Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          nzEDDoSTkPTdeZLX1EFrgwu0zoMs2+s4Wfy70PEZ9kw=
Subject key identifier:   68:84:51:4D:8B:B7:0F:1C:32:7D:F7:BA:66:97:AB:FA:10:5C:99:79
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       1119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          10F9
Signing time:             Tue 24 Mar 2026 17:11:29 +0000
Manifest this update:     Tue 24 Mar 2026 17:11:28 +0000
Manifest next update:     Tue 31 Mar 2026 17:11:28 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: ycBYb5Im0Y0aMvGA66TQ3tQJXhajJqQEmsD7q3q/UuY=)
                          2: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: PaYa3XqCNqlKALsec1HMQNqlcAxMErVMEmTN74jVBUA=)
                          3: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: adNVp+jeKpiI/DZRqFAXkjDO248rnrJta6jKv+gGFM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4377 (0x1119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Mar 24 17:11:28 2026 GMT
            Not After : Mar 31 17:11:28 2026 GMT
        Subject: CN=69c2c5c0-4bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:e1:b9:44:c6:a3:e1:b1:9e:03:b6:49:bd:
                    0c:74:15:6c:b5:5e:b1:1a:9c:30:e0:83:c4:5b:0d:
                    67:da:b7:d6:18:be:c3:86:d7:c6:c8:5f:b0:e0:ef:
                    37:65:a6:58:09:2f:c0:4b:a2:48:61:16:54:64:50:
                    2b:8f:3b:50:c5:24:af:20:c7:8b:ad:3a:42:5f:c2:
                    c9:14:c7:c5:fb:18:f8:c5:cf:54:3f:0e:2d:25:69:
                    3e:9c:b1:4c:2a:4b:cb:73:cd:9e:e5:d6:43:35:5c:
                    0e:8b:ab:ab:20:5c:c4:59:de:cf:8b:3c:d3:a2:92:
                    c3:7a:b4:9b:7e:4a:db:10:5f:cb:b4:a3:7b:6e:f1:
                    1a:a9:b8:b1:b5:0e:c0:9e:59:41:7e:e5:0c:25:8f:
                    ec:cc:55:9b:3f:31:67:36:93:fb:e6:57:fd:96:44:
                    7f:f2:e8:a8:5f:c6:89:8b:30:08:7d:91:58:58:a0:
                    dc:04:dd:9a:24:cb:2d:dd:a8:de:a8:ae:bd:d4:b3:
                    df:ad:7f:66:70:89:ba:f2:aa:f7:fb:33:78:23:27:
                    db:f6:fe:a1:d0:b6:cd:6b:3d:20:30:49:c2:38:91:
                    69:f1:19:a9:40:e3:3b:cd:ad:74:e2:f9:00:3c:d7:
                    b3:6e:3e:5b:6a:59:ba:90:b3:b1:d6:5b:21:f7:46:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:84:51:4D:8B:B7:0F:1C:32:7D:F7:BA:66:97:AB:FA:10:5C:99:79
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:ec:f7:0c:63:3d:20:00:62:b2:94:22:5b:94:23:64:17:
         3f:58:2b:aa:76:ca:c1:8a:20:b5:77:c2:42:79:0a:c7:38:5f:
         3f:ac:8e:60:77:31:bc:2c:2b:d2:e5:c5:fc:08:7f:98:30:c9:
         1e:10:c8:15:f1:3b:59:b6:6c:c1:17:7e:8a:75:f3:28:ee:2d:
         88:d3:e3:69:c4:25:05:3a:ef:b7:80:09:44:64:70:9e:59:3e:
         a0:1a:76:74:cc:93:d0:d6:17:26:5c:59:34:e9:4a:b6:a3:76:
         d3:26:6f:99:de:a6:57:61:da:c1:a3:0c:73:db:f0:d7:e4:25:
         1e:79:67:f0:ed:70:87:52:d2:27:06:dd:80:54:16:2d:12:75:
         9d:02:4d:08:59:95:3a:01:e2:59:0f:92:b2:ba:49:04:49:0f:
         a2:fb:31:f6:31:9c:95:b8:2c:0b:11:a1:99:73:96:f5:56:a0:
         7a:a1:25:da:de:dd:ce:25:a2:05:7f:c9:33:76:fb:be:76:4a:
         43:ad:10:77:5d:c3:11:45:9f:49:ac:44:5a:48:94:5b:f7:9d:
         8f:20:f7:10:11:2f:b3:b7:a4:71:78:ba:f4:6b:80:c1:c0:7c:
         5e:a6:d7:26:cb:00:d8:94:b1:62:80:1a:1c:0a:0b:a7:12:b7:
         47:85:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:32 2026 by rpki-client