Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
File:                     Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json)
Hash identifier:          fK0YwrR3U/ZDNLoj7nSqcc++OLckCNRvm9J2I8Ih1CI=
Subject key identifier:   6A:3B:A1:33:F1:66:6E:8B:8F:90:E8:DD:88:D2:52:5E:E4:3B:9A:B1
Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD
Certificate issuer:       /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
Certificate serial:       0C75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
Manifest number:          0C67
Signing time:             Tue 24 Mar 2026 18:30:40 +0000
Manifest this update:     Tue 24 Mar 2026 18:30:39 +0000
Manifest next update:     Tue 31 Mar 2026 18:30:39 +0000
Files and hashes:         1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: kPShRorVe9MroctrzhlZJr44D8fniKnoHlkD9GfFfnY=)
                          2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: ZcISEGiaB/jFI6HeqS8u3lzztS1THprIXlb2DwXWRqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl
                          rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3189 (0xc75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
        Validity
            Not Before: Mar 24 18:30:39 2026 GMT
            Not After : Mar 31 18:30:39 2026 GMT
        Subject: CN=69c2d850-7a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:4a:a4:88:a8:17:39:91:62:93:e5:fe:cb:
                    65:87:1c:d3:9c:a5:b4:32:3d:1a:4f:1e:da:d4:f2:
                    8e:1e:61:15:7c:fe:4e:ea:2d:88:45:cb:ec:fa:ee:
                    cf:c0:33:67:d2:41:2d:15:62:4b:8b:ec:7e:db:a8:
                    60:c2:47:c7:25:29:f6:03:e9:ab:d4:2f:a8:34:58:
                    d6:8b:2a:ea:98:ac:0c:8e:82:12:d6:e1:a3:40:77:
                    62:d2:f8:b5:57:07:6b:ec:73:2d:0c:71:eb:a2:a1:
                    be:48:58:96:c4:1e:2a:47:05:52:a0:85:2d:a5:30:
                    a5:0d:ce:ee:99:9e:3b:ad:79:55:8c:c3:8b:7a:34:
                    ba:24:fc:63:27:ef:0a:9e:e5:c4:25:4c:8d:8b:e9:
                    77:7b:d6:9b:6b:df:58:82:73:95:b8:b0:60:b0:20:
                    ed:0d:71:3d:c2:11:22:34:cf:1a:2e:e1:4b:36:24:
                    dc:87:a9:8a:08:4c:f0:a2:c8:12:d8:00:2a:54:53:
                    8f:b9:e6:25:bf:71:88:74:22:82:67:f7:7f:18:6c:
                    be:c8:ba:a3:ff:b4:65:f4:56:21:a5:b2:3e:85:f2:
                    87:64:77:05:1d:9d:4b:3c:ec:76:8f:22:d6:6e:61:
                    d3:53:21:22:d9:d3:4a:8c:94:a9:9f:95:d4:87:2d:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3B:A1:33:F1:66:6E:8B:8F:90:E8:DD:88:D2:52:5E:E4:3B:9A:B1
            X509v3 Authority Key Identifier:
                keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:08:85:a8:4a:0b:57:46:77:5a:89:bd:cd:5f:5c:ef:50:df:
         f6:b5:1d:12:cc:58:89:ab:5b:07:79:91:ae:91:53:2a:f1:71:
         06:37:51:01:71:7a:f1:8c:43:ae:1a:54:fa:66:98:6e:85:5f:
         e1:95:e8:5c:bb:8a:2d:d8:8c:a3:75:c1:c1:b2:1f:67:b4:bb:
         b6:70:0d:7d:f4:e0:1a:f6:2b:93:d6:f0:57:20:00:cb:cd:c8:
         93:a9:4c:7b:0d:a8:fe:1a:2d:9f:a2:46:61:0d:61:04:59:47:
         6f:3d:fb:64:a9:03:c7:da:7c:80:29:bb:2c:1d:ac:b9:36:74:
         e2:35:31:58:a3:17:99:25:5b:4d:ba:05:e0:8a:05:a6:db:e8:
         67:41:6a:a7:53:fc:3c:56:10:03:e0:52:30:9f:1a:a3:b3:a4:
         04:cb:85:73:ca:b8:81:91:4a:b1:8f:49:77:f3:da:63:ec:4e:
         c2:d6:3c:d8:f3:7c:63:b3:47:33:66:00:34:d1:5c:6a:ec:48:
         fa:58:31:31:55:d8:9a:39:a1:22:5a:d9:61:2b:07:58:4f:e8:
         15:96:e2:fd:2d:7c:9f:bd:26:75:26:b1:17:0a:b1:53:ef:86:
         2a:bd:52:5e:dd:4f:75:f3:57:fe:84:6e:38:49:73:db:d5:8d:
         fc:be:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:16 2026 by rpki-client