Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
File:                     gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json)
Hash identifier:          5uykc8HX0tGjpRjVqdsmMBruA1nDZvsJ5+Ds+RY1mqM=
Subject key identifier:   01:8F:93:13:A4:0A:E4:74:58:57:B4:A6:A9:CA:DD:05:42:48:A1:44
Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
Certificate issuer:       /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
Certificate serial:       0309
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
Manifest number:          0305
Signing time:             Mon 02 Mar 2026 01:27:47 +0000
Manifest this update:     Mon 02 Mar 2026 01:27:45 +0000
Manifest next update:     Mon 09 Mar 2026 01:27:45 +0000
Files and hashes:         1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: K/w9vQY7X+7Plwe4XFPESe2J1Ml/OyRBvBnqqpbiWFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl
                          rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777 (0x309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143A67, serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
        Validity
            Not Before: Mar  2 01:27:45 2026 GMT
            Not After : Mar  9 01:27:45 2026 GMT
        Subject: CN=69a4e793-e2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:a2:d2:22:0f:a2:99:cb:cb:01:66:a4:5e:
                    d0:0f:3d:c0:df:08:85:7a:47:59:b3:be:cf:41:2c:
                    01:a8:65:3d:9f:1e:c8:5a:0c:ef:cf:ac:24:68:28:
                    d5:35:98:03:af:36:d9:75:5b:21:3b:40:89:ac:33:
                    80:90:10:f7:ff:eb:4d:8e:6a:46:7d:89:1f:c6:25:
                    56:b5:e3:ac:14:be:d1:ee:4e:18:2d:80:59:00:76:
                    2e:5d:64:cd:2a:cd:3a:9a:e7:83:b6:9d:37:a0:75:
                    25:ef:dd:f5:d7:19:11:ad:7c:c9:51:b9:1e:3b:ea:
                    93:be:8c:5f:e2:15:b9:f9:21:a7:63:3d:d1:22:3a:
                    8b:d7:ad:7c:8f:7e:4d:ad:9a:48:48:7d:47:b4:90:
                    6c:e9:25:a8:bc:76:3e:7e:75:2f:67:19:15:cf:b4:
                    b0:ed:95:8d:0a:67:52:4d:f7:55:97:1a:d5:1b:07:
                    d5:95:d1:7c:3c:03:89:b9:64:70:98:b9:fd:99:a0:
                    8e:b7:cc:1b:a0:a5:d8:0d:94:37:6c:2b:27:c4:d8:
                    85:2c:b7:e0:8f:f5:02:b8:d5:73:41:ea:fe:12:5d:
                    05:48:23:05:68:f9:66:95:e6:86:69:f3:59:6b:26:
                    ab:d9:b6:4a:2f:e2:20:02:6b:35:fc:0a:fa:e8:47:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8F:93:13:A4:0A:E4:74:58:57:B4:A6:A9:CA:DD:05:42:48:A1:44
            X509v3 Authority Key Identifier:
                keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:cf:b8:2c:77:41:02:a9:5f:41:25:54:77:f6:26:96:bf:f1:
         42:c3:b4:b9:c6:d6:03:3b:fd:49:04:a4:4d:28:77:60:c0:c6:
         52:be:6b:48:2e:71:20:75:11:24:c4:a9:3a:06:7a:8b:99:84:
         02:ae:ff:48:08:11:d8:bb:4e:a3:1e:48:14:5a:c6:5a:b5:38:
         d7:c0:19:32:97:a4:0d:91:e6:96:d8:4e:b2:73:d7:e2:bf:d2:
         37:b8:d0:bd:cb:ee:f6:fb:7b:61:38:1d:4c:a2:25:7e:fa:67:
         1e:65:85:c8:29:8b:23:37:64:c2:1a:96:00:04:86:0a:de:c2:
         8e:73:e2:be:3f:55:4e:64:20:a3:0e:ce:cd:31:2a:43:9a:09:
         f8:39:38:ec:05:fb:e2:d8:c4:cd:ed:ec:cf:b3:9c:94:4d:de:
         7d:3d:e2:2b:a6:bd:21:5f:4c:fe:b1:37:05:dc:e2:5a:7b:0e:
         77:69:1a:2a:3c:8c:2d:28:f7:74:00:2f:8d:f7:e7:e7:eb:f5:
         b3:94:79:65:e0:db:8a:58:e7:e7:56:f3:37:e8:2c:ed:41:ee:
         0d:22:07:36:54:ca:d0:7b:d2:c6:df:f4:3a:30:3c:20:4e:b1:
         f3:79:0c:6e:88:47:b0:12:7d:0b:8e:03:66:3e:ea:87:18:0c:
         dc:35:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:08 2026 by rpki-client