Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
File:                     gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json)
Hash identifier:          jvuraOiDPC00nJM14dFd6zdNvZee0bFr9zumpvPgyIo=
Subject key identifier:   5E:F8:1E:F5:5C:3A:5D:62:DD:FF:53:82:6C:F2:90:9A:C4:3A:5D:69
Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
Certificate issuer:       /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
Manifest number:          D6
Signing time:             Wed 25 Mar 2026 05:57:30 +0000
Manifest this update:     Wed 25 Mar 2026 05:57:30 +0000
Manifest next update:     Wed 01 Apr 2026 05:57:30 +0000
Files and hashes:         1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: RF2nKoD4fXnaD4bbXEz71roxG94cv7uMbtdxbCivEzk=)
                          2: 89040F5A341011F0808A991DC4F9AE02.roa (hash: XSbMI+UlBWNVtMWApI1sBzS25fpV5xmpW9pr9KdQiGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
                          rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
        Validity
            Not Before: Mar 25 05:57:30 2026 GMT
            Not After : Apr  1 05:57:30 2026 GMT
        Subject: CN=69c3794a-cbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:c8:d5:3d:00:f6:1d:b0:81:b3:54:b8:4d:
                    b8:3c:69:c3:f8:a0:ba:a9:3f:ab:7c:f1:8b:e8:9a:
                    37:32:b9:11:c9:0d:94:50:cb:83:e4:74:51:bb:39:
                    58:15:ea:4f:4b:80:e4:81:d2:5d:4c:78:07:a0:82:
                    94:69:a5:f5:40:bb:e3:91:ec:85:76:17:75:22:a6:
                    0c:31:9c:b5:ee:44:ac:e9:4c:0e:e3:d1:b1:83:bc:
                    0c:5f:bd:2c:4d:7f:04:5d:f2:4b:72:c0:de:dd:bc:
                    ee:ee:14:c8:e3:40:98:37:86:5f:c5:e3:5d:47:57:
                    81:58:6b:3e:1b:57:b6:36:a0:fb:3e:62:61:a1:51:
                    fa:a7:e4:0d:44:8d:b9:79:77:62:cd:4c:23:32:73:
                    c1:3b:5e:89:d8:51:8a:28:1d:bc:4b:e1:59:04:a7:
                    2d:18:d3:15:a3:a3:6c:13:2f:56:07:ad:55:ec:82:
                    22:5e:7b:54:f9:dd:c1:02:37:de:09:69:4c:4a:6d:
                    5a:9d:58:db:94:ea:fa:ee:09:5c:b6:52:78:df:5b:
                    9b:ae:6c:bb:a1:ec:9b:98:d4:c4:6e:c9:0d:04:bc:
                    2e:6f:b3:1c:cb:c2:44:bf:d8:31:5d:4b:4d:99:f2:
                    dd:bc:91:cb:cc:af:10:e6:9a:dc:25:e8:00:e5:aa:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F8:1E:F5:5C:3A:5D:62:DD:FF:53:82:6C:F2:90:9A:C4:3A:5D:69
            X509v3 Authority Key Identifier:
                keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:5a:f5:c2:30:64:e6:e3:23:39:d9:3d:8c:5d:50:2c:98:
         1c:22:6e:a8:5f:ec:aa:f7:28:b1:a0:41:fd:b2:87:77:b9:64:
         76:4f:16:a9:22:05:89:a5:8f:e0:aa:e0:ca:64:d8:c0:cf:31:
         7e:52:1b:0c:a4:59:fd:de:eb:48:bb:67:38:62:c1:19:a3:4d:
         4a:25:d7:88:20:c5:79:ed:f2:74:da:c4:1f:0e:16:0e:94:00:
         57:9d:5b:b3:ce:42:50:b8:be:fa:42:f0:98:bf:13:ac:52:69:
         cc:36:ec:18:39:0a:1b:fe:a0:2a:66:9b:50:6c:b3:af:ec:ef:
         a8:1a:90:d6:4d:78:b2:19:fc:02:bb:da:c7:fa:06:f1:27:39:
         9c:9f:df:e1:9f:cd:7e:b6:77:5a:77:34:02:9b:08:af:66:51:
         f0:c2:c1:ff:99:6f:55:1d:6f:64:ab:42:ac:14:5c:60:c2:28:
         53:73:54:aa:a0:79:cb:ac:6d:9e:c6:dc:90:54:d8:3c:eb:11:
         38:9a:5d:8c:53:8f:3d:a8:8c:16:1c:e9:ac:90:d1:21:9b:c1:
         e2:40:81:e2:fe:63:0e:5c:cb:ec:6a:9f:55:ab:93:6c:d6:a7:
         8b:94:62:88:09:90:a8:40:55:8a:37:c1:fe:87:8e:cd:07:1f:
         92:08:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:49 2026 by rpki-client