Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft
File:                     G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft (raw, json)
Hash identifier:          Tup/hK+HAvv9U23uQgA14O9e+F9YV2Bk7dptu9ZiWyY=
Subject key identifier:   20:04:10:42:D5:EB:52:3C:7A:0C:D9:B2:69:B7:D6:BC:BD:67:BC:3B
Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47
Certificate issuer:       /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47
Certificate serial:       0C64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft
Manifest number:          0C59
Signing time:             Sun 01 Mar 2026 23:26:09 +0000
Manifest this update:     Sun 01 Mar 2026 23:26:08 +0000
Manifest next update:     Sun 08 Mar 2026 23:26:08 +0000
Files and hashes:         1: G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl (hash: 1yIcLpTelt06WvdYUa2Iwk0P59KjS6395rlNkm7/h40=)
                          2: 53409F861D9C11EAA3FD402FC4F9AE02.roa (hash: +93w0+gECKsPxfT8GgCs4EFDA/kceHJr+UZbAJ/I5oE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl
                          rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3172 (0xc64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47
        Validity
            Not Before: Mar  1 23:26:08 2026 GMT
            Not After : Mar  8 23:26:08 2026 GMT
        Subject: CN=69a4cb11-d31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0a:c0:b5:ab:97:42:40:13:ca:b3:52:73:ef:
                    1b:26:d2:2c:09:95:15:9c:81:bb:54:f6:cb:d8:12:
                    f5:8e:f6:92:78:24:4f:e7:50:c2:0f:0b:2c:cf:49:
                    38:59:58:69:63:e5:56:b4:a3:9b:ce:0b:88:99:e5:
                    5c:0c:3b:e6:06:e0:82:ee:94:a4:8e:71:07:b7:55:
                    bc:03:73:1f:87:25:86:66:8d:49:c6:84:67:20:e3:
                    f6:07:c0:7d:8f:8b:63:43:61:a6:a7:a2:8a:be:b3:
                    09:6d:5d:e1:46:b2:7a:35:7f:46:f9:35:be:bd:91:
                    60:b2:7f:c5:99:e4:76:26:83:6f:5a:c3:00:01:d1:
                    4c:c0:fd:9e:4b:9a:32:70:e1:cf:04:2a:2d:55:fe:
                    ad:c8:2f:b8:45:b1:3b:97:4f:e8:82:3c:fa:79:5c:
                    de:6d:e5:b9:50:18:dc:1c:31:91:71:92:e8:0d:74:
                    d1:6a:26:ad:5e:a2:97:5b:31:06:b6:47:25:77:da:
                    ec:b6:58:e3:f6:d8:3e:bc:14:28:0d:3f:f4:bd:aa:
                    6e:b2:40:f7:c3:ea:a9:11:a4:93:0f:57:55:2f:61:
                    e4:32:90:77:44:9d:f2:8e:0d:43:33:e9:15:12:0f:
                    ab:59:ee:95:bf:6c:7a:c9:f7:d6:b1:cd:a3:a5:15:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:04:10:42:D5:EB:52:3C:7A:0C:D9:B2:69:B7:D6:BC:BD:67:BC:3B
            X509v3 Authority Key Identifier:
                keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f2:6f:09:ee:64:de:2c:2c:d9:55:8d:cc:35:68:7b:29:68:
         d8:28:2c:0e:10:72:47:2d:c0:55:1e:fc:ef:a6:95:ee:cc:34:
         cf:ee:b6:4f:c3:60:2f:be:da:ad:fd:41:a7:43:51:a1:13:57:
         f4:22:aa:32:64:6a:5e:ba:85:6e:1b:34:d9:ec:6b:8d:89:7d:
         5b:84:d2:14:0b:49:9e:4e:2a:1e:cb:48:62:36:f9:1b:63:e0:
         f6:c1:2e:48:cb:ab:04:4f:84:92:8c:ea:33:97:f4:38:06:26:
         b2:94:ac:19:da:87:03:ea:fa:91:58:3d:33:f3:6b:62:c0:85:
         2e:69:ce:de:56:32:d7:93:8b:39:92:b9:63:ef:91:48:68:5d:
         56:8c:5b:ad:3e:ee:77:d3:c3:71:2e:0a:62:ca:eb:e0:73:e3:
         d0:82:dd:4b:73:4d:cc:c0:a2:94:54:e2:d6:d5:04:6f:74:da:
         df:3f:bc:cd:62:de:3a:4d:53:b7:3b:1d:64:57:62:05:95:05:
         0b:b2:ae:57:45:54:7a:66:81:aa:c7:5d:f7:4b:cd:f6:a8:9e:
         5c:0d:b7:61:5b:c9:de:75:ca:3d:31:61:cb:cc:40:2e:21:d8:
         6b:28:7d:09:22:df:af:33:2c:3d:57:98:7e:db:ba:52:3e:67:
         67:b1:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:16 2026 by rpki-client