Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
File:                     Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json)
Hash identifier:          844VeW3/WOr542mgw9YVLeE+w2rrMz9TpiTNOFeNsg8=
Subject key identifier:   E3:F4:64:10:47:D5:70:11:6B:3F:FE:65:83:56:E4:63:ED:75:D3:A3
Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD
Certificate issuer:       /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
Certificate serial:       0C69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
Manifest number:          0C5B
Signing time:             Sun 01 Mar 2026 23:33:26 +0000
Manifest this update:     Sun 01 Mar 2026 23:33:24 +0000
Manifest next update:     Sun 08 Mar 2026 23:33:24 +0000
Files and hashes:         1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: EYq+DFrecz8lis2pbL7DspjaH0g3+tisA5QSK0S1KAo=)
                          2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: ZcISEGiaB/jFI6HeqS8u3lzztS1THprIXlb2DwXWRqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl
                          rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3177 (0xc69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
        Validity
            Not Before: Mar  1 23:33:24 2026 GMT
            Not After : Mar  8 23:33:24 2026 GMT
        Subject: CN=69a4ccc6-03ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:89:35:c7:7e:46:c2:93:82:86:4e:56:ac:0a:
                    fb:10:36:78:72:03:b9:a4:91:06:69:dd:c1:ea:6b:
                    6e:56:44:c7:ad:09:80:c2:5d:b0:57:c3:cd:2d:3c:
                    ed:77:38:26:ea:70:0f:bb:a3:29:68:c2:b0:38:04:
                    f2:98:06:bd:20:b6:a2:05:ba:0c:1b:7c:f6:75:49:
                    bc:5c:ff:b4:1e:29:1e:fe:19:cc:59:92:e3:02:03:
                    87:c5:ce:c6:68:19:b6:7d:8f:12:20:10:8c:43:13:
                    b1:2b:84:66:b4:9c:90:15:1e:19:f2:eb:23:a7:ca:
                    28:30:d9:8b:45:a9:9d:3a:f2:7a:65:30:0d:d1:e8:
                    d0:bb:30:14:db:83:11:13:1d:d9:c0:6b:b1:02:db:
                    69:d4:5b:2d:59:ef:90:40:ce:a9:39:dd:d0:4b:a3:
                    90:0c:d8:29:95:c2:52:f1:5b:c2:e5:44:7f:0e:3b:
                    b8:b9:24:fa:a8:82:e1:ea:a0:5c:b8:de:aa:32:3d:
                    36:26:cd:76:ef:40:7b:b0:34:ec:25:b3:52:dc:fa:
                    77:78:95:0a:29:f4:11:3f:84:7b:8d:95:3f:b5:19:
                    2a:da:e6:24:e3:e9:de:1b:3f:cc:8a:95:5a:9c:d3:
                    dc:e7:0a:3c:b3:04:99:64:3c:16:5c:83:0e:b2:ff:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F4:64:10:47:D5:70:11:6B:3F:FE:65:83:56:E4:63:ED:75:D3:A3
            X509v3 Authority Key Identifier:
                keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:3c:0d:ca:34:e9:67:3f:c5:d0:46:3c:18:a0:54:45:df:
         b0:e7:d8:5f:ed:85:ee:19:f3:80:b3:a0:3a:4e:47:42:7d:50:
         50:6b:e0:2c:d9:63:ed:ea:c9:96:57:ea:fa:9d:f2:c7:f5:ea:
         01:f3:0d:c2:40:ed:7b:ea:53:70:5e:4c:1e:11:06:89:d1:42:
         53:30:2f:06:af:e2:8b:17:80:c8:c6:80:02:56:bf:eb:c4:9e:
         b2:cd:92:e1:a8:0b:38:da:e6:41:8f:09:22:6e:d3:b2:14:07:
         9e:07:d5:e1:db:5d:1b:e6:82:21:c9:e0:87:80:64:e5:24:a6:
         c8:e0:64:dc:f1:8a:3e:94:96:e0:a0:f3:b8:2b:30:b7:93:2f:
         e1:f7:b6:44:4f:08:b9:ed:d7:f3:89:94:11:e2:d2:6e:62:0c:
         aa:02:df:5c:37:1e:a2:cb:ac:78:38:cb:ab:bf:3a:be:d7:c9:
         14:c4:24:dd:bc:59:25:a5:14:a9:b8:78:e3:22:13:35:9e:55:
         8f:07:48:39:a0:c0:33:04:e3:e0:6d:af:8c:a3:00:ab:21:84:
         21:15:2a:6c:c7:4f:10:fc:95:64:42:1b:10:23:dd:1f:4f:91:
         68:d6:af:e4:7f:95:77:d2:ff:dc:c4:c6:8e:94:b2:6e:dc:b8:
         98:c6:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:25 2026 by rpki-client