Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
File:                     gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json)
Hash identifier:          rwbebVRcV6js7T0qrQ1cYMnf7nKVTIfBpsNIsjpd+LY=
Subject key identifier:   63:90:40:E3:AF:C5:1D:A2:36:1E:E2:E6:47:14:A5:55:E7:A1:B6:C6
Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
Certificate issuer:       /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
Manifest number:          79
Signing time:             Sun 01 Mar 2026 09:05:21 +0000
Manifest this update:     Sun 01 Mar 2026 09:05:21 +0000
Manifest next update:     Sun 08 Mar 2026 09:05:21 +0000
Files and hashes:         1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: xNPnB3OlQid/gJrt1bFtgWYMF2RCALLSr+bMovYjpkM=)
                          2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: eC+Ca7N9y7VnPMiNtCOnwDbBNDTPawuOGNwqU/JVjQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
                          rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
        Validity
            Not Before: Mar  1 09:05:21 2026 GMT
            Not After : Mar  8 09:05:21 2026 GMT
        Subject: CN=69a40151-3124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:b3:f5:6b:b7:4d:e7:f1:00:7c:9b:f5:c4:
                    5e:eb:8e:a6:ef:bd:3a:18:8f:bf:3f:f5:bc:12:11:
                    61:04:0a:14:11:1e:49:cf:fe:a0:76:d5:38:8b:76:
                    af:0d:a7:5d:5a:64:ce:82:09:65:aa:96:f6:c8:4a:
                    52:bc:42:4d:0c:d7:d6:62:ec:db:7b:d4:b2:89:bd:
                    2e:e1:fd:1d:5e:01:ba:55:0b:66:9a:a0:bd:7f:b6:
                    03:da:3a:28:8d:a3:11:d5:e4:5c:25:90:6a:26:4e:
                    f3:f5:e3:e8:77:78:c7:b7:85:47:9a:f9:58:de:f9:
                    35:36:c2:a5:c5:f4:57:a3:d0:ab:1d:f6:00:be:2d:
                    06:69:49:14:fc:54:c8:7a:b4:ec:d3:c8:a8:61:6a:
                    44:7c:73:c6:56:75:d9:82:90:51:3e:9b:11:04:01:
                    3c:86:bb:c4:bb:2c:48:96:23:18:4f:19:8c:8d:53:
                    af:be:4f:9e:43:a0:0f:7c:c4:bf:7d:6f:aa:2f:ed:
                    0a:98:bd:a6:14:fd:7b:e9:2e:9f:1e:90:8e:c8:da:
                    62:81:1a:5f:b9:4f:3f:3a:d1:8d:93:1d:f2:30:7f:
                    a6:2e:01:62:30:61:6d:5e:53:18:1a:4c:4b:8d:36:
                    33:c0:ee:cc:1d:ea:f4:d0:19:58:cd:41:0a:7c:83:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:90:40:E3:AF:C5:1D:A2:36:1E:E2:E6:47:14:A5:55:E7:A1:B6:C6
            X509v3 Authority Key Identifier:
                keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:da:69:03:96:b2:49:6f:b6:20:28:19:1b:65:88:72:fc:53:
         10:fb:c3:a7:77:c2:79:64:16:60:4e:e6:0e:92:c9:2b:ee:5c:
         70:6a:bd:da:0e:2e:ce:e6:53:16:65:d3:8b:51:84:c0:e3:c5:
         6e:22:43:cc:1e:65:e5:74:f4:aa:30:7a:d1:eb:0f:01:39:fc:
         21:47:10:e4:31:c8:74:d7:5e:70:fb:00:2f:da:f8:8d:a3:9d:
         a7:0c:24:72:8a:39:75:78:32:97:c3:39:3a:3e:5c:7c:e6:02:
         1c:31:6c:fb:1e:aa:9a:9c:a7:de:d6:4a:53:96:d1:54:10:94:
         06:3f:cd:8e:f0:59:43:05:b7:73:b8:3a:fa:96:d0:23:76:69:
         48:60:35:e0:3a:0c:52:b2:cf:14:f9:9a:9a:4b:68:22:7e:6f:
         76:12:34:71:f7:c9:d3:46:8d:de:dc:5d:46:7a:03:4d:6a:37:
         a2:99:b1:fe:99:f1:70:12:d6:74:62:8d:a9:01:23:b6:03:6f:
         eb:4e:89:ec:a9:75:88:db:82:31:02:a5:d6:be:ba:d2:81:8e:
         3c:19:11:4b:f5:c7:55:7c:dd:e9:50:90:72:91:43:74:47:8a:
         f0:a7:62:38:e5:5d:19:a8:8c:63:60:85:3b:33:64:ff:8a:77:
         01:87:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:31 2026 by rpki-client