Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
File:                     -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json)
Hash identifier:          kjyMr5xzBFJkU4gHvBUoCwoh8PX0VmhF1cHjxfautiM=
Subject key identifier:   D2:93:0E:BD:FF:11:9A:78:1A:23:D4:D8:5B:1F:44:2E:EF:D8:C4:74
Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97
Certificate issuer:       /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
Manifest number:          C0
Signing time:             Fri 27 Mar 2026 06:30:26 +0000
Manifest this update:     Fri 27 Mar 2026 06:30:26 +0000
Manifest next update:     Fri 03 Apr 2026 06:30:26 +0000
Files and hashes:         1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: dZZ9B44tApWggW30Wp0web9muD3GN05VHREn7mXrIE0=)
                          2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: Qkz+Ibp6urTz/gTtZx61VUtVTC7J2PthL9N5ik2a+uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl
                          rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
        Validity
            Not Before: Mar 27 06:30:26 2026 GMT
            Not After : Apr  3 06:30:26 2026 GMT
        Subject: CN=69c62402-532a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:93:08:25:26:ed:44:04:8f:12:c8:34:9b:
                    03:74:f0:70:5f:8a:b9:28:f6:14:2c:86:43:56:79:
                    a4:77:fd:28:9c:bc:40:2c:16:97:10:df:08:5f:13:
                    a3:0d:35:7a:67:43:06:25:ff:a4:88:14:1a:81:9a:
                    00:82:b3:0b:51:a3:66:0c:04:b0:a8:cb:c8:f9:85:
                    18:78:22:1f:88:a2:f4:01:24:f2:df:6d:d1:76:36:
                    e4:5d:42:bf:7e:18:9f:69:89:16:ad:b2:46:d7:7d:
                    aa:af:a5:f2:b0:f2:68:d0:5b:b6:21:7b:e3:47:92:
                    c2:3a:d3:3a:0b:a6:26:95:8b:73:8e:b3:98:44:49:
                    ec:0a:b4:4d:4e:e7:56:a7:87:26:c8:86:69:ee:17:
                    52:1d:79:c0:83:41:f6:e9:d5:28:e5:6f:15:27:60:
                    0d:e5:a9:88:93:d6:ce:7e:b6:53:cb:42:92:32:9a:
                    40:75:07:b9:07:78:4d:07:09:d3:86:d5:10:cc:2f:
                    df:ef:29:df:89:25:2d:86:73:c9:6f:56:83:3a:e1:
                    dc:b3:93:ad:ba:01:1c:0e:4a:cb:a7:a3:0a:8f:00:
                    50:d0:a1:a0:28:c0:44:0d:22:13:3f:59:25:cc:1e:
                    16:0a:b3:72:45:ac:50:e1:d4:88:a9:7d:82:1d:8d:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:93:0E:BD:FF:11:9A:78:1A:23:D4:D8:5B:1F:44:2E:EF:D8:C4:74
            X509v3 Authority Key Identifier:
                keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:28:69:52:8f:bd:a4:d2:b4:86:24:15:13:71:c1:89:8f:6d:
         ba:a0:c2:43:18:e9:f2:cb:88:2a:78:c2:19:b5:17:b5:b2:5d:
         44:82:dc:11:f5:89:cd:79:98:e2:17:93:0c:6d:02:db:64:83:
         7e:fd:89:6f:6c:1a:9d:b2:ff:c7:ff:83:d5:78:3a:16:98:55:
         93:b0:04:be:95:81:44:b7:06:a1:64:5e:da:18:75:b8:41:c6:
         43:fe:51:b6:44:9d:03:eb:2f:28:14:29:82:bb:cb:5b:ef:37:
         99:0d:c7:9a:c3:2d:6b:2e:bd:56:61:94:5d:e4:51:ac:bc:45:
         a3:d8:d8:ac:d3:21:d7:19:5e:cf:75:d8:24:e4:b2:cc:7b:cc:
         10:4f:57:3f:23:e3:43:52:36:63:66:99:38:9c:de:fd:ba:29:
         90:5d:3e:bc:95:02:dd:e7:83:b8:3b:91:2a:2b:06:d4:fc:d4:
         fe:92:45:02:49:a4:9b:fa:45:e3:15:fe:03:07:62:e5:5b:73:
         74:07:b4:24:ae:fb:7f:51:3f:8a:50:9c:34:e4:06:47:fa:06:
         3d:b5:0a:c4:43:80:6b:e7:ea:09:23:42:84:9a:35:f2:0b:59:
         b8:f3:89:15:64:97:5a:83:33:08:1a:a4:53:54:ec:a6:02:14:
         ba:41:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:44:17 2026 by rpki-client