Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
File:                     ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json)
Hash identifier:          p8W2vkdBCAMowPyTe7lyc1FLLfkGHZkRIkINe9fkyg8=
Subject key identifier:   24:4A:07:BF:13:F3:7E:32:80:86:43:CE:E8:D1:0A:EB:DF:02:96:25
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Certificate issuer:       /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
Manifest number:          01C3
Signing time:             Sun 01 Mar 2026 04:35:44 +0000
Manifest this update:     Sun 01 Mar 2026 04:35:44 +0000
Manifest next update:     Sun 08 Mar 2026 04:35:44 +0000
Files and hashes:         1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: YgeRmPnI+/FEUbxYfsXaqQkrl3K70XSu6h5hG0nDxAA=)
                          2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: NFmNkjaiU0uYTs29NAH/47n0Z0kFYXvb8Jo+kIWbJVI=)
                          3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: Id5hTSqnCq9sIlYBlEobLdREPLbQi9MsA4cN90jqm/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
                          rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
        Validity
            Not Before: Mar  1 04:35:44 2026 GMT
            Not After : Mar  8 04:35:44 2026 GMT
        Subject: CN=69a3c220-ac21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:44:f7:7e:a8:a2:bd:bf:94:c5:a4:62:de:
                    53:d6:02:90:42:1c:a6:84:bc:e2:f5:3d:a0:94:f0:
                    42:24:34:93:70:85:e0:23:2f:b8:a5:99:d3:8b:78:
                    cb:63:e7:13:0e:16:71:20:e0:17:76:fb:21:df:e5:
                    50:5d:af:3f:82:e5:f2:11:81:8e:50:2a:25:d2:c3:
                    24:a6:d5:1a:f0:43:a5:45:6c:cd:c6:29:47:db:83:
                    20:f8:8e:6e:82:87:ca:8c:68:45:07:1f:d4:6b:c8:
                    27:85:f0:4d:eb:a4:3b:26:1d:71:01:87:91:71:9b:
                    a9:9d:36:e0:c7:5c:d6:8b:a8:d8:cf:4b:37:b3:ab:
                    ee:7c:b9:74:62:60:b2:26:b1:40:fa:84:0f:10:c9:
                    9e:b2:01:86:6d:c9:8e:18:9f:5d:d7:84:f8:cc:9a:
                    8d:15:16:99:59:b1:3f:f2:5c:4c:6b:5d:34:89:11:
                    22:8a:9d:07:7f:db:c7:5d:a5:92:4e:d5:19:4d:bb:
                    db:e4:da:e6:6d:24:27:64:9c:ad:c5:17:00:cc:7f:
                    30:95:91:8e:20:86:5c:78:a4:bc:8f:79:e1:3b:74:
                    69:8e:05:8f:30:37:45:91:5b:08:90:25:2a:dc:c8:
                    c2:f3:c3:30:81:1d:8d:69:cf:28:96:0c:08:29:db:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4A:07:BF:13:F3:7E:32:80:86:43:CE:E8:D1:0A:EB:DF:02:96:25
            X509v3 Authority Key Identifier:
                keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:85:da:b2:bf:b3:1a:b4:e3:ee:43:00:70:2d:e7:3c:04:7b:
         57:c9:2a:70:12:b6:55:05:62:e4:b8:bb:70:27:e9:13:8a:c1:
         15:51:5c:7c:5d:ee:40:78:e9:78:1b:9e:7d:a8:91:91:ca:e7:
         1d:25:db:09:ec:3c:d1:30:bc:9c:b5:8e:35:ec:48:43:8d:0c:
         37:cc:9f:ea:e7:a7:07:03:68:01:c9:26:5d:14:f5:f4:56:c7:
         9f:6c:26:37:76:5b:5e:4f:17:dd:13:d8:ad:39:e1:81:f7:a7:
         4a:ac:3c:fd:f3:ae:b3:7d:cb:04:34:7a:99:71:5c:d0:fd:8e:
         2b:a2:08:8b:c8:a6:2e:dd:42:31:ed:d5:8a:12:e1:dd:69:e0:
         44:9d:16:6b:f1:90:1f:e1:de:21:13:cb:7e:a1:18:76:37:bf:
         91:f9:b0:28:db:ec:d6:3e:c1:9a:11:b1:2c:11:45:a2:93:db:
         5b:24:c0:df:23:4b:07:7b:cc:e4:d1:cb:41:61:92:e4:34:fa:
         fe:c8:f8:5b:84:6c:c9:69:6f:3a:59:17:ba:47:ba:5d:d0:0a:
         15:9a:1a:ff:2c:34:88:3a:74:25:5e:2d:ae:12:54:58:4c:a3:
         85:57:ae:74:3c:3e:b2:4f:ae:06:96:7c:e6:a2:b8:88:a0:79:
         55:cc:2e:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2
N0FBM0NERjMwHhcNMjYwMzAxMDQzNTQ0WhcNMjYwMzA4MDQzNTQ0WjAYMRYwFAYD
VQQDDA02OWEzYzIyMC1hYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDdE936oor2/lMWkYt5T1gKQQhymhLzi9T2glPBCJDSTcIXgIy+4pZnTi3jL
Y+cTDhZxIOAXdvsh3+VQXa8/guXyEYGOUCol0sMkptUa8EOlRWzNxilH24Mg+I5u
gofKjGhFBx/Ua8gnhfBN66Q7Jh1xAYeRcZupnTbgx1zWi6jYz0s3s6vufLl0YmCy
JrFA+oQPEMmesgGGbcmOGJ9d14T4zJqNFRaZWbE/8lxMa100iREiip0Hf9vHXaWS
TtUZTbvb5NrmbSQnZJytxRcAzH8wlZGOIIZceKS8j3nhO3RpjgWPMDdFkVsIkCUq
3MjC88MwgR2Nac8olgwIKdshhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRKB78T
834ygIZDzujRCuvfApYlMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD
OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6
Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE
dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuYXasr+zGrTj7kMAcC3nPAR7V8kqcBK2VQVi5Li7cCfpE4rBFVFcfF3uQHjp
eBuefaiRkcrnHSXbCew80TC8nLWONexIQ40MN8yf6uenBwNoAckmXRT19FbHn2wm
N3ZbXk8X3RPYrTnhgfenSqw8/fOus33LBDR6mXFc0P2OK6IIi8imLt1CMe3VihLh
3WngRJ0Wa/GQH+HeIRPLfqEYdje/kfmwKNvs1j7BmhGxLBFFopPbWyTA3yNLB3vM
5NHLQWGS5DT6/sj4W4RsyWlvOlkXuke6XdAKFZoa/yw0iDp0JV4trhJUWEyjhVeu
dDw+sk+uBpZ85qK4iKB5VcwuxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:27 2026 by rpki-client