Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
File:                     gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json)
Hash identifier:          d4JBSHCWVUgponh+Tb5BUzLothB0zXYiB5vvmSgn4Ag=
Subject key identifier:   43:B7:75:37:8A:2E:99:62:40:BC:71:56:6A:3F:07:65:9C:E8:D9:CF
Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5
Certificate issuer:       /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5
Certificate serial:       0747
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
Manifest number:          073D
Signing time:             Tue 12 May 2026 21:50:27 +0000
Manifest this update:     Tue 12 May 2026 21:50:27 +0000
Manifest next update:     Tue 19 May 2026 21:50:27 +0000
Files and hashes:         1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: b/q2jKCYrVzyxTMvaumOGdcsFdk1ByYC8dI0UOZLdjc=)
                          2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: Bm3y0DJFCkO/S/0sT/0qvItblZkyKv9YD3bBQrpZv2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl
                          rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5
        Validity
            Not Before: May 12 21:50:27 2026 GMT
            Not After : May 19 21:50:27 2026 GMT
        Subject: CN=6a03a0a3-3a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b4:08:c9:18:ca:b6:0b:0c:ce:77:86:cf:63:
                    7b:35:93:80:c4:25:ef:d1:9d:73:98:e2:74:c8:ca:
                    ed:8e:cb:65:e0:4d:78:ea:25:2e:4f:f3:0c:70:c1:
                    dd:0b:50:7a:58:4b:e8:6e:64:85:77:32:ad:c3:8b:
                    50:52:4c:6d:41:7d:b8:5c:8a:bb:e9:2e:43:5a:93:
                    5a:92:0f:8e:84:dc:32:ef:3d:1c:92:c0:24:56:b1:
                    7f:6a:67:38:fc:b5:a2:8d:92:58:b8:12:3f:db:64:
                    b1:b3:74:e7:d2:d7:60:19:6f:4d:ac:2e:4b:8f:1d:
                    10:bc:22:59:12:d2:92:b0:d4:b7:91:b1:25:54:1a:
                    23:5d:16:b2:d5:3c:ca:9a:bd:10:51:8a:88:eb:7d:
                    83:ff:47:cd:c3:26:99:1c:3f:07:d8:80:93:b7:46:
                    3c:3e:88:06:4c:97:bb:1d:b9:b8:a9:3d:44:d2:c2:
                    11:ae:93:97:d2:7b:fd:64:40:f3:1d:ec:a4:ad:9e:
                    d9:03:89:77:bb:80:b9:60:a8:a4:91:5a:39:7e:46:
                    59:03:09:ed:f8:e7:f7:4f:8c:51:bb:37:ad:af:e6:
                    c8:07:fd:4d:5e:a5:fd:24:44:3e:b8:5c:88:57:b2:
                    61:cd:87:96:b5:8b:d2:15:0d:3d:94:36:ba:c7:75:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B7:75:37:8A:2E:99:62:40:BC:71:56:6A:3F:07:65:9C:E8:D9:CF
            X509v3 Authority Key Identifier:
                keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:76:64:29:8f:5b:ff:d0:de:c8:7d:cd:b7:25:aa:89:74:
         46:8f:31:db:e8:98:64:93:85:ba:a9:87:b1:f8:7c:d7:18:5e:
         00:f5:8d:22:6b:1d:82:8e:8f:70:35:43:2b:74:cf:4f:e3:a3:
         65:0e:69:a3:cc:de:b2:da:d1:50:e7:bc:2c:3c:37:1a:e4:32:
         d0:68:5c:1b:ed:8c:79:ae:78:b3:73:3d:2d:05:f8:3c:29:52:
         d1:cf:bc:b8:f4:3a:0d:e3:c2:c1:29:70:dc:2a:78:1d:a6:65:
         ac:40:48:dd:5c:ed:8a:39:95:54:9c:67:1f:af:79:01:c2:c1:
         0a:b5:71:c2:d3:1e:a6:9c:b6:60:6e:d5:c1:f9:66:f1:c5:32:
         36:35:5b:2c:cb:f2:32:40:1a:b9:8b:f1:69:af:7b:90:39:71:
         40:ac:a1:99:70:9d:20:fb:31:cd:e9:5b:31:70:2d:e4:b8:d0:
         eb:eb:15:a5:ff:64:05:65:38:69:be:34:0e:8d:1c:bb:c3:98:
         3b:dd:b9:3f:8c:6c:d6:ae:39:f1:41:76:cd:2e:87:6d:ea:8b:
         78:65:cc:06:33:09:32:be:56:98:78:08:11:95:00:93:7d:e0:
         de:b1:86:3e:01:99:ef:72:72:d4:ba:ee:af:79:7c:b0:77:43:
         ba:eb:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:31 2026 by rpki-client