Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File:                     GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier:          AU5YDTyXAHvf8duzYyBnvxuUT4d4KrOjZSHL5AKYZ+U=
Subject key identifier:   F6:1C:AC:9C:5A:E3:68:3E:77:DD:F4:B7:32:D6:CA:34:D4:45:F7:21
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer:       /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number:          BF
Signing time:             Wed 25 Mar 2026 06:20:18 +0000
Manifest this update:     Wed 25 Mar 2026 06:20:18 +0000
Manifest next update:     Wed 01 Apr 2026 06:20:18 +0000
Files and hashes:         1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: +C6jbjUorqzPByUsbOkff3++zIPX8quGCvOOU0/D/GY=)
                          2: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: EQ/dGxeAiZ6vHXkroDIcnJlL4m1F5+KIqXhx9EpVY3I=)
                          3: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: Yprm848X+Zm8Tq1T0Mdhgazd/B8nteAp3m1HTdOALK4=)
                          4: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: aIPk2IIOdSh9CObI9EP0QJCswO68I2tnkEvU/YLg9Zk=)
                          5: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: MfzN1k54/wkCiAendoymZC3ZEWqOCUIUy5Y1tmrtH+A=)
                          6: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: LAExrJE538PRX43tpAGuI2fnl3to7F90HEFOP88VoQE=)
                          7: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: KXmFtf/aIxVULwWU2AV8/gJ5ecdsYrZWDPGXWWMJwLA=)
                          8: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: wVIVQYayEMOatDoFauwoUEJLMsb5B+2FoO+m1LHPbJc=)
                          9: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: LgIHG0W8PH+BYBIWZChDxWTeWm+mE0UsFagnNkGmodQ=)
                          10: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: n9iP0WPrNjOJsc8gp31zfQ/gYNuAttaaJx8o5oGeAlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
                          rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
        Validity
            Not Before: Mar 25 06:20:18 2026 GMT
            Not After : Apr  1 06:20:18 2026 GMT
        Subject: CN=69c37ea2-0813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:e6:5e:e1:e8:a1:25:cf:75:6f:2f:ca:0a:
                    f6:8d:bd:ad:a0:e0:e7:de:81:36:b7:9a:d7:0f:0d:
                    5e:07:df:a9:ea:07:d2:06:9a:26:ed:68:37:c4:47:
                    66:62:22:05:91:f0:76:6c:58:f1:2e:a9:d7:bf:a2:
                    4b:11:55:0c:89:56:eb:f1:ff:54:11:29:90:5c:0e:
                    0c:78:e2:86:9a:40:8d:14:94:1b:2d:ee:b5:fa:67:
                    17:ad:a3:8e:9a:47:cd:6b:53:ce:ed:59:6f:74:b6:
                    08:04:dd:7a:f7:70:75:e7:fa:04:60:a7:1f:56:fa:
                    3d:52:6a:cc:4b:d9:2c:05:c6:2e:4b:c6:16:fe:d0:
                    74:12:14:12:f4:3e:38:e7:72:3d:6b:c2:04:89:1f:
                    63:60:dd:7d:6b:2e:4d:ef:8c:18:26:0d:e3:9c:b6:
                    9c:d9:67:70:85:78:85:13:a6:18:a6:9d:32:49:23:
                    b3:93:e1:14:4e:32:e8:43:bb:19:d2:60:1c:b2:56:
                    12:5a:ba:38:7d:02:db:70:c0:8f:3b:3c:7f:f2:28:
                    b9:34:7d:3e:63:1c:d2:83:b6:a7:da:f1:d2:85:89:
                    a9:56:82:b1:f6:34:ab:ab:34:e9:4a:8c:29:80:d3:
                    36:32:90:0e:26:2d:e9:b7:c8:2f:c3:eb:c3:40:27:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1C:AC:9C:5A:E3:68:3E:77:DD:F4:B7:32:D6:CA:34:D4:45:F7:21
            X509v3 Authority Key Identifier:
                keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:bb:a8:19:32:a2:7b:b8:ad:00:45:6a:d6:a7:1e:6a:38:a8:
         63:2a:c2:0a:a1:a9:ca:46:52:97:01:69:9c:87:5e:fe:55:e5:
         3b:7c:7e:3d:26:e5:50:a6:79:9c:ec:ba:73:0f:0e:8f:f0:f5:
         01:b6:57:1e:86:0b:b8:cb:fb:a6:f7:12:9a:fe:f4:16:b4:22:
         21:63:27:18:82:69:cf:67:a0:9e:df:1e:b9:7e:a8:c8:7c:3e:
         56:57:37:53:1d:e0:c2:06:95:e9:aa:c9:5f:90:62:98:1e:a4:
         5b:72:a4:be:8c:1d:da:05:1a:a3:d1:5e:62:94:8d:60:55:64:
         2b:e6:d2:97:28:05:0d:a1:7b:a5:5c:9f:85:5f:c6:9b:ae:50:
         92:29:53:9b:14:a1:18:c7:d7:74:49:ae:80:6b:aa:15:61:54:
         c1:7c:00:5b:3a:c4:db:cb:5b:70:ca:ba:3d:34:56:19:cb:b0:
         66:fe:83:26:61:fa:d5:e2:81:e6:0f:2c:cb:02:8f:6d:a4:eb:
         a7:08:65:e8:3e:de:b4:e1:50:59:ba:eb:93:c8:8a:38:e4:14:
         a5:b6:c9:4b:1c:cc:cf:28:40:52:99:2b:d7:c9:29:4d:81:e6:
         d8:35:50:87:b4:ef:ea:d0:cd:a8:ec:ab:1d:0c:19:97:82:5c:
         e9:da:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:38 2026 by rpki-client