Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
File:                     gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json)
Hash identifier:          +ABeXWNIuWGnUxlhkEHpLMTKJA9ncV0IrA/JomfjyT8=
Subject key identifier:   25:88:03:3D:01:F5:A6:D8:80:53:D6:64:01:AE:9B:0A:E2:CA:30:22
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Certificate issuer:       /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
Manifest number:          51
Signing time:             Sun 01 Mar 2026 09:38:37 +0000
Manifest this update:     Sun 01 Mar 2026 09:38:36 +0000
Manifest next update:     Sun 08 Mar 2026 09:38:36 +0000
Files and hashes:         1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: j6WxEmdEviSnOPXXj+u8n9uQTd+vu51JunVJaHV2WQE=)
                          2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: jOlgXy5s6Ahmo/y9znHfijD5u8a2h7ukaclc+SI1hq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
                          rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
        Validity
            Not Before: Mar  1 09:38:36 2026 GMT
            Not After : Mar  8 09:38:36 2026 GMT
        Subject: CN=69a4091d-b6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:79:7d:c9:84:00:8e:c7:7d:0d:46:e7:6e:
                    82:ba:11:d4:d2:5c:10:64:46:ed:2c:e4:86:81:53:
                    3b:88:64:7f:6b:70:4c:8b:2a:3f:4c:dd:3f:8c:6d:
                    97:65:54:69:99:11:7f:b5:00:da:e9:67:db:d2:b3:
                    04:ee:55:6c:16:16:ad:e1:15:22:f4:84:4c:a6:16:
                    17:aa:17:07:27:49:5c:86:dc:9e:fc:d4:66:93:d9:
                    df:a6:08:1e:5c:ce:5e:71:31:72:da:ec:28:72:5e:
                    5e:43:ec:25:36:9d:2e:b6:9e:f3:c8:63:61:0c:35:
                    9c:c9:fe:86:f7:fd:69:b0:d9:ad:3e:a7:5f:17:46:
                    50:d5:a4:a3:54:2c:6b:20:9b:3f:3a:b0:40:a8:de:
                    e4:e7:38:95:ae:1b:51:2f:30:66:67:7d:26:78:7d:
                    0f:47:f0:7a:59:1a:fe:66:7b:63:d6:95:47:56:fc:
                    5d:6b:30:23:5f:4d:b5:ba:26:ba:4b:a2:63:81:d2:
                    2f:52:32:99:20:da:42:51:a6:81:fb:0a:17:39:a0:
                    41:a7:c0:95:be:f0:46:89:b9:22:22:51:71:6e:3f:
                    ba:cf:32:2a:d7:50:1b:f4:32:f7:ad:4f:8d:38:d7:
                    c4:c5:9d:4a:46:42:c2:85:6e:bd:5a:5d:ea:b2:93:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:88:03:3D:01:F5:A6:D8:80:53:D6:64:01:AE:9B:0A:E2:CA:30:22
            X509v3 Authority Key Identifier:
                keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:c6:09:96:50:c0:61:14:fc:92:80:c8:c5:c0:a6:ea:73:
         b6:c4:fa:42:f2:33:7a:14:39:05:b6:59:06:3d:a7:7c:df:e2:
         a5:79:b0:12:d0:a2:40:91:ee:7e:61:be:11:28:f3:45:c8:e9:
         93:2a:85:ac:24:df:d1:f6:26:b0:af:e7:29:ad:8b:0d:4f:e8:
         13:2d:c7:0c:b6:9c:81:83:2e:40:6a:bd:12:55:18:e6:23:d7:
         02:ae:27:2e:e3:a0:66:27:d2:33:cb:6c:da:2e:4a:c7:34:fa:
         94:cf:22:3c:e0:4b:19:bc:c0:e3:1f:b6:e9:6c:c7:31:18:76:
         54:b3:a7:75:67:05:45:52:6d:d7:ae:e6:80:c2:a8:0d:48:4a:
         1f:b1:24:2c:f9:32:20:2d:f1:28:8b:1f:60:6f:36:9b:3b:c1:
         0d:d2:92:55:2b:be:6e:af:bf:07:67:5c:97:d3:87:69:80:9e:
         be:79:59:18:de:23:23:21:04:51:1a:ca:59:6c:0d:57:a4:2c:
         c9:ab:bd:97:1d:f9:08:92:5e:76:98:8b:8a:8f:dd:ce:e1:ee:
         f4:16:8c:9e:dd:df:dd:1d:33:6b:64:85:f0:37:fe:db:ca:2a:
         38:32:47:78:3c:bd:0c:c5:31:52:50:e9:45:c8:e2:a6:7d:56:
         e8:c1:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:44 2026 by rpki-client