Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File:                     G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier:          G4ERlRUi6Qae22hJoDwucEzfK7p2XxFVbGRSR69D5xk=
Subject key identifier:   FD:08:5B:7B:DA:7E:DF:02:CB:F1:80:9A:D5:44:59:E4:C3:CF:E3:29
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer:       /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial:       1C47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number:          1C32
Signing time:             Thu 26 Mar 2026 16:11:57 +0000
Manifest this update:     Thu 26 Mar 2026 16:11:56 +0000
Manifest next update:     Thu 02 Apr 2026 16:11:56 +0000
Files and hashes:         1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: +HGL5ICJJTr1+0ziSOVY233/1GQG9rGAag1GFIuZMGU=)
                          2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: fv4oRIQ4Gxh8CoHiTKL/BcGQRnYE0nj0QiSPtWSrjAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
                          rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7239 (0x1c47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
        Validity
            Not Before: Mar 26 16:11:56 2026 GMT
            Not After : Apr  2 16:11:56 2026 GMT
        Subject: CN=69c55acd-c115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:1a:a0:50:56:2a:3c:4c:e4:2b:d3:43:66:
                    53:4f:f2:52:e6:b9:b1:45:34:2b:04:2b:aa:fd:ad:
                    28:82:8e:8f:5d:28:32:91:03:97:20:f2:20:3d:dc:
                    4f:27:94:80:e1:4f:12:1b:11:7b:1b:25:28:2a:aa:
                    bd:ee:95:ab:b1:b9:d4:d7:79:fe:8c:ab:34:68:f6:
                    9e:41:e1:bb:32:6b:84:8a:37:c8:60:4e:b5:75:7f:
                    f9:d3:cc:0a:21:0b:e9:59:d9:a5:b8:d7:f1:1a:20:
                    3d:83:5f:3b:8a:06:63:40:9b:b8:1d:27:4c:e4:18:
                    83:b0:2e:17:71:d8:ee:5f:4a:b5:ae:36:b8:6e:31:
                    ec:22:dc:db:bc:64:44:2f:80:a2:d2:52:9e:2b:08:
                    63:19:3a:13:0f:7a:76:89:5b:77:40:bd:f0:04:5d:
                    e9:cc:50:68:a9:ea:94:4f:52:40:02:a0:5f:a3:c7:
                    39:d1:dc:ba:bf:2d:c0:9c:5d:7e:32:97:be:25:77:
                    30:f0:7d:b5:02:9b:0a:27:d9:a3:5d:ed:4a:07:a0:
                    de:90:85:ce:1d:f4:de:ec:39:57:3f:f4:b5:cd:53:
                    7a:31:29:a6:01:b8:90:72:62:a7:05:10:5a:af:e1:
                    03:6c:21:bc:24:25:9a:3c:b6:0e:48:19:12:7b:f0:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:08:5B:7B:DA:7E:DF:02:CB:F1:80:9A:D5:44:59:E4:C3:CF:E3:29
            X509v3 Authority Key Identifier:
                keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:31:f4:2d:e2:a8:e3:a6:f3:5f:a1:d6:be:52:5e:ac:24:
         ff:ce:48:3e:13:f6:b0:f4:2c:31:2b:96:b6:82:56:53:be:cd:
         22:51:e5:8a:ed:5f:91:8c:ca:ee:82:29:1d:f7:f3:80:6b:1c:
         9d:d4:3c:40:78:73:12:85:72:98:dd:69:bc:31:24:49:50:6b:
         b1:3a:41:07:40:c1:36:b5:1a:ae:60:29:c7:37:ff:89:cf:34:
         e6:a8:81:27:e0:44:24:e8:1e:01:ed:b7:fd:a8:12:0c:a1:57:
         0e:7f:02:49:7b:12:87:df:4e:23:27:1a:b9:95:74:5d:7e:ee:
         fe:04:e9:c0:d5:80:75:6c:df:94:48:11:c1:ec:a4:44:a5:45:
         0c:ab:44:d6:eb:7b:dc:61:ba:ba:a6:d7:5f:c6:06:cb:e9:19:
         59:15:b7:db:32:0d:94:d5:15:15:6f:61:9d:ee:d4:ba:06:80:
         da:88:c1:9d:a1:b3:93:30:d9:a5:d1:72:98:45:f1:fe:41:8a:
         a5:29:80:30:6f:80:5d:a4:ee:78:f4:8f:fc:99:c1:08:5e:f6:
         3f:b0:52:75:ab:a4:c9:43:d6:57:50:7c:ee:99:e5:55:d1:38:
         26:d4:bb:b1:6e:9e:9a:e6:03:6b:e7:9a:eb:25:76:1a:bc:4e:
         df:63:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:32 2026 by rpki-client