Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          rXXO0kcuWSzLV2umt2U3D39TuDd9gTN5Yep+Siyo+vs=
Subject key identifier:   2D:DE:8E:EF:32:9A:07:6D:78:CB:70:99:24:17:52:AD:3F:D4:33:29
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          CD
Signing time:             Wed 25 Mar 2026 06:00:28 +0000
Manifest this update:     Wed 25 Mar 2026 06:00:28 +0000
Manifest next update:     Wed 01 Apr 2026 06:00:28 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: 8+oX/u6e5Q3oY79kMtCwGXMajEFqaYLtDMOUm1MmJZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
        Validity
            Not Before: Mar 25 06:00:28 2026 GMT
            Not After : Apr  1 06:00:28 2026 GMT
        Subject: CN=69c379fc-b828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:fa:68:e0:bc:29:19:fb:65:31:72:ea:8f:
                    d3:98:e2:d9:7b:5f:cf:99:cb:67:0f:20:8d:fe:7c:
                    0b:85:7b:58:1b:0c:60:30:8b:74:cd:96:ad:cc:8a:
                    24:33:f4:e1:a6:f4:22:df:e6:03:35:9b:22:65:60:
                    3a:a5:7a:7c:5a:3a:00:fd:26:45:ef:d8:2a:5f:c8:
                    5c:af:bb:79:d7:ee:b7:45:16:c1:e6:33:58:c0:38:
                    05:52:77:80:aa:6a:1b:79:49:b7:6e:b8:30:e4:b7:
                    37:40:96:de:8e:fd:bf:0e:a4:62:23:f7:2e:1f:a1:
                    34:48:37:4d:48:21:9d:4d:ee:e2:d1:01:dc:fa:b9:
                    b2:ba:99:d8:04:84:00:ae:49:77:d2:a6:57:02:eb:
                    ce:a0:47:63:46:96:79:80:e7:7f:bd:a2:3e:ff:0d:
                    39:34:52:34:3c:2d:23:78:f7:bd:ac:77:10:49:1a:
                    ce:3a:8b:a6:01:41:41:90:72:58:4d:f1:c3:25:e4:
                    2a:11:e1:43:db:fa:fa:55:97:f9:3a:db:e7:58:ce:
                    b3:17:4b:fa:8d:7d:af:e2:6a:c7:70:4b:ab:ef:46:
                    b2:dc:dc:4d:74:9c:f7:1d:e2:10:12:b7:22:d9:bd:
                    65:0b:59:e0:f2:b8:ff:ce:9c:ef:5f:b2:1f:7f:0e:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DE:8E:EF:32:9A:07:6D:78:CB:70:99:24:17:52:AD:3F:D4:33:29
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:5d:8b:26:03:36:1e:17:1a:46:85:c5:d1:f2:a1:5a:b1:
         b5:61:9e:de:02:08:8d:7f:b2:0d:76:ed:83:e1:14:d7:20:29:
         be:fb:c3:1c:7d:4d:9b:f9:6f:df:35:20:82:5b:ab:fb:cd:1c:
         e8:ce:03:27:82:c0:3b:0c:15:74:e8:ea:2f:5f:29:7f:68:22:
         40:1d:9a:8b:33:ae:78:1a:82:b1:55:7a:67:ab:47:30:fd:90:
         ce:40:4e:70:8e:5f:83:90:00:b8:a8:b4:c9:d4:06:b5:21:1a:
         70:d7:95:fb:49:f7:e8:f3:74:3d:4a:5a:58:10:1b:d3:21:f9:
         85:9d:5e:78:f0:1e:e7:19:07:c6:17:31:c9:8b:f0:6b:14:c3:
         08:23:e8:37:c5:28:93:f0:dc:3c:5e:ea:bb:78:96:1d:bd:ac:
         7f:f6:68:00:a1:5a:4a:a6:64:be:e1:8d:65:b3:62:5a:ea:78:
         b1:e9:27:90:7e:42:12:2c:63:59:59:6e:b6:d1:66:55:4e:d7:
         68:8a:5f:9f:c3:9f:07:a6:10:84:59:d6:c5:9c:75:61:84:9f:
         57:d7:67:eb:0a:8e:66:d6:10:63:32:b9:0f:69:78:97:03:e7:
         45:23:49:be:f1:95:c9:56:be:93:30:8a:aa:5c:ad:80:17:c9:
         c2:03:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:56 2026 by rpki-client