Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
File:                     1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json)
Hash identifier:          IZT0g9OeNTRDE4CCAEtjetwOGlvFMRYp6CSa4gYamT0=
Subject key identifier:   77:EB:8D:77:F9:21:35:4E:21:BF:94:E9:26:EE:A7:8A:0D:66:09:2B
Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
Certificate issuer:       /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
Manifest number:          0108
Signing time:             Wed 25 Mar 2026 05:16:26 +0000
Manifest this update:     Wed 25 Mar 2026 05:16:26 +0000
Manifest next update:     Wed 01 Apr 2026 05:16:26 +0000
Files and hashes:         1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: vL05ewu+rIh9SRiuB6XGh6U+GGXbBPzSjfn1dvpstLk=)
                          2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: V6hcLW3DIWJr5GsqXhQQoqs6tXkMxQGHQdAMhmhtdMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
                          rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
        Validity
            Not Before: Mar 25 05:16:26 2026 GMT
            Not After : Apr  1 05:16:26 2026 GMT
        Subject: CN=69c36faa-5d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:cf:1d:b6:bd:76:b5:02:79:f0:51:35:37:
                    d9:00:7b:2d:48:84:5a:7b:13:d8:82:80:fe:c4:49:
                    12:59:c9:5d:2f:0f:b7:b7:95:f0:dd:d4:43:71:dc:
                    25:0c:b4:cd:17:da:4a:71:31:ec:13:f9:2a:f2:3d:
                    9d:a9:d7:9e:bd:7f:1b:0b:24:fd:45:cb:63:97:41:
                    12:cf:9b:83:27:29:e4:d7:19:54:b3:e5:7f:a2:63:
                    2e:7e:7c:09:30:35:e5:84:cc:aa:f7:6f:44:3b:d8:
                    d1:e5:b1:30:b1:23:ca:ad:cb:73:78:5e:14:d8:8b:
                    13:b0:ca:a3:47:22:69:eb:63:41:0f:42:84:83:72:
                    bd:3b:21:33:08:44:4d:13:bc:d5:8b:22:35:a4:22:
                    9e:40:b0:09:0d:10:d8:b4:eb:22:9f:ce:4c:7a:1e:
                    50:de:7d:c5:f3:d2:e3:f5:62:d9:19:46:42:71:5a:
                    b1:c1:fc:83:3e:32:20:db:d6:46:f7:e7:70:fe:5e:
                    21:73:38:c4:70:5f:04:d2:9a:96:b9:0c:ff:dd:6d:
                    67:1b:d6:a7:69:f2:a4:be:e5:8c:b6:20:ad:67:f1:
                    56:fc:38:0f:82:f4:10:c4:34:3c:ef:74:e9:d0:b6:
                    6c:54:e9:96:c5:df:d0:ad:a7:6a:95:36:cb:6d:81:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EB:8D:77:F9:21:35:4E:21:BF:94:E9:26:EE:A7:8A:0D:66:09:2B
            X509v3 Authority Key Identifier:
                keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:9c:ce:e3:6f:d6:4a:b5:23:cc:92:34:5a:e1:e5:24:ab:cc:
         86:a4:0f:d2:75:84:67:60:63:09:ff:7c:dc:fe:c8:86:a7:c1:
         59:68:51:7a:ec:10:d6:44:67:29:a8:0b:39:d0:20:3e:a3:d8:
         c4:fb:85:fd:97:ef:f3:98:2b:47:3f:ad:b7:96:62:20:5f:df:
         36:6b:59:70:d1:ec:57:3c:cf:74:2b:54:eb:d4:57:00:a9:91:
         ef:98:f8:2e:92:27:f8:58:3c:cb:5e:6a:03:6f:dd:2b:7a:f8:
         e8:a8:06:23:fc:7e:84:dd:e8:e3:9f:21:d0:eb:fa:75:f0:a1:
         25:e1:df:49:02:0f:82:a6:5f:ff:33:50:ef:85:6f:ac:59:2b:
         a6:68:aa:c8:13:d7:11:70:19:d9:63:9c:c2:fd:8c:32:7b:bd:
         44:3e:01:33:fd:b3:bb:c1:7f:16:69:98:df:4e:68:b7:ae:5a:
         cb:83:40:6c:21:65:64:34:25:f5:7a:18:e6:a8:22:1d:53:35:
         fa:c6:aa:c2:d3:56:d9:c0:63:7c:ae:aa:0b:b1:3f:89:ae:3c:
         e0:63:a2:9d:ce:d9:b2:15:ee:db:59:be:62:95:49:86:ac:93:
         f6:e8:f1:a2:29:05:16:38:fd:2d:18:2d:8d:7b:d0:9f:4c:a5:
         c8:e5:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:49 2026 by rpki-client