Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
File:                     gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json)
Hash identifier:          XhuoYd627x92Vy/AQQE2wUeB19VjSOSYiSFGR/LFdyc=
Subject key identifier:   BD:50:B3:F0:B8:D4:8B:32:C6:87:3F:9D:AB:E1:38:A7:47:86:D4:EE
Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
Certificate issuer:       /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
Certificate serial:       0317
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
Manifest number:          0312
Signing time:             Wed 25 Mar 2026 00:49:51 +0000
Manifest this update:     Wed 25 Mar 2026 00:49:51 +0000
Manifest next update:     Wed 01 Apr 2026 00:49:51 +0000
Files and hashes:         1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: oqidXjpQdfJBAVUNYsvom9YNPLzaSIFD2HX9ssae3rQ=)
                          2: DE7835E0162A11F1B1AE06BC373D8C67.roa (hash: VrM8pfNcP99DuwnwC9hNDMdgumgio5P0sGAcdBWvDyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl
                          rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143A67, serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
        Validity
            Not Before: Mar 25 00:49:51 2026 GMT
            Not After : Apr  1 00:49:51 2026 GMT
        Subject: CN=69c3312f-2dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:69:c9:6c:d9:63:da:3f:43:1e:d8:ba:93:
                    d3:5e:e5:38:4a:d3:a7:12:ee:df:19:ff:78:ff:e9:
                    31:8f:ec:a7:6d:de:61:0b:09:86:4c:b5:49:c6:04:
                    37:1c:6a:d1:bd:ae:a4:b6:e1:b3:8e:bd:b7:13:66:
                    35:12:25:0a:3f:16:8a:1f:b5:be:ba:6f:82:5d:ae:
                    ce:d2:76:70:c9:d8:76:df:80:74:8c:ee:e3:9e:aa:
                    5f:9b:88:f6:c4:31:f8:4c:e9:4d:f4:aa:a9:86:1a:
                    37:3e:22:df:90:b7:4e:44:45:d6:77:51:e7:fc:85:
                    67:90:06:fd:28:12:93:75:66:a5:40:0c:6f:74:df:
                    9b:7c:df:98:a0:89:5f:2e:bc:f0:53:0c:4a:f4:88:
                    73:d8:5e:8c:43:04:3f:cb:81:c0:ae:73:93:55:66:
                    44:42:1c:ee:dc:ed:74:ed:8e:f9:e6:73:0a:e4:d6:
                    6d:0d:bf:3c:f4:85:b5:68:40:51:9a:01:7f:ea:43:
                    fe:83:97:c5:e8:be:f0:18:bd:0a:c2:97:9b:ed:43:
                    78:31:4d:bc:5c:29:9a:41:d5:a6:90:ba:c5:3e:8d:
                    ec:66:fa:81:41:89:2a:39:55:ec:cf:32:cb:ff:8d:
                    42:95:f9:a7:39:56:1c:a4:6d:0d:ba:38:f5:4e:a5:
                    cf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:50:B3:F0:B8:D4:8B:32:C6:87:3F:9D:AB:E1:38:A7:47:86:D4:EE
            X509v3 Authority Key Identifier:
                keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f5:22:ca:95:59:7e:ec:38:75:43:1c:9c:2c:b1:0c:c0:62:
         67:88:d1:32:9c:0a:ce:d0:0d:a7:0f:fc:0d:f5:f5:08:08:d7:
         8c:58:0a:b7:fb:43:9c:89:cc:ca:92:ff:de:d3:d2:cf:40:db:
         1e:66:73:f1:21:f6:30:6c:1e:dd:64:d7:19:1f:17:98:6e:68:
         be:5a:4c:03:1e:05:3e:18:91:1c:d9:55:a6:4c:80:4b:80:11:
         df:90:1b:29:e5:ce:55:10:22:74:f7:84:f9:b1:3a:9d:42:91:
         dc:ea:09:85:38:91:5b:05:ae:ce:81:02:5a:01:20:b0:c8:36:
         d5:34:b8:f0:fb:7b:6c:43:29:8b:92:18:e8:b0:66:a8:54:20:
         53:7c:35:48:02:d9:92:86:8a:56:8e:40:2c:71:b2:53:90:5f:
         3a:c3:27:a0:74:a6:68:be:ef:8b:d1:f5:91:49:96:16:af:48:
         f3:a8:c6:44:57:67:53:d8:bb:8d:1b:b1:94:75:57:96:7e:dc:
         5d:f4:06:67:e5:f3:72:f8:7a:73:52:ba:f1:8b:d7:08:1e:96:
         6b:cd:70:54:4e:ca:4a:3e:d1:ce:56:41:c3:22:6f:62:7d:ba:
         1a:2c:ce:4a:5b:de:7d:0e:a0:a7:f5:79:1f:1a:9a:3c:d4:98:
         3b:98:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:49 2026 by rpki-client