Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File:                     15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier:          E+EZg0+9rR1V7fTaArWFEgGKn5TjFfpYLqL3+gPLCEk=
Subject key identifier:   AA:27:A4:46:0C:7E:B0:FA:D2:4B:79:FD:5F:28:EE:72:6A:DE:8C:64
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer:       /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number:          0122
Signing time:             Mon 21 Sep 2026 05:49:25 +0000
Manifest this update:     Mon 21 Sep 2026 05:49:24 +0000
Manifest next update:     Mon 28 Sep 2026 05:49:24 +0000
Files and hashes:         1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: fI7JzTc0QgXpBFcEMeX8NePgwSbxhpkjhdXsLnf8358=)
                          2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: gfOD6URsp7SaHqbX7i3uTtfgx5nJhXl7AmIXZ2sSe24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
                          rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
        Validity
            Not Before: Sep 21 05:49:24 2026 GMT
            Not After : Sep 28 05:49:24 2026 GMT
        Subject: CN=6ab0c565-f629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:05:00:f6:1f:12:61:6a:e8:cf:f7:8b:1f:
                    c7:2b:4a:39:f2:72:a4:8b:a8:ae:5c:d7:fa:df:6c:
                    3c:ce:50:39:e4:c2:3a:b2:58:cd:95:35:cf:e7:52:
                    72:7d:2b:8d:6f:4d:59:4c:be:e9:ca:9e:39:fe:99:
                    e8:3f:22:40:98:7f:15:46:42:e8:58:00:0b:d5:60:
                    12:9a:62:77:fe:6c:3a:8f:27:3d:67:62:ba:43:db:
                    e8:0e:20:35:b0:74:23:37:22:90:d4:10:cd:b6:aa:
                    f1:57:93:fe:cf:5e:d4:31:d9:ae:9a:ba:09:96:62:
                    bf:ae:ee:12:b2:47:7d:fc:07:8b:d0:3e:2c:e5:e9:
                    74:98:d7:d6:1b:25:8e:e2:1c:a4:c0:b3:fe:0b:56:
                    25:76:bf:84:a0:55:28:db:8b:97:0d:12:a9:bd:37:
                    42:22:bc:f3:67:bf:3a:65:19:60:5b:97:51:2b:23:
                    f9:4b:63:b5:c0:9f:66:0c:d6:2f:d9:66:2f:df:bc:
                    6e:a1:51:0f:04:23:be:74:3c:09:53:6b:d3:75:b8:
                    90:e2:79:99:c1:7c:77:e3:a2:dd:00:83:a9:ab:56:
                    9b:ec:f5:38:a8:e2:82:94:e9:d7:ec:fe:89:f2:19:
                    da:12:24:97:31:f3:5b:12:e2:ac:a6:bc:54:fd:96:
                    5d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:A4:46:0C:7E:B0:FA:D2:4B:79:FD:5F:28:EE:72:6A:DE:8C:64
            X509v3 Authority Key Identifier:
                keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1a:ae:57:42:52:80:3c:a0:83:ab:c0:2b:23:0e:23:90:6f:
         dc:02:61:97:c0:1e:63:c4:63:eb:67:e4:5b:c9:6c:f4:8a:87:
         59:81:c7:91:67:aa:5d:7f:28:a6:de:78:a6:62:fc:49:ca:57:
         d4:00:7b:58:d9:d0:00:ba:09:13:b6:07:d7:d4:dd:f2:5a:68:
         b8:db:9a:ce:39:a2:5f:35:f5:61:21:a1:71:ac:95:ea:ae:08:
         e1:0e:ca:69:ec:33:9a:8a:8f:5b:fd:b2:40:20:d1:39:58:3d:
         a0:ab:c8:76:2d:8d:11:2d:3c:53:32:0a:18:4b:33:e2:fc:25:
         2d:ac:86:50:43:20:45:0f:d7:82:38:00:51:9e:b7:c8:99:f4:
         59:7c:d6:6f:88:43:3d:1d:75:73:37:d5:bf:fa:d7:4d:0e:9c:
         71:ae:9f:7e:7c:cf:4c:da:ae:e5:14:e3:65:fd:66:dc:ef:58:
         8b:a3:20:24:b9:31:2d:24:83:ec:24:be:23:cf:72:70:2f:89:
         5f:21:aa:1c:5c:bb:c2:df:75:7c:0c:1f:51:4f:8e:2a:a0:d7:
         3b:91:9f:a8:09:88:21:43:49:31:3c:d9:46:97:16:f0:6f:54:
         15:86:7b:bd:15:4f:be:7a:4e:ce:4f:d2:ff:a0:5f:fd:95:c7:
         12:af:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:26:31 2026 by rpki-client