Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
File:                     gTpuT37cWLx6SLbR_XwZ39go8fE.mft (raw, json)
Hash identifier:          nsOZ7EsZPaABKos0t6+4uMS/TURqtHSyIjbOoRoNjoo=
Subject key identifier:   17:0D:EF:F4:D4:54:4E:42:6D:65:08:E9:7B:AD:D4:8E:60:59:60:7F
Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1
Certificate issuer:       /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
Manifest number:          0141
Signing time:             Sun 05 Apr 2026 04:44:55 +0000
Manifest this update:     Sun 05 Apr 2026 04:44:55 +0000
Manifest next update:     Sun 12 Apr 2026 04:44:55 +0000
Files and hashes:         1: gTpuT37cWLx6SLbR_XwZ39go8fE.crl (hash: JUBLmcG5b4AKEJH/BOKcNM0R1b2NeuZZzeeakysbNVY=)
                          2: C0F3F504492B11EF8EF0D04FC4F9AE02.roa (hash: WEMy1UznZiqhO5f2R7BagxgiASiR/owyhwN0nQgeHAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1
        Validity
            Not Before: Apr  5 04:44:55 2026 GMT
            Not After : Apr 12 04:44:55 2026 GMT
        Subject: CN=69d1e8c7-ac10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:f0:a3:d4:7e:2b:db:24:e2:cb:f7:cd:07:
                    32:07:a3:e5:87:f7:87:42:b2:58:eb:74:8d:56:25:
                    1b:a1:f6:91:8c:01:eb:51:64:50:9a:66:9e:a1:0d:
                    a1:4c:e7:41:a1:2a:06:9c:28:e0:e8:ac:90:20:7f:
                    ac:15:57:8d:d5:13:23:1f:e3:d4:03:e5:88:1c:8f:
                    b0:cb:cf:3b:5e:27:54:92:c6:41:34:10:37:0c:4e:
                    a4:a8:ad:ee:96:db:d4:a5:31:b2:eb:69:ae:ef:94:
                    bf:0a:73:9a:ef:e2:55:d5:2d:b6:2c:e7:76:6c:b7:
                    79:c4:e8:28:82:b0:9a:54:60:42:76:7c:71:30:0c:
                    61:0c:a5:b5:82:d5:f9:58:16:be:e6:61:d3:96:63:
                    32:ff:f2:b7:d7:77:98:6f:85:ba:a9:63:6b:e4:26:
                    ac:60:c4:e5:ce:ff:54:60:68:97:36:23:66:0d:ca:
                    53:33:59:87:9d:5b:84:3c:3a:0e:4b:fd:73:9e:dc:
                    81:c2:e3:44:70:0b:2a:51:69:2b:1e:87:bf:bc:89:
                    a8:bf:fc:65:9e:9a:5c:c3:de:9e:09:14:9d:88:7f:
                    1e:9c:4f:a2:a6:68:c3:64:d9:04:ff:87:bb:22:8b:
                    01:bd:ae:01:9c:1e:47:a3:c6:cb:74:a8:02:ec:58:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0D:EF:F4:D4:54:4E:42:6D:65:08:E9:7B:AD:D4:8E:60:59:60:7F
            X509v3 Authority Key Identifier:
                keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7a:d6:46:2b:c8:3c:5b:6a:55:af:89:9b:3e:1b:36:d8:60:
         15:69:0f:a6:80:68:13:b1:a0:cc:70:9f:24:0a:60:d5:4a:b8:
         cf:7a:ee:f2:6a:93:75:d4:02:b9:d4:4a:15:06:ac:90:ec:65:
         0b:4c:88:a8:ee:dd:5b:3b:9d:81:a1:28:89:a2:92:9c:e9:a6:
         37:cc:cd:00:a2:b8:e3:2c:a8:83:2f:9c:2e:20:76:ed:a6:65:
         34:4d:b4:c0:85:25:06:f3:88:59:69:89:e4:6c:fe:17:7f:f1:
         21:0d:ab:e8:e3:f8:94:2d:8a:35:fc:77:a9:66:61:50:3d:05:
         58:50:34:9b:f3:93:dc:13:7d:21:aa:d1:c8:a5:b7:d0:6d:55:
         73:c2:7f:c8:3b:73:71:20:92:1f:d3:63:e2:07:06:85:31:87:
         9d:d9:a0:54:91:6c:f3:2b:64:af:b5:8a:88:65:39:26:b9:68:
         7f:6a:62:c7:a0:3b:02:84:a5:9f:65:f5:b8:d9:88:e8:42:5e:
         88:76:72:fd:87:29:13:b1:2e:fd:a7:87:58:c2:09:32:d2:71:
         3b:7e:c2:41:b8:e6:4e:81:71:47:77:08:5a:41:85:6e:27:23:
         05:ef:cf:6a:46:2a:3b:ca:b2:ce:22:c7:69:3d:b6:fa:e8:39:
         65:3a:bc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:27:00 2026 by rpki-client