Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
File:                     gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json)
Hash identifier:          UhRvRS364J4cG4v36LZcJHW6WIuciF1PFv2ygEvnvxA=
Subject key identifier:   5B:8A:DA:64:43:50:5B:D2:8E:7A:F2:48:E8:A7:54:37:F3:28:F2:53
Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24
Certificate issuer:       /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124
Certificate serial:       07E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
Manifest number:          07DD
Signing time:             Sat 28 Feb 2026 21:42:08 +0000
Manifest this update:     Sat 28 Feb 2026 21:42:08 +0000
Manifest next update:     Sat 07 Mar 2026 21:42:08 +0000
Files and hashes:         1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: 4NGmMfB+1EwY9TLKxU5nJSCdsV/hX/EbYp89F0aU1hg=)
                          2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: S7PCclJgGscLtYe2Pj+Y6a3iFp4ZeeTuzvJeZrm+yCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl
                          rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124
        Validity
            Not Before: Feb 28 21:42:08 2026 GMT
            Not After : Mar  7 21:42:08 2026 GMT
        Subject: CN=69a36130-0f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:03:a4:43:34:4b:8b:5f:ef:56:e4:b4:b8:
                    50:86:68:b8:7d:b5:28:26:79:ff:a1:ac:7a:b2:b5:
                    07:43:23:57:5c:84:72:de:67:cd:f8:b6:d9:bb:f5:
                    91:3b:1a:3e:77:b2:4d:14:5d:56:6a:28:25:3d:47:
                    0d:1f:ab:67:32:34:73:d0:b5:22:21:31:28:99:52:
                    73:7d:22:ab:e5:1a:b2:7f:95:10:ca:a7:85:21:a9:
                    01:97:a4:96:d9:e5:e6:05:4a:9e:fd:c7:26:51:88:
                    64:69:13:21:84:69:24:30:ca:80:a9:28:f4:2f:23:
                    58:c9:69:46:c8:09:ab:98:db:b1:e4:9a:0b:60:b0:
                    6c:b4:57:80:20:8e:68:7e:aa:e4:b2:c9:e6:26:de:
                    e9:86:a9:71:56:9f:bd:ea:e6:b3:84:4d:3f:f0:02:
                    c2:52:97:59:04:94:f7:bf:bc:7a:69:e0:82:fc:ec:
                    f8:24:0e:2c:79:53:4f:d5:3f:74:38:59:14:4e:0b:
                    52:37:a4:fb:fe:5c:a2:7f:3b:75:80:6f:b7:42:d2:
                    05:27:48:68:67:e4:6c:e4:c9:c6:4d:3f:1b:a3:cf:
                    b2:69:96:5a:0d:be:72:07:e2:bf:28:f4:cc:93:82:
                    f7:50:d5:ee:fc:6c:11:9e:60:81:82:24:63:d4:bf:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8A:DA:64:43:50:5B:D2:8E:7A:F2:48:E8:A7:54:37:F3:28:F2:53
            X509v3 Authority Key Identifier:
                keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:e1:ae:58:20:d8:60:2b:62:bd:03:5b:39:0d:e7:11:67:
         b6:d8:05:cf:70:21:a4:86:6b:b8:87:20:e6:d5:92:3d:34:f6:
         a1:4d:35:67:7e:f0:a1:da:91:40:a8:02:b5:99:8f:95:1e:47:
         9d:df:3a:23:81:1e:23:12:40:11:d1:35:6a:40:ab:79:c2:83:
         c5:da:b7:9e:6f:36:93:d2:49:16:27:4f:49:0f:ed:c3:7f:13:
         70:04:9b:b8:9e:e5:bb:02:3d:c7:c9:56:8b:ac:bc:53:e5:5e:
         03:3a:3d:57:b0:10:0b:39:f8:ea:e6:a9:cd:65:b3:32:ae:e3:
         08:cb:f9:7c:eb:c3:72:de:7a:ef:05:2e:5b:e2:35:e7:7a:d6:
         3f:c6:14:f5:01:b3:a3:20:16:75:e2:70:06:94:00:86:ad:70:
         67:a1:11:af:c9:fc:29:e5:15:54:25:52:38:27:65:c5:a7:9b:
         9f:56:c1:ba:b6:c4:39:57:f0:46:63:76:78:45:be:32:60:7c:
         0f:b4:a2:a5:67:c9:81:7f:fe:40:71:d2:e6:bc:94:9a:82:64:
         7e:fb:bc:53:77:f0:ec:9b:fc:5f:7b:e5:44:90:fb:14:84:60:
         82:15:68:e8:59:58:dc:cb:5f:fc:c8:90:f8:ac:56:8a:60:e5:
         81:82:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:53 2026 by rpki-client