Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
File:                     gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json)
Hash identifier:          Hjv9erAmrw3piyXBr1jg7PakXLT0H5ehZN3wNlFqq+8=
Subject key identifier:   58:01:4A:78:E5:44:3F:83:92:F3:92:38:11:58:38:2A:43:84:A2:D3
Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
Certificate issuer:       /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
Manifest number:          0151
Signing time:             Wed 25 Mar 2026 04:20:15 +0000
Manifest this update:     Wed 25 Mar 2026 04:20:14 +0000
Manifest next update:     Wed 01 Apr 2026 04:20:14 +0000
Files and hashes:         1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: I9BqAwZoU7as63IXWbEbKKf7LKUT296zLNaRmz2PguA=)
                          2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: Noab3uEs+xPwuZ2bTIDiOuTeew78OSESSBsHX4WRCNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl
                          rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
        Validity
            Not Before: Mar 25 04:20:14 2026 GMT
            Not After : Apr  1 04:20:14 2026 GMT
        Subject: CN=69c3627e-dd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:31:e4:d5:c2:ad:fc:20:f2:a0:dd:e1:b7:
                    b6:67:62:57:fb:b9:a1:5e:b6:af:48:27:b3:83:a9:
                    7c:95:e0:31:33:71:40:ff:02:30:b6:f0:79:41:6e:
                    db:17:df:d0:de:56:83:e7:79:d8:f8:58:a6:e2:4d:
                    32:f2:f2:e6:46:b5:6c:35:d8:09:f1:50:2e:f5:7d:
                    34:3b:b1:24:b2:f9:02:b8:70:8a:87:e4:65:24:74:
                    7c:7f:85:1a:d7:c7:ed:e4:85:fa:51:5d:e5:64:a1:
                    b1:ba:6f:ec:50:f1:04:92:70:5a:c9:71:c6:f4:c8:
                    df:37:a6:1c:e9:b3:6e:83:f1:bc:18:1d:4c:f1:3b:
                    57:52:80:ae:42:3f:fe:bd:47:31:98:a7:97:57:cf:
                    d0:8e:72:15:2c:79:45:86:e6:20:56:ae:c6:60:1b:
                    54:6a:63:27:73:cc:3a:41:6d:d5:d4:5d:a6:17:86:
                    f3:14:02:85:36:ee:ab:d5:93:00:24:02:91:54:74:
                    20:fb:ba:c5:83:e1:3c:ed:63:3f:b5:3b:9d:fe:6c:
                    c6:32:75:f9:3b:7c:3b:7d:63:d8:65:33:c7:58:75:
                    3c:5f:be:ed:a6:84:1c:76:99:fd:26:55:d6:aa:2a:
                    00:76:b6:61:2b:4a:0b:ea:6c:fe:fa:04:85:37:1f:
                    64:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:01:4A:78:E5:44:3F:83:92:F3:92:38:11:58:38:2A:43:84:A2:D3
            X509v3 Authority Key Identifier:
                keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d1:5f:c3:bb:74:9d:a6:35:de:76:1d:6a:71:40:a1:7d:9f:
         12:35:33:3e:78:54:d0:04:0d:d0:3f:c7:7e:b9:7e:0e:50:0b:
         7a:b1:35:4f:64:ff:d3:97:df:2d:b6:16:c3:85:48:26:43:31:
         96:d6:6c:b4:34:d8:6c:11:79:69:20:b7:b5:aa:4a:03:dc:6d:
         5f:2f:4a:88:2a:5e:cb:27:52:0a:21:c5:f2:44:52:b1:13:c4:
         9d:97:54:fe:11:37:63:a6:43:f1:36:80:66:75:15:2f:a8:7f:
         4f:5d:12:06:16:cf:57:c2:f4:c6:63:05:fa:32:da:ea:84:0e:
         da:59:f3:bf:4f:3e:2e:91:c9:13:92:46:1c:20:b5:8a:08:3c:
         3f:e0:b8:cb:f3:f0:5a:8e:20:34:2b:03:bf:0f:b8:ee:72:29:
         37:a6:a4:a5:e8:c2:f7:b2:af:3b:92:7a:68:f7:b0:0e:65:c8:
         55:03:84:61:34:16:28:f8:06:53:89:23:a1:a2:45:e9:5c:73:
         08:e2:e8:c2:a3:ff:e6:48:36:a3:a4:75:40:2d:73:8b:9e:58:
         0d:54:a1:97:21:92:e4:dd:65:91:b0:a3:fa:c5:21:43:1b:16:
         1c:50:4d:69:12:18:8d:4b:49:8c:33:30:76:b1:1d:6e:55:77:
         dc:17:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:17:28 2026 by rpki-client