Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
File:                     GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json)
Hash identifier:          USBUB7aWDNAjoqcqxovZ0NpjiRu9Syg3C/nhVxLipc8=
Subject key identifier:   0E:93:C1:45:D7:B0:52:A5:56:19:08:B7:D6:D9:6E:C6:D5:ED:06:C0
Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
Certificate issuer:       /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
Manifest number:          7B
Signing time:             Sun 01 Mar 2026 09:04:52 +0000
Manifest this update:     Sun 01 Mar 2026 09:04:51 +0000
Manifest next update:     Sun 08 Mar 2026 09:04:51 +0000
Files and hashes:         1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: 79nxlCO7RIUrzv/Y2HSLdhCe81UPS2hrCtC/FZa5hOU=)
                          2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: eX2tn1QIuokhr40tRhM6FAH4/iDlJ6AsfUDI7tg8Vpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
        Validity
            Not Before: Mar  1 09:04:51 2026 GMT
            Not After : Mar  8 09:04:51 2026 GMT
        Subject: CN=69a40133-5ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:bd:bf:9d:cb:d6:bd:3e:e3:93:88:76:7a:
                    37:09:14:ef:b6:c4:9b:95:94:73:88:f4:02:07:47:
                    21:fd:b8:c8:98:cf:06:a3:3e:bf:da:88:08:fd:06:
                    cd:a9:f9:5b:1b:9a:de:9f:eb:d5:3d:15:77:c7:65:
                    16:9a:60:ae:0c:70:e9:0d:26:58:07:52:c0:8d:31:
                    15:52:f5:79:8b:b7:7a:c9:93:7d:05:7a:4d:70:38:
                    1b:1a:90:c9:4c:8d:3c:68:98:f9:a9:57:c5:bd:4e:
                    af:f9:bc:c4:58:78:b3:e9:e0:d4:cc:7c:88:89:e1:
                    a7:1a:5c:e1:07:a8:cf:c2:8a:95:7a:d8:b9:36:1d:
                    f6:30:09:1f:3e:0b:6e:66:12:9a:98:9d:d2:98:ea:
                    6d:1d:46:62:a1:68:17:5a:f8:bb:54:5b:c9:7f:44:
                    73:ac:b5:40:eb:05:22:fa:8b:60:4f:00:6b:8c:58:
                    1f:13:81:0c:6d:4f:55:42:ad:6b:9a:7b:7b:76:a1:
                    22:fb:5c:fe:7d:73:d2:ee:b3:64:b9:11:fb:1b:a3:
                    6c:cc:13:8f:12:b1:f0:0f:a2:88:ad:df:b8:80:98:
                    63:fa:23:1e:81:16:40:98:11:a4:61:dd:32:3f:bf:
                    c7:6f:66:90:6b:e6:52:7d:0d:7c:f2:1d:09:06:24:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:C1:45:D7:B0:52:A5:56:19:08:B7:D6:D9:6E:C6:D5:ED:06:C0
            X509v3 Authority Key Identifier:
                keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:b0:eb:e5:ff:27:3a:5d:a8:de:6c:bc:1a:5e:e2:56:f0:
         f5:a7:32:57:58:ca:dc:64:94:11:bc:af:0f:07:79:14:ee:b4:
         a3:6c:e5:ab:20:74:a7:f2:fb:ac:3b:fa:80:73:63:8a:90:5c:
         03:70:b2:0f:7d:9c:e2:31:95:c2:f5:60:a2:0b:62:b3:ad:a2:
         cd:b7:72:d3:5c:a6:d8:01:ae:1b:73:ec:83:c1:b5:83:c2:1e:
         47:32:04:b3:5d:d4:cd:b9:eb:0e:82:ab:34:1c:3c:db:39:2a:
         b0:31:f8:9e:28:18:5b:c9:a6:81:9c:d4:5b:52:5d:df:e9:28:
         f2:a8:c7:16:dc:d8:b1:f4:de:75:93:77:b7:2d:de:b4:9f:2a:
         8f:49:36:19:89:4c:2d:d5:84:6d:a2:e0:11:1f:6b:74:3f:19:
         51:df:4b:55:06:90:eb:75:96:ed:b9:ab:1f:f2:df:be:7b:11:
         cd:6e:05:e5:90:f0:55:65:2d:19:ff:16:c7:4e:04:66:bb:d2:
         17:ce:50:af:e1:19:05:55:4a:fc:44:cf:91:95:a2:9e:f6:63:
         b4:fb:4a:1c:00:9a:a5:0b:17:c3:01:14:b0:70:41:11:12:21:
         6b:f4:56:fd:93:08:37:67:2f:91:21:ac:7e:d6:37:01:bc:52:
         f7:19:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:53 2026 by rpki-client