identifier:
                keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:db:e0:4b:f8:08:a7:b1:be:5c:b4:89:51:42:43:58:88:86:
         13:9c:e3:65:a2:c0:e5:60:4d:cd:91:ff:92:8e:4b:94:8d:ea:
         07:8e:d9:7e:42:85:b2:23:c6:1e:9b:eb:87:19:b4:44:e7:44:
         9f:77:47:78:51:70:9c:17:6f:6d:07:2f:0c:93:b9:6e:9e:8e:
         7c:80:d5:b7:c9:e1:9d:e4:f8:cf:aa:37:36:b3:28:0e:e6:56:
         ed:4e:0b:7c:f3:a4:b3:a2:06:2c:5b:31:06:d4:9e:94:22:45:
         5b:82:ae:37:97:7f:4a:66:d6:d4:99:4f:f3:cc:14:38:51:52:
         2b:12:9d:d5:af:95:eb:f7:b4:04:fe:2c:a5:81:6b:97:58:c2:
         f0:ec:b4:56:8a:e6:4c:54:5b:42:e5:6a:72:6b:94:bf:df:d4:
         14:ab:7b:7a:23:85:e9:f4:b4:bd:22:e6:e3:2c:77:5e:5a:10:
         27:b3:f1:c6:b8:78:d2:02:e3:d4:62:6c:c3:df:25:96:1e:4a:
         c1:09:df:5a:91:59:b2:01:7f:de:be:0d:76:7d:91:c5:06:d5:
         44:df:e5:55:e6:df:af:61:e0:55:df:e6:2a:ca:3a:42:77:82:
         92:95:a1:3a:69:50:64:a2:87:2c:9b:51:04:25:71:c8:bd:41:
         57:b2:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:27:17 2026 by rpki-client