Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
File:                     zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json)
Hash identifier:          gfVBrANsIy6aqUFiBGEVbEHwLYQ01Opm60ge8Vi2/wM=
Subject key identifier:   33:17:E2:16:BC:52:79:A5:41:9C:5A:19:DE:D3:1F:94:D7:BC:2F:D6
Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8
Certificate issuer:       /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8
Certificate serial:       082D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
Manifest number:          0825
Signing time:             Sat 18 Apr 2026 20:54:17 +0000
Manifest this update:     Sat 18 Apr 2026 20:54:16 +0000
Manifest next update:     Sat 25 Apr 2026 20:54:16 +0000
Files and hashes:         1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: gtOeBj7Zin5YGc4IzqurR0UMc/38iYwIwr5X6uOaBpo=)
                          2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QLTfJIXHekXFtibNVc4Q+2innR3VNQ5N9hMeUx/Akls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl
                          rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 20:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093 (0x82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8
        Validity
            Not Before: Apr 18 20:54:16 2026 GMT
            Not After : Apr 25 20:54:16 2026 GMT
        Subject: CN=69e3ef79-2ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:14:ed:e0:d8:ee:f4:24:f9:18:31:8e:e0:
                    95:d0:85:44:7a:36:ac:ef:5d:15:53:27:37:af:a6:
                    a9:15:f3:39:f3:b0:b7:89:0a:47:ae:e2:fd:75:93:
                    bb:98:95:a7:45:a8:56:61:bd:8f:83:4d:65:61:ea:
                    b7:8a:5c:d4:f6:eb:dd:42:ad:91:7f:e4:de:95:78:
                    9e:b8:09:f4:c0:ea:af:8c:83:1f:00:9a:80:6d:9a:
                    c5:f8:0c:d3:53:f7:5c:3d:06:8b:87:5b:55:86:0c:
                    7b:68:c5:02:8f:b3:a9:ae:5d:df:57:10:64:3c:71:
                    56:61:80:11:82:4f:da:c5:f0:0c:27:d9:4e:6a:b4:
                    84:be:c1:2f:3a:90:9a:29:e1:a5:87:e9:75:4b:84:
                    6d:19:1f:0b:92:06:f1:58:9b:da:35:11:ba:95:25:
                    5e:d8:db:90:26:ee:52:f9:4b:38:5f:9a:55:25:d5:
                    c9:bf:a3:7b:d0:50:b8:72:3d:d2:46:12:1e:b1:55:
                    83:2e:9f:96:10:0c:4f:e9:91:12:6c:10:65:f4:07:
                    2a:87:07:d8:d2:fb:a6:c5:9e:81:5e:2a:a6:e8:75:
                    31:ef:f6:69:83:f9:aa:6d:8f:5a:78:4a:37:1e:51:
                    cb:f0:af:b5:39:43:5b:a9:9f:f9:b6:26:ee:09:41:
                    0f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:17:E2:16:BC:52:79:A5:41:9C:5A:19:DE:D3:1F:94:D7:BC:2F:D6
            X509v3 Authority Key Identifier:
                keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:c4:f8:7b:4f:d3:cb:3b:2d:c7:65:91:40:25:11:d5:be:
         5f:20:88:ae:4b:c4:6f:99:fa:f1:6e:ce:a7:43:cc:5e:e2:b6:
         d0:d9:fd:ff:f6:8d:c0:91:82:d8:d5:08:00:ff:02:c8:59:b1:
         0d:8c:2a:aa:0e:24:9f:b1:9f:47:85:a2:16:ba:55:79:41:e9:
         80:bd:f6:50:c9:95:78:d4:4f:d2:df:99:0b:27:f9:fd:89:4e:
         53:54:69:fd:29:1f:65:1a:24:50:15:6f:fd:d0:ae:b1:19:dd:
         f5:8d:a9:8f:f1:1d:8f:8a:c7:36:1d:62:5e:53:51:6e:ba:5d:
         3b:3c:5b:cf:1f:41:c4:20:02:86:b4:ef:c8:07:7c:36:ab:1c:
         6c:09:6f:25:95:8c:eb:8f:3a:98:23:61:c3:24:32:3c:30:53:
         65:02:12:e4:15:25:40:6b:e0:38:da:35:52:e8:97:8e:42:a9:
         a8:aa:37:92:63:a0:09:20:90:e9:a5:c5:77:4f:c2:77:e5:ed:
         04:11:92:fa:39:e4:23:3b:9c:88:05:2b:77:f5:b9:e8:06:4e:
         30:8c:9b:36:a9:a3:cb:24:86:7d:ec:ba:16:9a:9c:85:50:76:
         7d:7c:7a:fb:f6:2b:62:70:60:22:e9:8f:68:94:17:b8:37:e7:
         e2:db:37:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:09 2026 by rpki-client