Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
File:                     gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json)
Hash identifier:          e4gr0Pejx8VeMVXOxfFsL8HtVIT224usT5tjhWEHTcc=
Subject key identifier:   8F:AE:74:59:57:3D:D8:AB:51:5E:46:1E:42:65:55:70:E2:AE:83:80
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Certificate issuer:       /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
Manifest number:          68
Signing time:             Wed 15 Apr 2026 07:30:07 +0000
Manifest this update:     Wed 15 Apr 2026 07:30:07 +0000
Manifest next update:     Wed 22 Apr 2026 07:30:07 +0000
Files and hashes:         1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: qHZMWPPSdaQWZ7gKIORLO3KKI40wIKSH7bFgxILZCfY=)
                          2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: jOlgXy5s6Ahmo/y9znHfijD5u8a2h7ukaclc+SI1hq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
                          rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
        Validity
            Not Before: Apr 15 07:30:07 2026 GMT
            Not After : Apr 22 07:30:07 2026 GMT
        Subject: CN=69df3e7f-a4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:84:7c:57:fe:37:9f:7d:87:86:8d:cd:8e:
                    28:c2:e7:10:f7:71:4b:b0:8e:73:80:b6:77:2a:73:
                    ee:b5:29:5d:36:0a:39:09:54:79:3e:7a:dc:69:4d:
                    48:20:d5:4b:cd:f9:f9:d7:d3:a2:0a:11:cc:8b:c1:
                    0c:75:bb:48:0d:e7:da:f0:00:df:9a:cf:53:4f:3a:
                    ac:b0:a4:0a:f6:59:64:02:8e:96:10:a9:a0:03:04:
                    18:94:4b:9e:e7:d0:3e:42:b5:b1:26:1c:8d:44:a9:
                    1e:89:e2:32:b2:3a:6f:7e:f4:1e:33:86:f8:84:fd:
                    c3:98:32:8f:8a:52:dd:a7:54:be:8f:42:2b:8f:d9:
                    0b:e6:79:2e:98:c2:70:05:8c:e1:7b:85:18:02:88:
                    36:41:68:6a:9f:6e:a0:19:3a:c7:13:c3:25:eb:e6:
                    41:2b:79:bf:07:2e:42:7e:d6:dd:01:85:05:9d:39:
                    ae:c6:fd:56:b4:14:2c:7a:8c:03:d7:22:91:5f:31:
                    76:08:96:7c:6b:f2:5e:9b:58:62:b6:9e:b4:32:ff:
                    4d:cd:fa:94:e1:06:31:20:ed:69:22:e2:c6:4a:fd:
                    70:94:ca:b1:6c:8b:a1:18:e0:ce:95:a0:e1:9d:d9:
                    fc:df:15:d2:ec:94:d0:cf:0a:1f:2c:b9:15:e8:48:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AE:74:59:57:3D:D8:AB:51:5E:46:1E:42:65:55:70:E2:AE:83:80
            X509v3 Authority Key Identifier:
                keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:81:97:11:35:6d:5f:69:c2:b5:be:e7:b4:e5:aa:0a:42:e1:
         80:95:66:66:c2:15:84:05:3a:5f:00:cf:f3:6d:63:37:d6:48:
         a2:5d:6e:f2:53:35:e9:e5:5c:cc:31:c3:fc:4d:41:05:fd:76:
         1f:1b:e0:48:55:1e:a9:d5:66:e9:87:24:d1:5b:09:3f:46:fa:
         b5:ce:01:87:c7:6f:5d:61:37:05:8b:bd:ca:a1:88:94:72:40:
         d6:53:1f:b8:3d:28:d1:16:45:1d:ec:28:fe:96:06:6a:7b:61:
         fc:37:3c:ff:0b:9c:99:31:89:d7:6d:37:6c:75:dc:a3:27:02:
         af:61:11:f3:9e:9d:70:03:10:0a:62:12:e7:66:cf:92:f4:8e:
         f3:d6:6b:83:46:a6:8f:5f:d6:7d:4e:f4:38:fc:02:5c:80:26:
         55:e8:98:67:6a:b3:76:99:c8:7f:67:f7:aa:c2:79:c4:9d:af:
         99:d3:01:c9:0c:6c:c5:a6:c7:31:e8:fb:1d:0e:19:41:01:54:
         52:ab:82:6a:48:f9:0a:94:51:21:d7:4e:bd:bf:63:72:e9:b0:
         ec:3d:c5:04:da:bb:ca:7a:a3:ff:83:41:cd:56:41:ec:d8:e1:
         64:5b:cc:4a:b6:88:0a:64:f9:21:b7:11:70:9c:88:72:bb:1e:
         cf:6b:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:16 2026 by rpki-client