Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
File:                     -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json)
Hash identifier:          3EBU3IMFzqyZTLH2XYlnIp+bHlrxIeXYbbWOnxlO5Fo=
Subject key identifier:   39:9A:86:4A:8D:FE:0B:43:5D:C8:7E:A2:B6:D8:2F:31:D9:1F:D5:37
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Certificate issuer:       /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial:       0472
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
Manifest number:          0466
Signing time:             Sun 01 Mar 2026 14:22:43 +0000
Manifest this update:     Sun 01 Mar 2026 14:22:42 +0000
Manifest next update:     Sun 08 Mar 2026 14:22:42 +0000
Files and hashes:         1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: ls+73MOYt5bN2nRBd3Ad/74L/TIGNkKrdq3urBztnd8=)
                          2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: y9AWX9pr7/40gfTliDeYcrWRNr/D4ngulxUgREVk2K4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
                          rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
        Validity
            Not Before: Mar  1 14:22:42 2026 GMT
            Not After : Mar  8 14:22:42 2026 GMT
        Subject: CN=69a44bb3-4e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:ec:92:be:2c:5b:06:15:e0:54:c3:a3:a6:
                    4d:c8:80:f3:0d:ea:d1:6b:d8:f5:33:a0:67:2f:d3:
                    1b:36:51:89:68:1f:6c:e9:18:4d:a0:a1:6a:cc:43:
                    d2:e3:a4:f7:3d:e0:78:0d:31:53:1b:13:05:cc:90:
                    2c:44:c9:46:af:4d:75:5a:81:10:a0:f8:48:04:cb:
                    b3:35:ad:ac:c3:20:9b:e2:1c:dc:e2:f2:d2:37:ec:
                    18:2f:0e:83:0c:e8:3e:9c:6c:42:35:2b:06:9f:5f:
                    11:5c:69:6d:ca:61:2c:66:bd:22:e7:69:56:05:58:
                    a8:5a:3b:bf:ef:96:02:2f:41:6d:e2:a3:89:aa:c2:
                    c9:f4:d7:99:2a:3e:93:3d:03:45:b0:00:dd:3f:71:
                    26:42:9e:e5:8e:be:88:2f:c2:fc:a0:b3:cc:ac:77:
                    5b:02:86:a6:d7:bd:62:e3:da:b5:47:88:65:51:e9:
                    69:b8:87:4b:28:5d:9f:91:6a:2d:33:90:42:ce:2f:
                    f6:12:88:05:54:22:c9:9a:84:9e:3f:f4:2a:d9:e4:
                    de:f0:ef:6b:ec:39:ca:42:98:99:ff:18:8a:82:39:
                    90:ef:cc:4a:3a:f9:a0:38:1b:9f:bb:97:3c:76:d9:
                    70:8e:58:cb:a4:c3:38:5e:17:70:fe:5e:95:22:11:
                    9d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9A:86:4A:8D:FE:0B:43:5D:C8:7E:A2:B6:D8:2F:31:D9:1F:D5:37
            X509v3 Authority Key Identifier:
                keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6a:61:6e:36:2c:7f:c3:3b:e4:b5:d5:13:ca:83:a6:ab:a2:
         a5:b9:55:42:60:f3:5a:59:18:a3:b5:f7:ca:98:4d:54:ec:2b:
         f1:b8:5c:62:98:90:0a:6c:ad:ff:bc:a2:e3:f6:55:30:84:9c:
         4c:51:57:f2:4e:40:8e:29:92:b3:2d:6c:aa:b6:bc:a3:80:0e:
         33:c5:7c:51:a5:3d:4b:0b:23:90:ba:3c:f3:c8:96:49:75:44:
         64:54:1a:16:c7:df:0b:57:24:85:83:57:4d:31:c1:07:8f:c0:
         92:20:25:f4:65:0a:ac:7a:9a:bb:71:c6:de:2c:b8:38:6e:f2:
         1b:92:c0:a1:eb:56:8f:b8:c4:7d:88:08:87:ee:54:3a:b2:17:
         a1:55:d7:1b:89:e2:31:35:ac:4b:a4:36:03:75:c7:e6:eb:e8:
         b9:6b:ab:19:df:3f:5e:f8:99:95:1e:c4:87:76:b2:5d:f1:6c:
         b4:9c:c1:a9:35:ae:55:61:41:bc:aa:e6:d4:21:68:fa:88:45:
         07:b3:65:4f:9f:ff:4a:45:70:00:e2:40:41:72:92:aa:be:3f:
         f8:94:20:0f:af:86:65:19:91:65:50:78:44:65:9c:3e:d2:5e:
         76:91:06:2c:f1:f1:09:5a:fc:55:b0:af:0c:9b:c9:c3:85:28:
         73:10:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:47 2026 by rpki-client