Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
File:                     GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json)
Hash identifier:          VtjiWzg2Do+YGVPk+WTQaYJBMOtj5Bmm2amRZL0Rcnk=
Subject key identifier:   F9:1B:56:41:B1:39:57:B4:D8:9A:C6:A7:C3:0A:DF:40:30:08:D1:7B
Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C
Certificate issuer:       /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
Certificate serial:       028B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
Manifest number:          0283
Signing time:             Sun 01 Mar 2026 22:40:15 +0000
Manifest this update:     Sun 01 Mar 2026 22:40:14 +0000
Manifest next update:     Sun 08 Mar 2026 22:40:14 +0000
Files and hashes:         1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: GtPO0Nd/Mq8fOANKQsCxCswgz60Pd8NHudAJf6OPDjM=)
                          2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: OIapcLyZFM+hQRAVWMttZwkt/KgLVw6oa519ZpxWQ4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl
                          rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
        Validity
            Not Before: Mar  1 22:40:14 2026 GMT
            Not After : Mar  8 22:40:14 2026 GMT
        Subject: CN=69a4c04e-f44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:ac:72:1c:a3:87:d4:54:33:5a:08:b6:41:
                    34:3c:fb:18:ca:d4:68:ae:b7:0e:8d:72:29:7d:2f:
                    a7:26:55:e3:09:ae:d2:c8:78:96:c1:a9:47:5a:df:
                    7d:35:5b:b4:8b:74:24:0d:61:8c:e4:fe:d6:a4:20:
                    da:54:64:a7:f9:36:4c:fd:d5:4b:ce:58:33:a6:ca:
                    49:1a:7e:7b:d3:a9:50:cc:c1:3e:11:5d:b0:be:75:
                    af:cf:90:42:2c:c0:14:13:ab:ef:04:b5:12:fb:a0:
                    dd:e8:33:e0:4d:14:cc:31:12:73:68:7a:9c:47:8c:
                    6b:0b:be:12:22:0a:1d:cb:07:5a:b8:ff:7e:e1:87:
                    cd:c6:2b:14:94:72:a3:92:5c:4f:25:84:0f:1f:0d:
                    21:25:be:fa:bd:27:ef:a0:83:b9:b5:84:7e:b0:43:
                    bb:b2:e3:db:41:51:16:89:7a:1a:12:6c:e3:1c:71:
                    67:f3:73:04:b2:b2:de:db:e8:6a:bc:77:0c:fd:b8:
                    68:43:d1:d3:c5:37:78:11:b8:88:22:a6:02:a0:2b:
                    f0:cf:0a:c1:33:67:77:a9:c5:cb:53:7a:d6:e1:25:
                    95:23:46:cb:1c:3d:b3:b4:92:d3:b2:c6:4d:0d:0c:
                    8a:61:c5:e1:ca:57:e4:2d:c5:98:df:3b:3e:1d:bd:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1B:56:41:B1:39:57:B4:D8:9A:C6:A7:C3:0A:DF:40:30:08:D1:7B
            X509v3 Authority Key Identifier:
                keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:b8:7d:cd:4d:80:8c:c3:59:fd:a5:2c:5b:97:3f:b2:21:
         3f:f2:d7:c0:e2:0e:6b:23:83:83:9b:4e:07:2f:77:2b:41:0a:
         57:6e:5f:60:fc:45:c3:90:bf:2a:4f:1f:5a:54:6f:0b:ec:e7:
         27:04:e7:4a:bb:2b:d3:c6:15:71:c2:7a:df:36:c8:7d:03:73:
         5c:80:8b:eb:ba:79:eb:51:99:2b:d3:37:09:5d:c8:58:9a:4f:
         20:5f:cc:de:63:49:10:71:9c:15:d0:e2:55:60:58:5c:1e:3d:
         a4:ad:9f:64:39:03:8e:ad:07:63:06:c0:f4:9a:0c:30:9d:ed:
         a5:ac:59:21:64:e9:11:ee:3f:68:75:71:21:41:54:06:de:d5:
         4e:35:56:83:5f:dd:5b:18:2e:a9:4c:a8:a0:ce:26:cb:c8:81:
         7b:95:d8:da:4b:91:a2:0a:cf:53:06:0c:f3:90:54:e8:62:00:
         85:82:18:d6:30:7d:d7:f5:a3:ee:75:a4:37:f3:84:ff:c1:3b:
         89:17:9e:d3:bc:94:78:c1:eb:d5:43:ae:78:a3:66:af:f5:88:
         f7:63:10:27:30:b5:c3:0e:fc:e1:a3:bf:7a:05:aa:9e:98:b1:
         12:fc:6b:33:5b:fb:89:0b:7a:fd:d4:56:a6:62:3d:bc:62:12:
         83:af:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:20 2026 by rpki-client