Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
File:                     gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json)
Hash identifier:          7759Opt5GSM8db+9NAgVYCh/gdke9b3EKcjHsUtas7E=
Subject key identifier:   F9:07:81:1B:70:C9:F2:C9:CC:94:46:5B:AE:E3:9B:2B:C1:E1:4B:F8
Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
Certificate issuer:       /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
Certificate serial:       083E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
Manifest number:          0836
Signing time:             Tue 24 Mar 2026 20:39:14 +0000
Manifest this update:     Tue 24 Mar 2026 20:39:13 +0000
Manifest next update:     Tue 31 Mar 2026 20:39:13 +0000
Files and hashes:         1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: OPPMEtKya7i3gEGLgeoVe+dRduKvXsWDho3xPLbT5Yc=)
                          2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: RF8k/3negR21/g9b9yA9JjL4Ez0vyNRYqOU/AL80r3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl
                          rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110 (0x83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EF96, serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
        Validity
            Not Before: Mar 24 20:39:13 2026 GMT
            Not After : Mar 31 20:39:13 2026 GMT
        Subject: CN=69c2f672-c676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:0e:24:c8:14:63:83:2c:ef:c0:a2:b2:73:
                    8d:c5:90:40:a0:e6:30:74:42:c3:be:de:ae:7e:ea:
                    0f:16:41:95:3b:e7:c3:ee:db:c5:b6:ad:39:b8:9a:
                    06:30:97:10:72:44:a9:d0:bd:b8:53:32:3a:10:ba:
                    b2:51:0c:cc:4d:48:f8:c7:7d:f9:76:a7:1b:e3:2d:
                    79:ee:72:c0:52:37:eb:dc:5d:10:3a:5b:58:eb:a0:
                    e9:46:ac:33:2d:80:b1:0c:59:4c:a8:9f:19:03:4e:
                    8e:c0:8c:0a:ae:53:06:aa:cc:72:7f:91:4e:dd:11:
                    7e:86:e2:e1:d3:d1:df:ac:fb:3b:80:8c:ef:32:f7:
                    bd:9e:8d:e2:c1:8f:7b:c6:54:81:59:2f:2d:31:e8:
                    a6:25:4b:c1:90:20:2f:4a:00:df:0d:21:29:4b:2d:
                    77:0c:8c:18:88:61:56:a1:cb:51:00:e5:3b:ad:96:
                    7a:69:99:f8:0d:47:49:3d:22:3d:b3:a5:16:1e:9b:
                    fd:55:f5:54:db:a1:8d:5b:61:ea:35:b0:ba:ad:4a:
                    b4:d5:d0:ff:93:61:01:94:36:d3:54:1f:46:04:d2:
                    37:56:0a:8d:88:bd:21:4a:8c:5b:07:26:55:6b:57:
                    58:a7:cf:67:5b:3e:81:ce:03:88:80:26:94:5c:be:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:07:81:1B:70:C9:F2:C9:CC:94:46:5B:AE:E3:9B:2B:C1:E1:4B:F8
            X509v3 Authority Key Identifier:
                keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d7:a2:13:4d:3d:68:db:29:8f:e0:f2:f9:ed:ed:0f:95:60:
         7e:31:33:39:4f:fe:64:0e:0d:06:46:b5:03:36:82:3f:ff:a0:
         54:50:64:1d:33:10:c8:c8:fd:2d:6e:86:74:00:2b:d5:87:8d:
         a2:fa:bb:30:63:d6:97:a8:a3:dd:12:09:3b:97:26:a2:d4:55:
         26:28:44:ce:68:16:8e:ac:21:d4:2a:84:23:33:d1:b7:cf:4e:
         a1:a3:f1:ab:64:5a:e7:83:b3:58:99:9b:ce:14:80:7d:47:59:
         03:b2:9c:be:5b:06:ad:7d:63:c2:6f:70:c5:ae:6b:1c:d0:0f:
         c8:e8:b5:ff:91:a3:43:c2:fc:a4:d7:dd:21:6f:11:9b:8a:67:
         dc:0c:e6:f1:0e:5f:a4:26:e3:75:22:ac:e3:0f:95:da:00:b1:
         07:f1:07:49:64:d9:c0:39:a9:4a:ac:98:60:3b:87:b3:aa:50:
         38:63:a7:5b:22:57:e2:78:fb:32:f0:cf:73:c1:96:d5:76:28:
         a5:6c:fc:df:87:58:18:84:d4:1f:bb:bf:10:6f:3a:c7:66:b1:
         8e:d7:05:4e:bc:24:6e:ba:4b:57:31:14:be:f4:9e:ba:6a:57:
         52:96:36:56:13:e0:45:de:05:c9:cd:31:7c:b1:03:93:ba:00:
         43:d0:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:29 2026 by rpki-client