Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
File:                     _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json)
Hash identifier:          +lTw5pUtcWAQ3QBL8Wk7n7QkzBtLZdi6BDy59yv0sCw=
Subject key identifier:   A9:6B:BB:82:25:9E:2A:7B:32:CF:A8:83:42:AE:5D:A4:51:02:5C:82
Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5
Certificate issuer:       /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
Certificate serial:       2795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
Manifest number:          2784
Signing time:             Thu 16 Apr 2026 15:37:01 +0000
Manifest this update:     Thu 16 Apr 2026 15:37:01 +0000
Manifest next update:     Thu 23 Apr 2026 15:37:01 +0000
Files and hashes:         1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: nkHfX+UW41fQqIBwEtTap49VxboyBM7+Q/E0ynOHol8=)
                          2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: NdTxn+HasKfGOEbIN5yYPJ4JBQuKbqVM6GqJLCJsrzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl
                          rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10133 (0x2795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151C9D, serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
        Validity
            Not Before: Apr 16 15:37:01 2026 GMT
            Not After : Apr 23 15:37:01 2026 GMT
        Subject: CN=69e1021d-7ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:a7:18:2c:14:4c:fa:6b:cb:33:09:20:a2:
                    41:b3:31:8e:93:4c:0a:4a:7e:82:ec:78:52:58:5e:
                    30:25:13:e0:4e:e8:f6:27:4b:40:d6:ff:b5:04:15:
                    ef:6f:27:8c:0f:d0:3f:7c:1f:7d:8c:fb:fe:e2:44:
                    70:d8:72:20:f0:af:cd:bc:0f:18:58:8f:e0:cc:cb:
                    16:08:6b:17:2f:2d:98:d8:1f:ee:bf:25:6a:77:ca:
                    30:8a:eb:7e:51:e7:11:73:e4:58:22:42:c3:29:49:
                    dc:89:d5:2a:d3:44:94:9b:91:4a:54:3b:86:8e:96:
                    eb:12:80:27:8f:ce:0e:46:d1:23:c1:46:d3:ab:dc:
                    5b:bd:98:ef:4d:2c:8e:c1:ac:15:ea:3d:a6:d7:f0:
                    23:66:2e:a2:bd:ac:c2:f1:e7:4a:b0:cb:4a:a8:41:
                    b4:76:d7:eb:8c:30:1a:5a:1e:6a:00:f0:df:87:45:
                    83:fe:c5:36:6b:47:8b:04:f7:41:5c:12:f3:f7:94:
                    76:05:cc:b0:93:8c:04:05:73:f0:69:c7:b7:7d:85:
                    35:b8:94:98:70:1e:24:93:3a:77:1d:30:44:8c:4f:
                    27:90:0e:d3:d3:33:68:68:70:f8:cf:03:8d:90:e5:
                    bd:98:d8:ea:25:20:f5:c2:26:72:3e:e3:30:13:0a:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6B:BB:82:25:9E:2A:7B:32:CF:A8:83:42:AE:5D:A4:51:02:5C:82
            X509v3 Authority Key Identifier:
                keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:c3:47:d6:c7:e9:2d:20:a1:7c:0a:2b:09:25:60:18:c5:
         86:a2:cd:93:de:f5:50:00:51:e4:a3:19:9d:f8:fa:ec:d6:08:
         08:4b:0f:04:07:c3:17:20:bf:30:89:dc:11:8a:bb:a5:fc:72:
         d9:04:f4:99:e9:82:84:97:ea:49:54:40:30:87:3a:cb:01:14:
         53:f1:39:d1:40:ab:37:06:67:39:71:b0:c8:ac:0a:e3:99:63:
         14:ef:93:fa:57:33:58:bc:0a:a8:03:9d:03:0f:40:42:3c:46:
         db:a0:54:20:4a:4a:3b:64:bc:0a:26:33:5f:92:0f:bb:a6:71:
         9c:d1:52:2b:a6:b8:37:0a:88:65:8e:76:6a:d7:e1:8d:f4:26:
         a9:70:df:07:d6:77:bc:07:14:a9:e2:f2:64:8b:f8:ab:9b:13:
         44:2b:b6:aa:3a:f1:9a:4d:88:bc:84:24:29:39:35:21:40:19:
         4b:47:f3:0f:40:8f:6f:2c:6c:e7:37:af:e2:ca:d1:56:d7:56:
         4b:74:f1:e3:45:2b:c1:38:7a:f5:50:39:00:ac:64:e2:e7:53:
         c9:97:45:62:08:4d:28:b2:11:45:a7:37:67:40:48:9a:ec:e6:
         9f:bd:60:de:7a:28:8a:46:b5:a6:f7:a8:8a:c2:fb:bc:f0:bc:
         2c:23:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:46 2026 by rpki-client