Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
File:                     GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json)
Hash identifier:          geiGuS0YvxVh8/30ikJzCp+//9AQSIxpgIQb7F3V78s=
Subject key identifier:   D4:2D:F2:44:5F:48:3E:7F:3B:E2:5A:16:E3:3D:00:07:07:46:82:14
Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE
Certificate issuer:       /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
Certificate serial:       351B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
Manifest number:          5665
Signing time:             Thu 26 Mar 2026 14:55:43 +0000
Manifest this update:     Thu 26 Mar 2026 14:55:42 +0000
Manifest next update:     Thu 02 Apr 2026 14:55:42 +0000
Files and hashes:         1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: zBUEdTgG51wcAAQhe0iF8FLbpCgBLXq545HJqxXZkCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13595 (0x351b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
        Validity
            Not Before: Mar 26 14:55:42 2026 GMT
            Not After : Apr  2 14:55:42 2026 GMT
        Subject: CN=69c548ef-3a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:79:35:07:80:fe:7b:85:e1:33:62:65:23:
                    5d:6d:df:45:e0:d7:d9:65:65:6d:10:55:d7:22:41:
                    89:27:ef:0b:6e:e1:22:1c:46:1c:f8:da:18:a9:a3:
                    a0:94:1c:d5:4d:8c:ce:79:74:27:6f:df:32:f2:53:
                    e1:ad:1c:3d:7a:a8:56:e8:6f:7b:ab:75:be:63:f8:
                    7e:b3:db:0b:9d:4a:14:6f:4f:f9:08:7d:9f:0f:81:
                    79:b3:79:4a:04:8f:85:77:7a:e6:96:26:31:7e:5e:
                    29:10:85:f9:18:7f:b1:17:9e:2d:d1:b4:a6:57:f4:
                    e1:a6:20:5b:fd:b9:10:4d:3b:e5:11:29:6d:f7:b4:
                    fe:aa:41:f7:96:06:7a:47:02:09:09:b3:a0:87:dc:
                    fd:28:af:95:e0:49:d5:7e:22:57:e3:e6:ed:ad:15:
                    d9:06:55:5b:a7:21:e2:30:29:fb:c1:07:b7:93:80:
                    ee:ef:37:17:39:85:05:f9:16:e1:91:1a:1c:44:12:
                    fb:70:fa:22:45:e5:7f:bd:e7:09:8a:8e:c9:62:4f:
                    b7:78:76:b6:5b:24:0a:44:aa:ad:40:8a:28:41:76:
                    bd:45:5f:84:01:e1:1e:f9:67:38:1f:f1:b2:7c:2b:
                    4a:e6:35:02:6f:5c:62:7d:3f:07:ee:a1:5e:08:0c:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2D:F2:44:5F:48:3E:7F:3B:E2:5A:16:E3:3D:00:07:07:46:82:14
            X509v3 Authority Key Identifier:
                keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:7a:60:d4:94:d4:31:2a:a5:f2:cd:70:f1:79:05:60:6f:3a:
         53:41:d9:46:14:8e:1c:ed:2d:29:b5:af:99:43:0e:46:07:f3:
         eb:08:22:a5:43:02:74:a2:55:8f:35:35:78:95:8e:f7:1a:6d:
         30:bd:cd:af:df:d9:b1:25:e1:46:f8:6c:31:ae:af:87:b8:47:
         ff:7d:c9:48:a8:d4:96:91:06:5d:08:21:8c:7c:45:67:fe:91:
         db:8e:da:df:a2:a1:44:67:50:5c:f7:f9:2f:56:f9:cb:4d:17:
         01:ec:19:ab:f1:81:a8:a5:d4:17:8e:02:78:db:e6:c5:9a:98:
         ec:40:f0:24:2f:8e:ce:0e:89:cf:53:0e:79:4a:65:24:b2:49:
         bf:f4:28:6d:b5:82:7b:0b:f9:09:8d:ec:70:50:0f:61:86:5f:
         18:13:7c:bc:16:1e:ce:dc:dd:d8:12:1c:92:34:00:01:73:b6:
         18:81:3a:7d:17:8a:fd:f2:82:6a:89:89:61:f3:57:ea:60:c2:
         e2:44:02:b5:42:ae:a4:41:2f:5a:65:a9:c5:4f:0b:3a:39:ba:
         e2:c8:5e:0e:60:e6:1d:02:c9:cc:86:10:58:fe:a3:0b:ef:de:
         62:f4:a9:a8:2f:f0:28:55:26:0b:cd:05:9c:e1:7b:d1:c7:2b:
         c2:e1:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:14 2026 by rpki-client