Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
File:                     GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json)
Hash identifier:          5U3pbN+3sOxM/YlJd72KOKzOwP7yw6UzJtJ/I9HABjs=
Subject key identifier:   BD:F5:EE:87:2D:44:C5:E8:3C:23:32:0B:9F:07:D2:5B:E5:B5:B7:77
Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
Certificate issuer:       /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
Manifest number:          0174
Signing time:             Wed 25 Mar 2026 04:00:26 +0000
Manifest this update:     Wed 25 Mar 2026 04:00:26 +0000
Manifest next update:     Wed 01 Apr 2026 04:00:26 +0000
Files and hashes:         1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: gfQRmJ07jBGSWOlaRod/MpcGRKDnLtHJFQ91nNc2iw4=)
                          2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: 05Ya7DJVKX8wCHmVHhil4CLCkj7r7+cnlIeankN562g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl
                          rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
        Validity
            Not Before: Mar 25 04:00:26 2026 GMT
            Not After : Apr  1 04:00:26 2026 GMT
        Subject: CN=69c35dda-36c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:7e:c6:3f:3c:d1:00:c6:8a:4d:39:06:e9:
                    48:1f:4b:18:a0:21:5e:7f:41:17:d8:65:80:26:8a:
                    c6:0f:ee:16:56:88:25:76:53:da:4e:59:91:58:8e:
                    9b:28:47:34:c5:30:ce:2e:5f:4b:5f:de:1e:29:c2:
                    37:66:4c:6c:f1:1a:cc:cc:83:37:62:e6:7f:bc:60:
                    b2:cb:ce:7c:d9:6a:a0:e9:05:41:89:6c:94:00:71:
                    4c:50:63:de:25:f6:1c:da:a8:cc:87:5e:80:9c:b3:
                    5b:e1:b4:4e:bc:da:2d:14:3e:61:cb:43:68:f6:3a:
                    df:03:6a:c3:22:43:a3:0f:91:0c:5b:46:70:3d:12:
                    a4:f0:e3:ec:db:a4:bd:1f:65:1a:21:27:c3:31:53:
                    dd:e1:70:9b:11:1a:49:96:ab:11:d6:86:46:f5:65:
                    c1:db:92:78:69:4a:c4:6f:bf:01:90:51:b5:ee:83:
                    a7:07:eb:58:61:d7:cd:b6:77:fd:05:86:f6:1b:16:
                    96:e1:9f:c6:3a:2a:6a:79:e9:ba:05:c1:20:f7:65:
                    7e:0d:80:c5:e8:82:0a:97:e6:9c:a4:66:42:88:1e:
                    8c:3c:29:93:81:d5:d4:d6:ec:cf:1a:ce:25:e2:ce:
                    7c:42:31:10:89:4f:0c:39:97:18:b2:23:a2:8d:71:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:EE:87:2D:44:C5:E8:3C:23:32:0B:9F:07:D2:5B:E5:B5:B7:77
            X509v3 Authority Key Identifier:
                keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7d:3e:43:73:08:c9:c0:4a:d7:ce:c6:93:2c:da:33:6d:91:
         ae:db:b8:64:71:f3:73:c9:f9:cf:bc:56:f3:0a:c4:f5:e8:ba:
         3d:a2:83:e5:c4:bb:7a:f3:c4:21:ed:52:18:d6:c4:d0:66:a2:
         50:8e:97:7a:fb:c5:26:e3:80:3d:88:ff:0b:af:a9:f1:5c:f6:
         6c:d4:88:45:21:86:eb:1d:c0:19:cc:00:68:d2:e4:16:56:5a:
         e8:c4:eb:4e:ad:6b:74:df:5d:2f:c8:59:ad:f3:03:c1:a6:78:
         93:92:1b:7e:2b:ec:2e:03:22:e0:99:66:48:91:4b:51:e1:21:
         2f:06:2e:c7:c5:41:c6:da:fc:c9:ba:10:96:9f:66:8d:83:c3:
         1e:7e:c6:87:21:c3:44:c7:03:7c:8c:29:d1:6a:ba:6a:f4:bf:
         55:1a:41:01:ca:8f:dc:64:64:e0:98:1c:d4:74:d1:64:3e:8e:
         3e:87:26:c9:81:f0:06:11:7b:29:ff:a6:9b:ad:5f:35:23:84:
         11:ac:64:35:99:1b:38:f4:ca:2c:15:38:89:68:6e:32:63:c8:
         34:88:f9:f0:e5:f8:63:93:53:e4:93:f8:d4:3e:e4:16:1d:c7:
         92:7a:2f:c7:7b:fa:4a:60:cd:61:13:e6:fd:ad:5f:15:3b:b8:
         02:6a:27:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:02 2026 by rpki-client