Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
File:                     GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json)
Hash identifier:          VunW3Zi2rAcmO1rRsRC5LsJE366p/W7LiQTgnP8LlVg=
Subject key identifier:   CE:79:00:B9:C0:5C:3F:AD:50:B0:F4:33:D1:54:B1:6E:32:FE:29:8F
Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C
Certificate issuer:       /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
Certificate serial:       02A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
Manifest number:          029C
Signing time:             Sun 19 Apr 2026 01:23:38 +0000
Manifest this update:     Sun 19 Apr 2026 01:23:37 +0000
Manifest next update:     Sun 26 Apr 2026 01:23:37 +0000
Files and hashes:         1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: hNUxICSyh+DxrTS776UL8eKwbzgyiuu+m9yLHuZdJd8=)
                          2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: OIapcLyZFM+hQRAVWMttZwkt/KgLVw6oa519ZpxWQ4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl
                          rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
        Validity
            Not Before: Apr 19 01:23:37 2026 GMT
            Not After : Apr 26 01:23:37 2026 GMT
        Subject: CN=69e42e9a-b772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:22:d7:53:17:08:53:a7:c3:67:bb:95:56:26:
                    8c:d3:6c:39:f9:64:b0:4b:ee:fe:b3:a8:36:5a:2c:
                    bd:21:93:73:1c:a1:4b:46:ea:76:6a:20:ad:5e:c6:
                    12:6b:53:b7:77:14:c2:95:3c:81:75:52:15:b7:64:
                    22:de:03:53:d1:1b:3d:b3:9b:86:63:88:3c:c1:ce:
                    6b:2b:81:d8:94:0c:17:61:78:78:f6:94:d9:ce:83:
                    f4:f8:66:30:88:d8:99:96:ab:32:54:50:8e:4f:4a:
                    8d:65:c9:ef:1c:25:2c:f2:7b:90:9b:ba:25:95:f8:
                    1f:50:19:7a:eb:aa:72:a7:c3:43:0a:a4:53:9a:b2:
                    1a:7d:dd:40:18:76:5f:d0:74:83:fd:22:e1:7f:a7:
                    38:20:bb:bb:39:3e:f9:91:fb:dd:d1:ce:1b:ed:cf:
                    49:fa:eb:3d:e9:52:ba:36:76:fb:5e:b7:ff:73:c1:
                    60:2f:bb:52:18:06:98:70:40:98:9c:12:0f:1a:6b:
                    50:4f:13:df:95:36:7c:35:08:8f:56:ae:00:24:66:
                    ff:d0:b6:bf:7e:2a:e4:fe:06:fe:5e:77:9c:fb:dc:
                    32:61:73:53:4a:ac:04:4c:87:d2:34:e4:d2:c0:8d:
                    1d:2d:82:49:7d:20:bd:eb:4b:89:82:6f:f1:44:eb:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:00:B9:C0:5C:3F:AD:50:B0:F4:33:D1:54:B1:6E:32:FE:29:8F
            X509v3 Authority Key Identifier:
                keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:13:13:4a:4f:79:e0:80:c1:f0:19:7a:7d:fa:7b:ab:95:
         ef:77:0d:8b:a0:8a:66:2e:5c:c2:a3:2c:cc:08:0a:c6:54:56:
         31:ae:29:93:38:42:2f:b4:ed:c8:4d:de:e6:6b:39:2f:f7:a5:
         a7:13:af:b6:30:ab:e8:ba:97:ab:d0:3e:46:5e:ce:24:b8:f8:
         a2:6b:80:75:de:be:83:40:15:17:66:e3:ff:3f:d6:6c:a1:c6:
         44:cb:1f:c0:e9:a8:5f:fc:5f:96:65:69:d6:90:40:8f:6d:86:
         24:cf:d0:9c:a5:6f:fd:bb:29:59:f7:bc:6b:fe:57:85:9f:71:
         7e:32:1d:a4:c1:90:75:4c:8e:92:70:51:2f:81:d5:3f:f3:03:
         1c:99:f2:32:a0:2c:e4:8d:ae:d4:70:70:21:18:20:89:ee:01:
         2a:11:12:e5:d4:77:c6:17:63:76:44:27:e3:10:80:79:74:25:
         1d:98:57:36:cf:b7:d0:cc:cb:dc:59:b0:77:8b:67:1e:5d:b9:
         a6:40:ca:1e:6e:06:eb:43:cf:ec:7f:30:0b:22:a3:33:88:bf:
         b9:00:6f:99:a1:f8:4a:ea:a5:53:d6:f6:bd:5d:4c:2e:9c:88:
         72:22:3a:16:b0:3a:47:06:c3:42:e8:a7:4e:1d:0c:32:1c:46:
         d5:5a:1a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:44 2026 by rpki-client