Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
File:                     gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json)
Hash identifier:          wAoqNU1C2+LafoG+DZYKob2g21I0Ot6fOgwrvepnvKE=
Subject key identifier:   6C:2D:F6:87:A3:B5:C1:F4:3A:7A:CA:3E:BB:CA:77:EE:9D:72:05:2C
Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22
Certificate issuer:       /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
Certificate serial:       09A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
Manifest number:          099A
Signing time:             Tue 24 Mar 2026 19:47:44 +0000
Manifest this update:     Tue 24 Mar 2026 19:47:44 +0000
Manifest next update:     Tue 31 Mar 2026 19:47:44 +0000
Files and hashes:         1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: 5V7avmduIYmR/dpZHpFBeRRQd2ZnZ2V1sSFsuwqpI38=)
                          2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: gqN4+0x/iPERujmuiwnxSyaP8QLNa37HtTvPV2wxA2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl
                          rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2472 (0x9a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
        Validity
            Not Before: Mar 24 19:47:44 2026 GMT
            Not After : Mar 31 19:47:44 2026 GMT
        Subject: CN=69c2ea60-df4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:04:f0:f6:e1:d4:f7:ac:64:1b:bd:b1:6e:
                    83:d5:db:19:bc:73:96:54:ca:0c:11:d2:1f:c1:73:
                    0d:9a:1d:aa:da:7c:8d:c9:50:09:a7:82:e7:33:b3:
                    63:db:98:6c:98:03:4d:76:5b:bc:94:e0:54:2f:5d:
                    03:3f:dc:82:63:da:3e:7e:48:a4:a4:ec:ef:49:8c:
                    68:ef:a7:a2:08:91:92:d8:f3:e9:b2:fb:8e:9f:d7:
                    44:8a:c4:b4:44:9f:3a:a8:74:51:28:a0:bc:7f:3a:
                    1e:12:3b:f8:b2:2b:c0:9b:7c:e8:f4:eb:73:8d:90:
                    24:00:b2:31:0d:27:0d:b1:39:36:70:b7:f7:03:be:
                    cb:26:99:2a:ef:e2:24:c7:3c:17:bd:37:2f:da:2d:
                    0f:de:5c:4a:bc:b4:77:a3:0c:db:9c:11:a9:a9:79:
                    3c:4e:93:fa:38:a1:18:c8:60:b0:90:81:56:0e:b5:
                    3a:27:8f:a6:a5:30:9e:04:d3:30:51:50:ad:6b:ba:
                    52:45:18:4e:21:af:40:63:24:da:7b:0f:63:d2:8f:
                    fd:65:9e:e3:ec:c1:97:1f:ab:8b:9c:bb:87:1c:dc:
                    a5:aa:62:22:60:8f:ca:1f:25:28:c2:dc:77:28:96:
                    4a:e9:2d:7e:a5:70:08:96:40:9d:37:e4:32:40:13:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2D:F6:87:A3:B5:C1:F4:3A:7A:CA:3E:BB:CA:77:EE:9D:72:05:2C
            X509v3 Authority Key Identifier:
                keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:93:25:e8:8d:75:82:4a:d6:57:aa:3a:12:7f:f1:c6:21:7d:
         b1:e2:dc:c2:e9:6e:b9:70:56:a6:a0:41:8f:5f:5d:51:91:df:
         61:46:8a:1b:28:02:a4:67:de:b8:49:41:a1:53:68:6c:36:84:
         ce:5f:36:13:7e:fa:65:5b:84:85:56:4e:ba:fb:b7:16:a5:df:
         13:fa:b4:7a:31:f6:77:8a:3f:10:24:cd:e7:aa:cb:1c:ce:5c:
         48:46:00:ef:54:0b:c5:d2:74:ee:6d:a4:5e:fc:31:cd:18:1d:
         82:4c:00:90:57:6c:24:12:c8:27:63:21:fe:5d:53:5b:db:0a:
         ba:1a:8a:db:e8:ce:c3:57:2f:05:2c:dd:41:ea:29:e6:ed:df:
         52:71:8d:d6:2b:ed:64:78:48:c8:46:1a:cb:68:85:bb:63:15:
         45:36:0b:62:bc:ee:1a:06:81:22:33:a9:f7:65:7a:9c:55:eb:
         4f:f7:c2:b5:ec:9c:b4:e1:47:6b:ba:ba:02:48:1e:1c:96:d4:
         99:b7:a8:ae:71:ac:a5:20:94:d9:05:e8:1c:f0:b8:db:95:50:
         66:71:73:2f:00:ab:1f:83:4f:07:5f:18:34:53:22:0d:58:2c:
         de:67:76:c6:2c:ba:bf:fc:c3:7c:72:fe:d6:77:9f:df:09:89:
         c2:62:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:42 2026 by rpki-client