Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
File:                     _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json)
Hash identifier:          9EohhhIqRnn+pgzcMPZIqzFa7Ok/s4AW3kMFpjbtWm0=
Subject key identifier:   AB:33:42:88:61:39:CF:7D:5E:80:A8:03:26:1A:58:51:0F:84:01:05
Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5
Certificate issuer:       /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
Certificate serial:       2789
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
Manifest number:          2778
Signing time:             Tue 24 Mar 2026 15:35:40 +0000
Manifest this update:     Tue 24 Mar 2026 15:35:39 +0000
Manifest next update:     Tue 31 Mar 2026 15:35:39 +0000
Files and hashes:         1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: xZEvz+k5MGpC3rPznq17rYDH5+1f+qGqRkRXcjxXaYU=)
                          2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: NdTxn+HasKfGOEbIN5yYPJ4JBQuKbqVM6GqJLCJsrzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl
                          rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10121 (0x2789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151C9D, serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
        Validity
            Not Before: Mar 24 15:35:39 2026 GMT
            Not After : Mar 31 15:35:39 2026 GMT
        Subject: CN=69c2af4c-3637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:3d:4e:d8:26:41:72:2b:13:5a:63:41:a4:
                    61:23:da:5d:81:0e:48:4b:73:dc:32:ef:f1:e1:ad:
                    c7:84:7f:3b:62:a6:ed:c5:93:be:8a:58:d2:80:8f:
                    90:42:22:f8:88:50:2a:04:8e:6d:5a:a2:36:61:d6:
                    90:88:6e:d3:09:1e:6e:46:f6:25:d7:c3:37:51:4b:
                    48:b6:a7:1c:0f:53:c1:72:e5:bf:48:65:55:77:57:
                    7c:8c:d9:e5:c4:5d:69:1d:7b:47:01:82:9b:1a:d5:
                    12:8f:24:89:4c:9b:b5:cd:34:01:8d:1a:88:12:ee:
                    05:55:d5:36:4f:7e:d4:84:81:0a:3d:f0:35:6f:d8:
                    8a:e4:58:06:bf:8d:0a:00:d2:86:4d:22:bc:2a:f8:
                    cb:8f:20:8a:1f:0e:06:b5:dd:57:1e:20:d4:65:e3:
                    6e:2f:97:76:5d:37:5b:29:d2:85:a2:c0:df:41:48:
                    39:25:98:e2:1a:17:56:46:df:a4:b7:ef:25:6b:88:
                    5c:69:29:61:85:d0:c2:aa:87:7e:95:5f:69:cc:1a:
                    4c:c8:79:51:47:01:41:f0:10:8d:c1:ef:33:8c:cb:
                    ca:67:81:95:42:43:30:5a:6e:e5:7f:10:b8:2a:4d:
                    17:af:ec:c1:e5:fb:e8:dc:92:e2:13:36:8f:3d:70:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:33:42:88:61:39:CF:7D:5E:80:A8:03:26:1A:58:51:0F:84:01:05
            X509v3 Authority Key Identifier:
                keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b2:ad:35:0f:41:3b:f0:62:26:1b:b7:b8:e4:09:19:c6:14:
         b1:c1:a4:f6:3f:bd:0a:56:a5:7c:96:00:2c:b6:a3:78:c9:e1:
         15:72:2b:3a:38:9b:0a:f9:e1:35:5f:3e:58:be:4b:f0:82:45:
         41:6e:9e:ca:2b:7c:83:35:34:be:de:03:ea:3f:e1:ba:f3:ed:
         5c:68:b1:fe:d7:7b:8e:ba:80:aa:26:38:6a:72:84:16:69:ac:
         6f:77:0b:cd:e3:f4:17:11:c0:8b:7c:82:2b:98:57:ba:c4:9a:
         c1:a0:5c:c5:87:f2:58:40:35:c6:90:18:7e:c8:fe:6f:8f:ff:
         d0:7d:27:77:03:03:52:28:27:52:b2:92:2a:92:87:9b:cb:d2:
         01:a1:9a:12:cd:8b:1d:4b:de:5f:03:9d:ad:58:38:d6:5e:6b:
         e4:f5:73:20:fe:2b:0a:42:86:b6:c5:df:af:20:34:89:c6:43:
         86:ee:9d:b9:5a:47:9e:96:75:62:17:9b:ed:20:37:83:ee:8c:
         f2:87:f9:71:61:51:ee:7c:8b:a8:44:cc:1f:ae:20:b7:73:85:
         1d:c0:ed:f0:e4:ba:fa:73:f8:a5:57:4b:85:2f:bf:53:c0:1a:
         b8:57:0e:5c:6e:8d:00:44:ba:87:b6:b2:28:fe:62:5d:52:bd:
         02:35:c3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:06 2026 by rpki-client