Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
File:                     gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft (raw, json)
Hash identifier:          ZPUDSO0/DC59U0vMnDD9ZZ/G+GOxpiVAtUQT1kPhtjQ=
Subject key identifier:   59:FA:73:EE:0F:C4:9D:02:34:9C:3B:26:D4:92:A1:C3:97:D9:BD:C5
Authority key identifier: 80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95
Certificate issuer:       /CN=A915D8E2/serialNumber=8060505633934E4AC90717B23094DF98456ABE95
Certificate serial:       0812
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
Manifest number:          09B1
Signing time:             Tue 24 Mar 2026 20:56:05 +0000
Manifest this update:     Tue 24 Mar 2026 20:56:04 +0000
Manifest next update:     Tue 31 Mar 2026 20:56:04 +0000
Files and hashes:         1: gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl (hash: gzZy9oA6+R4R6qazjnGoHyxHQBVWF7+Zw58LBdrVt5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl
                          rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8E2, serialNumber=8060505633934E4AC90717B23094DF98456ABE95
        Validity
            Not Before: Mar 24 20:56:04 2026 GMT
            Not After : Mar 31 20:56:04 2026 GMT
        Subject: CN=69c2fa65-a3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:66:ee:0e:2d:9e:a8:02:59:ce:6d:43:aa:
                    10:0a:b4:72:41:1a:c7:57:2c:52:12:32:00:5b:84:
                    4d:ec:e8:6c:86:23:9b:aa:64:a5:66:0e:e0:52:66:
                    bc:bd:a9:18:0d:6d:fd:a0:06:c3:a1:55:a9:06:99:
                    7f:ef:be:f5:64:b6:1e:ee:9b:62:7b:ae:b2:c9:a8:
                    5c:fe:99:88:44:71:bc:25:1e:30:45:a4:cd:59:77:
                    b5:79:34:e9:27:66:86:9a:5d:85:e1:ec:e0:50:48:
                    91:06:b7:fe:7c:14:85:b3:ab:8e:d2:cd:13:ae:c7:
                    91:fe:82:c0:8a:29:61:a4:75:aa:eb:7e:9b:b9:57:
                    84:56:e3:45:bf:ea:54:48:26:c0:ca:ba:62:3a:cd:
                    f2:31:ea:5a:67:2a:a6:99:9a:ea:2e:41:78:fd:cc:
                    25:3d:f7:bd:14:01:fe:f1:b9:c3:32:d0:42:6c:5b:
                    a5:d5:41:a5:b9:c2:b9:44:63:d6:d8:db:39:d7:c8:
                    4c:c1:e7:d6:9c:e0:01:c2:c6:08:9b:d9:14:d5:f4:
                    56:94:e3:09:3d:b1:47:18:a5:ab:74:5e:c5:de:37:
                    5b:64:a2:0c:b8:93:1d:6d:69:6f:24:63:ba:14:fc:
                    75:a0:fc:e8:a0:5f:a7:04:73:ec:8d:1a:c3:66:5c:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FA:73:EE:0F:C4:9D:02:34:9C:3B:26:D4:92:A1:C3:97:D9:BD:C5
            X509v3 Authority Key Identifier:
                keyid:80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:29:ca:48:39:af:c2:00:97:e7:b2:fc:ef:37:00:4d:63:06:
         e2:42:27:9f:6b:7b:ae:d2:c5:45:02:97:8c:9b:b1:91:cd:bb:
         77:c0:04:e4:07:52:31:84:8a:77:7b:6a:07:fb:87:86:d7:08:
         8b:36:7f:cb:ba:5b:5a:9b:b6:cf:21:6b:08:1e:8e:a5:8f:56:
         13:a3:ad:87:92:c1:fa:6e:26:71:1e:ae:32:6a:f3:03:81:dd:
         d5:67:a2:72:1a:8a:9f:78:89:cb:b8:a9:1f:9f:8d:92:5b:be:
         78:68:22:85:02:a6:2f:71:21:25:18:54:2c:a0:06:20:df:83:
         f3:54:e9:f2:40:0b:13:e8:94:9a:77:1a:57:82:a4:4e:6a:67:
         6c:f1:35:c8:f9:6d:35:6e:fc:d1:3b:79:5f:da:be:39:be:57:
         b2:72:eb:e0:56:34:63:ae:81:f1:3e:ee:81:d9:cd:e9:d5:b2:
         9a:92:88:ed:85:0e:3f:28:35:2e:2a:fc:54:c2:1d:b6:76:ac:
         fc:e3:0a:67:5a:d6:ec:85:44:a1:01:f5:5f:37:2b:d7:26:24:
         e1:cf:b2:4c:9f:03:2d:0f:e6:d4:fc:12:15:02:fd:3e:ec:0a:
         91:75:81:52:da:08:a1:b2:f7:9c:48:7f:fb:56:18:19:06:76:
         57:04:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:26 2026 by rpki-client