Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File:                     gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier:          /bzIGUbnL7k7x61DY6FNxjBQph1OXZGJ4tsggJ9h8Ns=
Subject key identifier:   42:44:88:E5:5C:89:1F:C7:1B:35:59:93:19:23:08:18:BA:CE:42:36
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       0735
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number:          0702
Signing time:             Tue 22 Sep 2026 21:56:13 +0000
Manifest this update:     Tue 22 Sep 2026 21:56:12 +0000
Manifest next update:     Tue 29 Sep 2026 21:56:12 +0000
Files and hashes:         1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: adY1/tcWom2LQ+udTzjFrY2BRu7C4krJhgqiIY1TAZM=)
                          2: A6C94076624711EC9B815772C4F9AE02.roa (hash: dju0CNTYXThmKrA0e4pebqeIBKSRlwEicu9HpaViXJE=)
                          3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: fMMz+0pPzt4f7JJCwdRoZPgQjZkf7Cl5Iy84Bz8x9r4=)
                          4: 899A5138691611EFBED13942C4F9AE02.roa (hash: M2rKB/SETm64+KuJixRJ1nMhhLrqEJUPbxUEZ6z7VDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Sep 22 21:56:12 2026 GMT
            Not After : Sep 29 21:56:12 2026 GMT
        Subject: CN=6ab2f97c-4fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:c6:b7:61:cb:64:16:08:4c:a0:c4:3a:05:
                    40:fd:c5:dd:19:87:9f:3c:92:ca:ce:ea:3e:85:2f:
                    55:d1:da:f3:7a:27:f7:ca:2e:6d:dc:83:9b:0b:9c:
                    0c:9f:d7:61:0a:08:9b:54:3d:7f:5a:24:ec:35:7f:
                    bc:3b:2f:17:63:4b:b8:03:3c:88:bf:8b:3a:6f:b0:
                    9d:59:d5:91:fc:57:b6:d7:2b:82:63:46:60:fa:35:
                    05:e7:7f:9e:1a:48:18:60:41:91:2b:f5:1e:3c:24:
                    71:41:e3:31:dc:3b:75:d5:bc:95:ab:0b:f8:17:51:
                    f0:df:41:40:b1:67:d6:5e:57:b5:b8:2a:11:cb:2c:
                    6e:8a:72:56:48:0e:d7:50:96:34:ff:18:5c:de:19:
                    b2:4f:94:d1:d1:12:17:db:6c:64:b9:dd:a0:4f:f9:
                    27:f8:b3:5e:2b:76:8c:7b:02:1b:ab:77:19:ce:f6:
                    f4:8d:4a:c5:bb:66:ef:39:00:49:af:c3:99:85:95:
                    fa:03:b2:63:6b:31:a7:30:3c:5c:12:33:8e:9e:9d:
                    16:11:88:99:88:2b:b8:e2:42:97:aa:d3:81:0e:f4:
                    16:de:57:e9:ed:1e:fa:5b:35:05:8f:e5:7b:d7:8e:
                    be:c5:17:7f:ca:ed:cc:16:77:3b:16:59:5e:17:66:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:44:88:E5:5C:89:1F:C7:1B:35:59:93:19:23:08:18:BA:CE:42:36
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5c:ae:e4:9d:29:19:4f:10:69:45:99:61:88:be:91:4a:5f:
         32:aa:10:61:84:c4:b4:c9:73:97:6e:6f:50:59:73:a8:40:7a:
         d2:57:97:fc:fc:72:d9:6f:85:ed:ee:3a:ec:74:43:e0:f0:4b:
         15:b9:44:80:2b:4f:e5:9d:15:48:f9:36:2d:da:99:f5:2a:65:
         63:97:25:a3:3b:fc:91:bf:fa:c7:92:17:b0:98:49:ab:02:34:
         9b:8e:23:1c:47:61:cd:0a:45:dd:64:0a:6b:66:f8:cf:eb:6b:
         e1:c6:3c:90:f6:c2:26:5b:56:2a:8d:46:4b:db:58:cc:cd:94:
         09:5f:2d:cc:e4:ee:cb:a3:ec:ef:72:56:11:dd:6a:ec:71:ce:
         33:26:06:f8:b4:bc:d8:00:a3:be:9a:de:6f:51:de:0c:59:a5:
         17:0d:93:5d:c7:67:85:f3:13:6b:6a:44:a0:df:37:32:c5:45:
         20:9d:00:51:2e:3d:85:d0:25:90:49:63:fa:33:06:67:e4:18:
         33:84:5c:3d:da:18:fb:8a:18:41:19:c5:fc:dd:cf:50:7d:3f:
         ff:42:1d:2b:de:2e:0b:ce:a8:d4:a8:c9:f4:33:3c:b3:06:99:
         a0:59:28:ee:37:b2:da:01:80:15:6b:19:b7:10:4d:c6:39:41:
         93:db:89:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1
RDk0MDY1MDAwHhcNMjYwOTIyMjE1NjEyWhcNMjYwOTI5MjE1NjEyWjAYMRYwFAYD
VQQDEw02YWIyZjk3Yy00ZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogzGt2HLZBYITKDEOgVA/cXdGYefPJLKzuo+hS9V0drzeif3yi5t3IObC5wM
n9dhCgibVD1/WiTsNX+8Oy8XY0u4AzyIv4s6b7CdWdWR/Fe21yuCY0Zg+jUF53+e
GkgYYEGRK/UePCRxQeMx3Dt11byVqwv4F1Hw30FAsWfWXle1uCoRyyxuinJWSA7X
UJY0/xhc3hmyT5TR0RIX22xkud2gT/kn+LNeK3aMewIbq3cZzvb0jUrFu2bvOQBJ
r8OZhZX6A7JjazGnMDxcEjOOnp0WEYiZiCu44kKXqtOBDvQW3lfp7R76WzUFj+V7
146+xRd/yu3MFnc7FlleF2YSuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJEiOVc
iR/HGzVZkxkjCBi6zkI2MB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw
MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81
TXNDU0dDUUh1SkJkbEFaUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVVyu5J0pGU8QaUWZYYi+kUpfMqoQYYTEtMlzl25vUFlzqEB60leX/Pxy2W+F
7e467HRD4PBLFblEgCtP5Z0VSPk2LdqZ9SplY5clozv8kb/6x5IXsJhJqwI0m44j
HEdhzQpF3WQKa2b4z+tr4cY8kPbCJltWKo1GS9tYzM2UCV8tzOTuy6Ps73JWEd1q
7HHOMyYG+LS82ACjvpreb1HeDFmlFw2TXcdnhfMTa2pEoN83MsVFIJ0AUS49hdAl
kElj+jMGZ+QYM4RcPdoY+4oYQRnF/N3PUH0//0IdK94uC86o1KjJ9DM8swaZoFko
7jey2gGAFWsZtxBNxjlBk9uJkQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:10:38 2026 by rpki-client