Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File:                     15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier:          CSRPjr64BEVw6QY9F2p/PL1QbaiDziYF/S0XrQCNCzc=
Subject key identifier:   DD:2D:99:8B:02:DD:15:BD:C7:64:E8:6D:AB:7C:32:BF:BD:30:51:F6
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer:       /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number:          B9
Signing time:             Sun 01 Mar 2026 08:16:53 +0000
Manifest this update:     Sun 01 Mar 2026 08:16:52 +0000
Manifest next update:     Sun 08 Mar 2026 08:16:52 +0000
Files and hashes:         1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: 95eTkyFzS0yy/LbHmt4C83F4/u8clWQMzk4OrXeMSvA=)
                          2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 0agSO2czYb8v+KJlTio7mlvfIAuNEExcwdGTY8BGEg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
                          rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
        Validity
            Not Before: Mar  1 08:16:52 2026 GMT
            Not After : Mar  8 08:16:52 2026 GMT
        Subject: CN=69a3f5f5-8ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:a4:b9:7a:37:3d:cc:ce:e4:d1:6b:29:01:
                    6e:42:58:fb:5e:4c:87:2c:bd:2b:24:4a:f6:e2:57:
                    f1:1c:fa:c6:78:65:e9:ea:55:fc:a4:32:09:6b:5e:
                    f1:a8:8b:0d:43:c7:9a:a1:2c:d2:8f:d3:6c:c2:44:
                    a1:16:1d:7c:40:a3:ab:90:b9:0f:c1:59:88:ce:69:
                    35:22:bf:cc:c2:11:27:47:64:95:2a:76:1a:a7:ef:
                    59:29:ea:63:87:02:58:96:12:4f:69:9c:44:23:7e:
                    2d:72:b9:03:ee:4e:bb:a0:d2:26:58:0f:06:01:7a:
                    ce:c2:ad:99:20:ac:9e:f8:dc:c2:b3:a6:01:2a:db:
                    9e:db:ed:06:05:33:ef:c4:3b:42:e5:b2:85:50:47:
                    d9:0f:65:50:38:02:7c:df:31:04:78:a7:9c:98:f9:
                    60:f3:aa:59:2c:2c:30:de:7a:77:60:98:3b:dd:e7:
                    3c:04:a0:cd:0a:fe:5a:f0:21:cc:cb:13:24:a3:fd:
                    f1:66:d6:b7:b7:05:3e:c2:b7:b0:77:e6:23:90:97:
                    78:b9:dc:57:89:68:93:72:15:b1:24:2a:c7:23:0a:
                    ff:6c:d7:aa:b3:99:03:f2:b5:3a:da:db:6f:66:ec:
                    db:4c:bd:6e:fb:3d:b4:50:15:8d:96:9b:cb:e8:ae:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2D:99:8B:02:DD:15:BD:C7:64:E8:6D:AB:7C:32:BF:BD:30:51:F6
            X509v3 Authority Key Identifier:
                keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a4:89:f7:2a:54:46:60:1c:f7:ec:80:05:73:d1:b4:24:da:
         59:bb:b1:f5:02:ef:53:ac:89:7f:ce:79:a1:65:f7:85:5e:2c:
         0f:c9:18:d7:20:8a:38:4e:40:9e:96:80:14:56:3c:f5:a7:81:
         9f:3a:74:30:8b:af:d0:8f:eb:36:81:82:62:40:4f:40:ae:e9:
         30:e8:9e:3e:78:a4:ac:0d:a7:df:fb:51:4a:58:e8:68:9a:42:
         4b:55:b1:fb:84:41:96:53:f1:fa:d0:4d:9d:0a:a5:66:5f:01:
         bf:34:8e:ac:46:f8:d9:c0:45:c6:14:c8:96:35:2c:c1:f2:37:
         56:ad:2b:58:58:5d:db:20:c0:0a:6f:ea:79:15:27:25:f6:fe:
         f0:e7:1c:d9:5c:3e:f6:c4:8b:9c:ca:1c:a5:4d:cf:ff:30:4d:
         cd:ac:b0:6c:6e:03:2b:55:32:05:d0:19:4c:b7:a1:c3:b3:53:
         b5:71:5a:77:05:f9:b7:68:85:d0:8e:7d:e3:92:17:27:31:be:
         09:de:c7:18:2e:6e:e7:bd:ef:b8:e6:c7:27:66:2f:cf:72:e1:
         a5:44:e7:2e:50:a3:78:9c:a0:92:fb:53:81:39:3d:5b:a7:c8:
         18:70:fb:1d:50:81:f6:9e:98:82:9d:8f:b0:94:01:68:1d:5a:
         6e:bf:8c:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdERTMxMTAvBgNVBAUTKEQ3OUZFMEIwOUNBNDRBODQ2NjkyODM4RkM0MkJDRjQz
RDJBMzJBRDIwHhcNMjYwMzAxMDgxNjUyWhcNMjYwMzA4MDgxNjUyWjAYMRYwFAYD
VQQDEw02OWEzZjVmNS04YmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlgWkuXo3PczO5NFrKQFuQlj7XkyHLL0rJEr24lfxHPrGeGXp6lX8pDIJa17x
qIsNQ8eaoSzSj9NswkShFh18QKOrkLkPwVmIzmk1Ir/MwhEnR2SVKnYap+9ZKepj
hwJYlhJPaZxEI34tcrkD7k67oNImWA8GAXrOwq2ZIKye+NzCs6YBKtue2+0GBTPv
xDtC5bKFUEfZD2VQOAJ83zEEeKecmPlg86pZLCww3np3YJg73ec8BKDNCv5a8CHM
yxMko/3xZta3twU+wrewd+YjkJd4udxXiWiTchWxJCrHIwr/bNeqs5kD8rU62ttv
ZuzbTL1u+z20UBWNlpvL6K6hhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0tmYsC
3RW9x2Tobat8Mr+9MFH2MB8GA1UdIwQYMBaAFNef4LCcpEqEZpKDj8Qrz0PSoyrS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0RFMy80RTFFRUFCQUZD
MzcxMUVGQjFDMDcyODZDNEY5QUUwMi8xNV9nc0p5a1NvUm1rb09QeEN2UFE5S2pL
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0RFMy80RTFFRUFCQUZDMzcxMUVGQjFDMDcyODZDNEY5QUUwMi8xNV9nc0p5a1Nv
Um1rb09QeEN2UFE5S2pLdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX6SJ9ypURmAc9+yABXPRtCTaWbux9QLvU6yJf855oWX3hV4sD8kY1yCKOE5A
npaAFFY89aeBnzp0MIuv0I/rNoGCYkBPQK7pMOiePnikrA2n3/tRSljoaJpCS1Wx
+4RBllPx+tBNnQqlZl8BvzSOrEb42cBFxhTIljUswfI3Vq0rWFhd2yDACm/qeRUn
Jfb+8Occ2Vw+9sSLnMocpU3P/zBNzaywbG4DK1UyBdAZTLehw7NTtXFadwX5t2iF
0I5945IXJzG+Cd7HGC5u573vuObHJ2Yvz3LhpUTnLlCjeJygkvtTgTk9W6fIGHD7
HVCB9p6Ygp2PsJQBaB1abr+MBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:53 2026 by rpki-client