Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
File:                     gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json)
Hash identifier:          Xq9MrT/uzPVca1J60js7YAY2M3G90IY98jrV+muCqNg=
Subject key identifier:   02:C5:3C:C0:B5:D7:44:D0:7E:97:89:CD:BD:07:0C:8A:FD:C7:B2:3D
Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80
Certificate issuer:       /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80
Certificate serial:       0BC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
Manifest number:          0BBB
Signing time:             Tue 24 Mar 2026 18:47:33 +0000
Manifest this update:     Tue 24 Mar 2026 18:47:33 +0000
Manifest next update:     Tue 31 Mar 2026 18:47:33 +0000
Files and hashes:         1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: DqBiS/fBG4afpyZ+9fp+bzGhHk2QNJf8cZCY7DCGu80=)
                          2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: 4X3ObrBg443mSci6E+V0UQd/b/zW7MQqNF6LiZpBnXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl
                          rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3013 (0xbc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80
        Validity
            Not Before: Mar 24 18:47:33 2026 GMT
            Not After : Mar 31 18:47:33 2026 GMT
        Subject: CN=69c2dc45-d77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:61:ac:1f:f1:6f:be:33:c4:16:e4:a2:bc:
                    77:8f:d7:2b:ac:f3:44:26:3f:c8:0b:21:5e:4b:fa:
                    cf:28:86:04:1f:a1:c4:63:79:c0:fd:90:18:ae:5f:
                    f4:ce:2b:aa:5f:7e:f8:e1:b5:93:e7:ec:cb:77:65:
                    5c:5e:de:5a:ea:b1:06:ee:ff:58:6d:b5:5c:87:4a:
                    8f:73:67:a4:ba:2e:99:47:7b:45:4e:2d:b8:ed:ee:
                    cd:64:da:fc:18:88:f8:2a:51:78:85:57:97:25:ad:
                    ca:0d:24:f6:3b:8e:a5:b0:99:85:94:6a:9b:a7:bd:
                    dc:47:bb:8f:25:12:18:3f:42:b3:37:ff:79:ae:50:
                    a1:7d:1f:f1:59:e9:21:a1:1b:35:aa:fe:f4:c2:3d:
                    2d:91:c6:6f:e8:dd:0e:e7:4b:2d:29:c6:de:d3:e7:
                    e6:02:22:75:bc:94:79:9d:02:8a:d3:ed:f5:bf:1b:
                    01:9c:28:b0:81:5b:65:57:5a:b0:59:f2:6e:5a:39:
                    3f:8d:1b:78:76:05:f9:05:d5:71:5b:f2:02:66:38:
                    65:e8:19:67:c2:e0:29:6e:bd:c9:fc:ec:7e:fd:75:
                    57:2b:3c:0e:da:81:75:12:aa:58:e2:7a:e7:bd:5e:
                    5b:ce:da:11:28:2a:ce:c7:0c:55:d1:f8:ea:05:9b:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C5:3C:C0:B5:D7:44:D0:7E:97:89:CD:BD:07:0C:8A:FD:C7:B2:3D
            X509v3 Authority Key Identifier:
                keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c7:7f:d3:ab:e8:69:c1:9f:13:13:8e:e9:5f:b5:62:b0:f2:
         f0:aa:01:72:fe:b2:06:89:31:ad:8e:71:73:14:8f:17:71:f6:
         98:e3:16:8e:fe:0d:e0:5a:53:a3:f4:0a:2a:c6:ae:63:b7:e3:
         e5:ca:bc:b6:3f:c8:50:6d:4e:38:77:aa:56:d0:20:ed:84:9d:
         73:61:d2:d8:3a:ba:5d:64:f8:8a:4a:76:a5:bd:24:ab:99:83:
         76:1e:6c:a4:16:2a:32:a2:da:c7:d8:70:69:da:de:0c:12:0f:
         93:15:08:43:f2:e6:94:75:ec:8e:c6:04:8d:fb:69:29:eb:25:
         bc:e2:41:2c:4a:39:e8:6f:ff:ea:7b:cc:e4:3e:10:eb:c4:57:
         0f:f4:bf:b2:d7:ec:4f:22:ea:19:33:ca:5c:56:fe:1e:3e:61:
         30:2f:99:89:cf:8e:72:b6:ab:7c:08:75:4f:da:fe:64:1a:71:
         75:25:12:6d:a3:ae:7a:55:b7:46:13:4c:2b:65:3c:70:15:d6:
         d9:73:71:35:21:cb:a5:1f:9d:91:56:71:11:a0:32:20:df:40:
         01:d2:9b:c1:d8:8d:4d:27:b1:fe:63:1d:f8:c6:bf:90:1b:d2:
         5f:c0:b8:f3:b6:26:ad:17:4c:07:f4:6a:45:69:5a:e9:01:d9:
         90:ce:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:59 2026 by rpki-client