Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File:                     gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier:          SGGeG81OoKfeJ8uWktsWTLmjRAosfmmEWB+pG1aISno=
Subject key identifier:   E5:76:43:4E:44:5B:6E:B8:85:09:C3:B4:6C:0D:B0:86:3C:4B:4E:48
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer:       /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial:       130D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number:          12F1
Signing time:             Tue 12 May 2026 17:03:35 +0000
Manifest this update:     Tue 12 May 2026 17:03:35 +0000
Manifest next update:     Tue 19 May 2026 17:03:35 +0000
Files and hashes:         1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: PQn5M0KKuGA+B/rfK+JBkdi9oINyqK8VQ1TCoQOruZw=)
                          2: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: tZukN75APhSScUoC/I4H/NT8GRXX5KYKrXgWcXFLnoo=)
                          3: 0E7E95E63C8B11F186364B569C833773.roa (hash: 5t+Odc3kzlHJOT49HQha5G542XKsnZRtShbX2b003G0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
                          rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4877 (0x130d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
        Validity
            Not Before: May 12 17:03:35 2026 GMT
            Not After : May 19 17:03:35 2026 GMT
        Subject: CN=6a035d67-5d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:9f:bd:7f:87:7a:b8:e4:e2:98:38:dd:a8:
                    9f:ec:be:5e:b5:3e:82:ef:e3:b3:cb:cc:51:a4:81:
                    ac:c1:0d:d8:6f:e0:d0:66:f5:aa:f4:6d:3f:02:5d:
                    e2:b3:55:64:9e:a8:a5:b8:1b:f2:5a:03:04:09:e9:
                    40:e3:5a:6c:df:b3:40:59:7f:ca:56:87:54:2a:5a:
                    85:bd:af:df:87:66:63:17:25:5e:59:dc:03:53:2b:
                    60:46:52:6d:aa:ff:b4:3c:f8:82:8e:97:ea:40:0f:
                    2b:bf:b9:74:8b:98:be:f4:f2:d9:2a:f2:8f:2c:8f:
                    73:11:d7:12:97:45:ad:18:42:ea:ec:63:d8:f6:9f:
                    35:58:8c:6d:15:0a:5b:66:67:15:fe:2d:f1:e0:b8:
                    2b:e4:75:02:9b:c3:c4:4d:00:d2:3d:5d:00:a4:c2:
                    f4:61:02:8b:67:e5:63:64:6d:a9:d5:91:23:ff:5a:
                    54:fb:01:c5:6d:96:f9:2a:f1:c6:ee:16:d4:cc:66:
                    81:bc:df:54:5b:fc:5c:15:ac:c4:92:55:9c:58:b0:
                    e5:56:43:be:09:3f:6c:da:3f:6e:60:cf:f2:d5:fe:
                    88:db:d5:38:af:af:45:18:89:8e:fb:ef:5b:31:8e:
                    ad:b9:68:48:a7:3d:6f:56:bd:e9:32:56:ed:fb:5e:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:76:43:4E:44:5B:6E:B8:85:09:C3:B4:6C:0D:B0:86:3C:4B:4E:48
            X509v3 Authority Key Identifier:
                keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:df:d1:e8:a0:c6:e2:b6:f8:5e:d7:b2:9b:62:22:6d:bf:c5:
         79:2b:20:0f:7b:c5:09:1d:17:a2:23:29:de:87:61:4d:0e:4a:
         76:76:cd:4c:39:b1:d8:86:92:5f:ff:f2:94:5f:4d:85:b3:ad:
         1e:3e:45:e0:f0:ed:e2:39:9b:35:9d:d4:e1:78:ac:10:6c:2e:
         1b:22:4f:6c:29:cd:7d:e3:75:fc:54:3d:60:4c:85:14:0d:9c:
         72:ae:c4:55:bb:59:92:ca:fb:24:06:08:6e:07:03:ca:f0:0a:
         3f:79:2c:dc:08:94:77:1e:6e:a5:30:60:7a:d0:c4:35:bc:c4:
         3e:e5:d3:11:60:b9:a9:bd:80:9c:1b:0a:b9:e9:1d:7b:d8:36:
         ee:f5:f5:fb:17:4b:82:33:7c:c2:1c:e2:4f:35:a7:63:19:b8:
         17:d3:99:1e:b2:6d:6e:60:8b:2e:36:6a:c0:a1:e0:ce:23:1c:
         00:49:fb:f3:a8:3a:b1:5d:16:18:11:26:5b:e0:05:51:dc:ee:
         d2:ed:37:5d:27:1a:7b:61:04:de:8e:21:e5:34:a2:eb:f1:8f:
         8b:9f:0e:50:71:94:6b:98:2a:87:5d:b6:c3:98:50:e7:56:d9:
         b5:00:c9:e6:ce:88:58:73:2d:be:84:6b:e3:80:b9:ed:f8:0b:
         80:ed:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:03 2026 by rpki-client