Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
File:                     G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json)
Hash identifier:          awEPPgzQmobXpxw1vV4qM1jVNX7lsOn9HZ36Bn8Qj6c=
Subject key identifier:   AA:E2:D0:11:82:EB:F6:80:D5:08:E4:4E:44:D7:EF:82:3D:E1:E0:58
Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
Certificate issuer:       /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Certificate serial:       06FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
Manifest number:          06F3
Signing time:             Thu 16 Apr 2026 22:00:53 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:52 +0000
Manifest next update:     Thu 23 Apr 2026 22:00:52 +0000
Files and hashes:         1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: E0GF+eWJi+KQMzjleZ2wK4RJWzqgVo/sdRecohrtZGQ=)
                          2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: l6AU9MxLeYtTJT1Gg9hXsmqoACZsqQ18yneyI+RgJt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl
                          rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1788 (0x6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
        Validity
            Not Before: Apr 16 22:00:52 2026 GMT
            Not After : Apr 23 22:00:52 2026 GMT
        Subject: CN=69e15c15-92a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:47:a5:9b:cf:af:fb:e1:96:2b:9a:44:ae:
                    c8:c6:9d:2b:d7:49:9a:3e:50:91:a7:93:46:5e:cd:
                    34:30:35:ea:e6:74:5f:2d:68:59:91:53:c8:40:30:
                    b3:21:af:e3:51:7e:4c:21:2d:83:6a:f1:55:16:e9:
                    7c:27:51:c8:30:9c:dd:b4:1a:7b:42:8f:4f:b3:a2:
                    64:cc:e5:1d:e2:eb:21:14:31:1a:63:be:ab:e3:e9:
                    0b:cb:37:88:93:cf:2d:06:16:04:96:bd:96:c6:79:
                    62:84:db:8d:a0:2d:48:e8:b9:10:a6:2f:b5:d8:51:
                    32:12:e3:b5:ad:a2:97:08:a1:57:29:63:05:db:8a:
                    7e:02:39:09:d7:7f:66:c9:23:30:d6:13:a0:af:d7:
                    7a:03:18:7c:fc:4c:b3:c3:a4:92:0f:ce:6d:25:0b:
                    d2:9f:3d:2c:c5:38:66:a7:62:82:e6:95:e7:a4:88:
                    98:4c:e8:08:55:b7:42:1c:29:a0:bf:13:97:3a:c9:
                    1e:0a:80:c0:80:07:a9:55:b1:9e:96:a4:20:c1:2b:
                    d6:2a:76:02:70:15:ca:31:1c:8e:da:26:dd:1b:9b:
                    86:ec:fb:2c:46:2e:1d:d9:90:db:db:eb:83:71:6b:
                    11:12:ae:a4:88:70:15:8e:4c:ab:97:5c:85:0a:58:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E2:D0:11:82:EB:F6:80:D5:08:E4:4E:44:D7:EF:82:3D:E1:E0:58
            X509v3 Authority Key Identifier:
                keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:e9:5b:fb:31:80:5c:28:69:4f:14:81:33:0d:ab:63:3a:dc:
         34:35:c4:8a:f6:46:75:89:ec:fe:61:fd:bf:69:10:71:42:b4:
         87:22:6b:10:da:ea:d3:f6:33:86:d1:3a:44:08:95:f8:8e:20:
         15:9c:c0:80:76:f2:de:62:4d:8a:90:c9:64:3b:88:2e:e2:44:
         b1:fc:46:16:3d:a0:6c:9f:b8:92:a3:2e:51:a0:2e:e5:95:87:
         ea:c8:0e:00:34:ce:38:d5:26:6e:38:11:8d:90:75:70:b3:d8:
         d4:aa:49:d8:23:27:3e:f0:f9:51:70:44:f4:69:87:09:6b:d7:
         47:34:95:f0:27:18:6d:98:74:f1:85:74:a1:bb:72:5a:1c:17:
         b0:5d:20:69:3b:d1:7a:09:b4:eb:a3:cd:7d:7d:a7:81:45:64:
         e6:3c:65:c1:76:02:81:4b:24:88:fa:16:92:2d:b9:fe:90:c2:
         28:24:3e:1c:07:18:47:25:60:25:00:2e:de:c2:1b:03:e5:57:
         8b:31:bd:4f:cc:7a:52:00:95:73:e2:9c:e4:fa:07:42:cd:5f:
         36:28:a0:67:d0:b7:0d:d0:19:b3:49:d2:71:10:b3:b0:de:7c:
         4c:bf:dd:b4:17:aa:8d:0c:41:86:15:d1:7f:8f:a6:7d:bc:42:
         da:21:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:47 2026 by rpki-client