Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File:                     gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier:          F0n1aQ3lpKUZHOZyTNVm4/J2Qf5ovuHIZXFapaY7Qnc=
Subject key identifier:   FF:48:FE:9D:8D:1C:55:C8:68:43:8F:F3:21:9D:A5:94:42:BD:C7:39
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number:          0206
Signing time:             Fri 17 Apr 2026 02:52:25 +0000
Manifest this update:     Fri 17 Apr 2026 02:52:25 +0000
Manifest next update:     Fri 24 Apr 2026 02:52:25 +0000
Files and hashes:         1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: XKLudMIzIGMtm5veFpL2xrT5jy8j96rF7fLWYmuB3Lw=)
                          2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=)
                          3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Apr 17 02:52:25 2026 GMT
            Not After : Apr 24 02:52:25 2026 GMT
        Subject: CN=69e1a069-5654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:12:37:87:16:19:69:8f:14:91:3b:b9:f5:
                    77:bf:c5:e6:08:52:b3:f3:5e:c5:8e:af:fd:9c:a5:
                    48:b1:0a:b2:72:19:2c:97:10:63:cc:6b:4a:52:a7:
                    02:52:7f:cd:1c:33:20:31:03:6b:ce:9b:60:cc:fa:
                    5d:48:36:d5:62:73:99:14:9c:9b:d8:76:1b:89:1b:
                    84:a5:e6:da:ae:de:6d:9e:d3:8c:a7:d6:7b:54:2c:
                    1e:b7:72:4a:42:42:0e:fc:0a:0e:a2:f8:27:e6:bb:
                    26:fc:c4:be:b3:b1:bf:00:1f:4a:fe:00:25:d9:92:
                    4c:57:e4:64:6f:21:ea:d0:d1:db:aa:c4:88:c6:09:
                    a8:6c:8b:de:73:a7:d4:c5:aa:91:89:b4:2d:c4:18:
                    91:0d:db:00:7c:30:c9:c4:8b:e1:e2:ad:39:2c:47:
                    fd:22:8b:d3:66:cb:23:68:f4:0a:19:ae:bc:77:e4:
                    79:17:fa:59:12:ad:68:36:ce:b1:4a:8e:3f:4a:09:
                    7b:2c:7e:c4:59:07:f1:5c:03:29:f8:70:17:42:78:
                    26:14:39:b0:96:dc:72:a2:52:f3:9b:b8:b1:de:bc:
                    d7:7a:a2:3f:72:38:76:df:a3:60:89:51:3d:c0:b7:
                    33:a3:8a:62:cc:35:c8:eb:16:8c:2b:f5:a1:49:6d:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:48:FE:9D:8D:1C:55:C8:68:43:8F:F3:21:9D:A5:94:42:BD:C7:39
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b6:23:5d:73:94:51:00:e0:9b:ea:2b:54:7a:56:93:47:60:
         71:9f:00:97:d7:a6:ff:e1:89:88:92:4b:a5:65:ee:f6:e7:26:
         3f:80:0b:32:42:9f:68:c8:4d:b0:ac:8b:32:4e:80:c7:bb:ae:
         6b:88:60:63:90:77:e5:14:aa:7f:c3:be:6f:be:2d:17:0a:6f:
         13:24:ea:b4:f7:7e:1d:13:c6:2d:80:f4:c8:60:25:6a:17:2f:
         08:57:13:0f:64:bc:75:0a:c7:c0:3c:fa:96:5b:dc:3b:72:ef:
         35:77:7b:dc:0c:b7:af:86:56:aa:9a:bd:43:8e:04:ac:b4:9b:
         25:69:32:ad:cc:c1:4f:cb:8c:83:24:47:ca:ee:c3:fc:6b:38:
         5b:59:10:9c:29:ca:c3:cd:45:b9:7d:17:6e:81:81:e5:11:35:
         d8:a9:57:b0:80:e9:74:2a:44:84:4c:63:f1:24:8e:53:59:09:
         f0:13:fe:8c:8e:2e:88:a3:f3:94:aa:41:7a:6f:ba:51:dd:0c:
         7a:c2:a8:f7:a1:17:35:4f:c2:90:9a:dc:41:af:b3:ef:a4:dc:
         15:75:12:d2:10:ef:d8:85:b5:22:2d:96:16:f5:51:62:37:93:
         be:b7:ac:41:e4:a9:fc:ea:84:67:f8:13:75:40:6e:c6:8e:ba:
         a4:b9:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:45 2026 by rpki-client