Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File:                     15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier:          8pCB8vHCIB2a/UxqiO4iFVlgfXrPhFliWP0LwSgl3ZY=
Subject key identifier:   8B:76:7B:C9:E2:66:BD:3F:20:1B:F2:1F:8E:44:67:CE:C8:45:20:F8
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer:       /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number:          C5
Signing time:             Wed 25 Mar 2026 06:06:23 +0000
Manifest this update:     Wed 25 Mar 2026 06:06:23 +0000
Manifest next update:     Wed 01 Apr 2026 06:06:23 +0000
Files and hashes:         1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: S9nGtGKT6ZEshE7rcj+GPEgC341CDtSJk6S6JX2mtTM=)
                          2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 0agSO2czYb8v+KJlTio7mlvfIAuNEExcwdGTY8BGEg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
                          rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
        Validity
            Not Before: Mar 25 06:06:23 2026 GMT
            Not After : Apr  1 06:06:23 2026 GMT
        Subject: CN=69c37b5f-5445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:e1:25:fa:34:62:40:bf:ff:32:e6:4e:77:
                    18:8d:61:c9:62:f0:37:32:0b:36:03:d2:89:3b:9d:
                    de:b2:21:82:60:81:f7:00:99:bc:33:30:31:33:d5:
                    b8:4e:c7:f5:dc:35:0a:7d:a9:81:2e:0a:48:ad:56:
                    0b:3d:e4:e0:63:6b:93:99:56:6b:5b:6e:e3:95:11:
                    9c:00:61:b0:c5:cd:79:11:38:ba:b6:e3:49:08:9b:
                    15:75:f9:c5:8b:25:b7:58:cf:3c:03:fb:58:c9:38:
                    98:3a:0d:09:93:ea:c4:ab:39:6c:d7:d9:cd:78:5c:
                    63:ce:60:36:56:b9:67:24:01:28:39:0c:17:ed:e1:
                    17:86:83:b6:f0:bf:11:55:87:bc:b2:36:62:00:06:
                    4b:d8:26:e3:61:f8:50:40:a9:d6:ac:1b:67:11:7f:
                    4c:9c:69:c2:3d:79:ec:57:26:af:81:1d:b6:b8:8b:
                    59:ff:9d:75:98:65:57:53:1e:10:2b:dc:d3:4b:4a:
                    26:14:68:ed:d2:49:7a:5a:0e:25:28:c2:ab:74:d0:
                    e5:ea:30:36:a7:79:09:86:9f:bc:78:30:e4:2c:2f:
                    f1:e5:8c:b8:f8:fa:25:06:ac:df:ee:36:b7:5a:24:
                    cf:34:cb:5e:ba:42:02:35:31:a5:08:4e:5e:dc:5e:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:76:7B:C9:E2:66:BD:3F:20:1B:F2:1F:8E:44:67:CE:C8:45:20:F8
            X509v3 Authority Key Identifier:
                keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:17:df:69:3a:07:d1:79:52:db:5a:d5:1f:ee:53:e9:f5:68:
         02:e4:29:09:72:2b:ca:31:5f:ab:82:5e:7f:db:67:c0:61:5c:
         e4:97:78:e9:03:32:d4:80:be:d0:05:69:70:23:9c:ee:32:e8:
         63:b7:31:af:bf:b7:66:5c:76:27:01:39:eb:d8:5d:1a:68:b9:
         0c:1f:6f:06:f1:02:fc:fc:75:df:3f:46:b4:d8:1f:c2:fa:c6:
         0c:4e:13:a6:19:75:87:bb:d6:d0:a6:3d:37:9b:bf:7d:87:af:
         eb:02:b1:79:30:5c:6c:d5:42:b0:bf:ed:45:b0:b9:23:4d:44:
         e5:fb:88:8f:44:52:67:5d:05:ad:9b:83:c8:36:28:95:47:9c:
         02:1f:d2:58:a3:7e:6e:29:2a:ce:92:a4:0d:bc:f2:a3:cf:da:
         a5:2e:ec:81:55:80:b5:6d:87:c3:8a:b7:ac:bc:8d:88:53:40:
         cb:e6:62:70:d6:fe:bc:85:aa:34:45:66:9c:6b:2b:3b:98:2e:
         72:60:3c:d4:18:cf:b7:d1:4f:e1:21:95:fd:6f:be:bf:2f:a7:
         df:d2:92:5b:ac:5c:59:19:50:c0:ce:ee:00:2e:d8:b8:47:96:
         e9:b8:c1:1f:08:8a:a2:a6:e7:93:8e:6e:d0:d2:64:91:01:5f:
         71:d3:7c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:49 2026 by rpki-client