Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
File:                     gCfg71TQC2H3E28JcZv89MRTNAU.mft (raw, json)
Hash identifier:          XkcB6gnhCJ5Hhh58SLg/C+snJT0tDRbIUwvaph53RJQ=
Subject key identifier:   3C:2C:58:CE:B3:8A:E7:C2:54:93:1D:43:AF:B0:87:63:2E:E3:0A:AC
Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05
Certificate issuer:       /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
Certificate serial:       3572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
Manifest number:          3560
Signing time:             Tue 24 Mar 2026 14:27:27 +0000
Manifest this update:     Tue 24 Mar 2026 14:27:26 +0000
Manifest next update:     Tue 31 Mar 2026 14:27:26 +0000
Files and hashes:         1: gCfg71TQC2H3E28JcZv89MRTNAU.crl (hash: rfe55n4GHUiS44tlFaKwu0wbhZHcfRTrrinoKFZB9Mw=)
                          2: B305D4F4D4D911F0990CAE1CC4F9AE02.roa (hash: WxWTWJ/XU+5a7F5CKHub9rL/f65J4kMT+zVAopSr/ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl
                          rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13682 (0x3572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
        Validity
            Not Before: Mar 24 14:27:26 2026 GMT
            Not After : Mar 31 14:27:26 2026 GMT
        Subject: CN=69c29f4f-c7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:b2:81:ff:d8:ad:4f:c7:ff:7b:8d:28:df:
                    d8:30:93:e8:2b:f7:bb:38:ae:be:22:21:f3:4e:d3:
                    c1:7c:bd:79:82:d2:2b:bb:32:ad:bf:24:65:ab:63:
                    1e:90:89:66:4a:a3:87:dc:81:b6:6b:0a:fc:48:4c:
                    c1:18:c9:54:81:f3:87:eb:03:f5:c5:18:63:cb:4a:
                    13:c6:4b:d9:62:8e:e6:60:af:52:89:ab:ce:af:8d:
                    ed:70:94:32:15:59:86:2c:43:91:4d:8f:07:67:d9:
                    50:f3:ef:bf:ce:4f:97:1d:be:0f:67:a2:d1:20:56:
                    2b:a4:fb:46:9f:63:4d:0d:af:9c:ee:83:49:0c:7d:
                    7c:5c:0b:52:9c:0b:9e:21:d2:ba:e3:9b:70:25:b7:
                    a5:30:51:66:23:dc:38:c2:33:01:6f:cf:df:6b:8c:
                    0a:e7:ba:88:72:8d:23:bc:87:27:3e:84:67:cc:26:
                    38:b4:f2:18:7f:b6:0c:2a:2b:f3:1d:f2:1c:a6:85:
                    d9:b1:d7:59:97:b1:1d:35:92:54:e6:5f:05:68:52:
                    30:d8:26:95:2f:f1:74:69:81:d7:91:1f:e5:0c:47:
                    8f:54:94:3f:f9:02:47:cf:9f:c7:8b:0b:41:ee:e4:
                    b9:c8:17:2d:ae:fd:b4:b2:f5:2c:f2:e4:37:62:96:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2C:58:CE:B3:8A:E7:C2:54:93:1D:43:AF:B0:87:63:2E:E3:0A:AC
            X509v3 Authority Key Identifier:
                keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:1a:97:88:07:3e:1f:23:62:09:00:0a:1d:da:70:de:73:
         6f:9a:42:fb:a1:f7:96:38:21:90:df:22:a4:d2:6c:e7:44:bf:
         6d:09:33:59:01:bb:bc:27:93:27:d3:f6:a0:87:c3:7e:e7:3f:
         9f:72:6b:69:77:af:e9:eb:cb:62:bb:05:c3:3c:fb:2c:99:ca:
         9f:00:be:eb:45:f2:32:f1:43:8c:59:41:b8:ee:a6:20:d0:4f:
         58:23:0e:32:97:20:ef:10:9a:89:24:fd:c8:2f:7d:e7:1b:a6:
         e9:7f:66:94:15:b8:9c:c6:fe:e7:82:11:c0:76:16:b8:1f:64:
         e1:01:4e:94:c7:a5:b6:9a:e8:61:ae:b2:11:e2:9d:40:2b:9b:
         fa:bb:c1:54:95:c9:0d:24:f5:c6:88:25:bb:d3:86:32:ea:e1:
         7f:9b:2e:2f:f8:c3:5c:3e:43:48:fe:6f:04:b5:7d:4d:5d:f5:
         66:78:ff:6a:e6:60:f8:bd:cf:96:ab:81:37:8b:54:74:c5:58:
         54:28:03:a6:59:34:a4:b0:ef:06:9c:93:eb:80:b1:d7:14:2e:
         0d:25:4f:d9:92:a0:93:e9:0b:62:9e:92:9d:2d:5c:10:b4:8c:
         30:9e:7a:33:ee:de:78:39:c4:82:43:a0:07:7b:75:f8:0c:e6:
         12:97:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:22 2026 by rpki-client