Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
File:                     gyiT0KdSAaIToGRFUyA9Aac8-v8.mft (raw, json)
Hash identifier:          zcYGpjlw43RJKLzBwZu35cEDco6NPoP+t2M3ea2kX8o=
Subject key identifier:   72:6C:96:4A:34:D4:86:5A:BF:2C:3C:B1:BB:BC:12:87:85:5F:A2:34
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Certificate issuer:       /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
Manifest number:          85
Signing time:             Wed 25 Mar 2026 06:50:37 +0000
Manifest this update:     Wed 25 Mar 2026 06:50:37 +0000
Manifest next update:     Wed 01 Apr 2026 06:50:37 +0000
Files and hashes:         1: gyiT0KdSAaIToGRFUyA9Aac8-v8.crl (hash: PrbxK+ewmmLBAxzA1hX7xJCoLlFyWI3+aJd9f3PZKec=)
                          2: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (hash: R+yKKJFZUpnxPKJ79z1OaMA2OB1A9rsyasLFDhiY1WY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
        Validity
            Not Before: Mar 25 06:50:37 2026 GMT
            Not After : Apr  1 06:50:37 2026 GMT
        Subject: CN=69c385bd-d47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:27:c0:46:af:7c:a8:cc:89:f4:3d:d6:68:
                    57:ce:47:fe:6f:ac:bf:f1:8d:ee:ca:08:31:b8:3a:
                    ea:eb:3b:fe:43:c8:ee:f8:20:64:b5:ed:29:b8:e0:
                    57:e5:b6:28:ee:a8:ea:ac:95:49:ae:40:2b:b0:98:
                    97:ec:7c:05:ec:22:d1:a8:f5:4e:20:6b:ca:7e:26:
                    bf:a4:46:80:12:d3:7a:45:21:78:96:ad:7d:30:6d:
                    72:1a:5c:4a:40:ba:ff:4a:49:80:43:91:e4:86:e4:
                    8b:ac:cd:7f:fb:c8:41:79:d5:a5:f3:54:f0:11:f6:
                    72:05:66:06:e7:99:29:68:35:fe:12:94:b9:02:37:
                    e8:2e:3c:66:c5:99:55:e7:90:7e:73:c1:ba:ce:98:
                    0b:8d:a8:e4:a1:22:17:81:83:4d:98:42:e6:46:93:
                    47:5f:b6:1e:43:30:b1:0b:38:50:fb:4b:c9:53:90:
                    1b:83:c2:bd:dc:c5:a2:41:21:57:13:bb:a1:59:fe:
                    26:01:8e:90:0b:cb:07:7e:6c:16:29:a1:c9:b7:ea:
                    23:c1:e0:32:54:a3:97:ac:3f:99:24:cb:22:f0:59:
                    52:53:51:a3:cc:e1:cc:df:7f:32:6a:23:5a:59:22:
                    32:3e:67:9a:63:eb:da:1a:f6:15:4c:70:3f:e9:ef:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:96:4A:34:D4:86:5A:BF:2C:3C:B1:BB:BC:12:87:85:5F:A2:34
            X509v3 Authority Key Identifier:
                keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:10:79:80:7b:8d:32:d3:1f:55:cf:16:b8:f2:c3:60:30:93:
         42:42:ae:07:3a:fd:49:ee:27:66:cb:29:c6:2a:3a:17:51:69:
         1d:3c:a8:f2:05:95:a3:86:c7:30:17:12:d2:54:8f:f1:1e:a2:
         fe:6d:49:c9:c5:d2:81:ab:37:43:c0:2f:8b:7a:bb:47:4b:43:
         c0:be:f1:0c:bc:13:e8:8d:cb:19:68:d8:58:b7:c1:ab:2b:0b:
         2a:63:70:c4:c8:cb:62:9f:c7:b1:31:ad:1e:23:75:cc:a4:2a:
         57:19:a8:b1:8b:f8:60:2d:47:f1:f2:03:2c:8b:c8:fc:83:87:
         bc:eb:92:99:3a:58:f6:05:98:ea:3f:9c:cd:e9:30:ea:07:69:
         6f:e5:b0:d6:9e:02:5a:0c:d4:11:ca:74:a0:84:f9:1f:2c:c2:
         6e:9d:93:3e:83:96:b1:8d:77:f2:a6:ef:ca:83:3f:4e:9a:8f:
         2c:6a:a6:41:70:2b:ac:24:fa:55:ce:aa:04:6d:56:d5:fc:35:
         83:a9:1d:d9:e5:73:0b:53:20:04:28:40:7b:83:d3:bc:d6:35:
         9c:47:4f:2f:0f:88:fd:8b:65:ab:57:ee:38:1a:de:98:ba:32:
         92:ce:5c:af:a4:e8:11:ae:1e:f6:1b:d9:38:b5:24:da:cd:7d:
         c9:7a:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:40:57 2026 by rpki-client