Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File:                     gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier:          HWlYKruQMidhyPcyn+leQVdWsXNG3dsINi1ao9zkxzM=
Subject key identifier:   6B:7A:76:2F:50:38:30:8B:AE:28:B9:03:8B:D0:9E:72:B3:C4:6E:A4
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer:       /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number:          0102
Signing time:             Wed 25 Mar 2026 05:21:38 +0000
Manifest this update:     Wed 25 Mar 2026 05:21:37 +0000
Manifest next update:     Wed 01 Apr 2026 05:21:37 +0000
Files and hashes:         1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: L2mWT2YS/n25iRB+SfWyi9PUDYipNhZ0IUPeoIgHwxs=)
                          2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: faGM7P04DgY9+kePEKWNSWyG4kwQPN9Aqs15IpEWkN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
                          rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
        Validity
            Not Before: Mar 25 05:21:37 2026 GMT
            Not After : Apr  1 05:21:37 2026 GMT
        Subject: CN=69c370e1-b9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:eb:13:82:26:1c:cb:e0:df:49:9a:56:ed:
                    02:10:60:cb:fe:3b:5c:dc:ac:2d:47:29:7f:c2:9e:
                    47:f6:d5:ba:d3:41:09:49:06:74:81:17:bd:e4:06:
                    91:f3:d2:da:0e:8d:95:ed:28:30:39:8a:f3:5a:11:
                    b9:1c:26:32:68:2f:6e:4f:cb:94:5e:67:b3:25:94:
                    b5:df:a6:2f:58:a8:1f:5b:33:d5:46:2a:b0:e4:cc:
                    df:4d:f8:29:bc:4b:8f:0b:1a:dc:82:59:89:ca:2e:
                    a4:e8:8c:0c:a2:42:30:0b:4c:90:7b:64:8b:63:fc:
                    38:7c:44:a8:6d:71:b9:03:6b:26:ae:42:86:23:33:
                    67:c7:a4:e2:cd:b0:cd:43:95:f5:81:7d:bf:b9:31:
                    d1:59:99:3c:89:84:a9:5c:d8:b2:a6:f2:e6:98:b4:
                    3a:64:18:f4:9d:c0:c6:6c:79:bb:15:59:cf:72:e6:
                    96:62:41:bf:4b:72:8f:cf:4a:a2:d1:51:4c:22:f8:
                    27:e2:c6:2b:03:a4:bf:c1:9c:e3:d8:9c:e7:3e:99:
                    31:22:43:c4:0f:cb:3f:94:74:e2:15:a4:9b:75:12:
                    ef:12:72:da:52:ea:46:70:33:4e:90:dc:70:9a:1c:
                    21:12:f0:b9:f1:68:ad:a5:e7:57:c3:4f:33:97:87:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:76:2F:50:38:30:8B:AE:28:B9:03:8B:D0:9E:72:B3:C4:6E:A4
            X509v3 Authority Key Identifier:
                keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:54:43:3c:54:5c:6b:cc:58:4d:f7:b4:7e:1f:b4:d7:d0:
         3a:de:6d:89:0f:ca:1b:d0:e6:45:55:05:2c:60:db:99:2a:d4:
         d9:38:2c:68:c7:7a:94:d9:7a:87:16:5c:18:5f:cb:81:b6:56:
         ca:4f:c7:7a:a7:37:d7:ba:ac:c5:dd:1b:33:61:b0:91:d1:a7:
         05:78:20:82:68:51:99:a9:b6:5c:32:aa:29:38:c4:0b:66:2e:
         85:15:d1:53:b0:ca:4d:ef:3b:f2:4c:9f:2b:b9:9b:93:8a:bb:
         23:ce:d5:39:06:3c:98:73:47:dd:4d:f9:04:54:67:bb:a5:f1:
         53:73:16:ad:38:b4:91:ad:29:e6:87:82:87:dc:d4:0c:d2:03:
         39:c1:c3:32:ad:d6:83:55:a2:40:46:ce:f2:f1:1f:31:67:c5:
         18:ff:37:29:f7:35:07:17:c3:41:3f:59:dc:60:a7:5c:93:3e:
         d5:94:f5:f1:df:f5:ab:04:b3:05:0f:0f:bf:3c:c3:8c:5d:a5:
         45:cd:3e:2e:12:66:cb:9f:af:40:cc:ac:f8:14:7b:54:89:70:
         ec:de:20:61:dc:f5:71:2d:56:40:9f:f2:39:a0:64:af:61:df:
         84:cc:a0:45:c6:0c:ec:2e:1c:bc:b6:58:c1:48:c8:ce:f7:69:
         45:a1:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:07 2026 by rpki-client