Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
File:                     gSJD5rXQ3hGucMcns50fIeOurAM.mft (raw, json)
Hash identifier:          3J+FSB3MGZ9dM1ztWpQG4TDyisK6vEewYEfm1kAdpZs=
Subject key identifier:   57:60:51:A3:B2:74:5A:C5:31:7F:1A:F7:E3:DF:FB:38:2A:BF:7C:1E
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Certificate issuer:       /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
Manifest number:          012E
Signing time:             Sun 01 Mar 2026 06:36:28 +0000
Manifest this update:     Sun 01 Mar 2026 06:36:27 +0000
Manifest next update:     Sun 08 Mar 2026 06:36:27 +0000
Files and hashes:         1: gSJD5rXQ3hGucMcns50fIeOurAM.crl (hash: kBhVQe7W1YcnNIMde74oLelJovh2dwJ3wEaTw9MR0dA=)
                          2: 546C4C7C4E1911EFA1FB9E57C4F9AE02.roa (hash: IGD/nUTNGHPyuAjXeELESWHybLe2c2lWOrT+ME6IDwg=)
                          3: B02CCB344E0C11EF9175067FC4F9AE02.roa (hash: B07v/r28GGPExOvdtIgZQOaQqr8pYN3jGjnhD5+9r68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
                          rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
        Validity
            Not Before: Mar  1 06:36:27 2026 GMT
            Not After : Mar  8 06:36:27 2026 GMT
        Subject: CN=69a3de6c-27d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:a4:73:6e:14:06:f9:ff:7b:36:44:4e:13:
                    e0:84:9f:95:75:56:fe:da:9f:16:fa:73:c4:1b:cd:
                    3c:c2:42:5c:bf:c3:9b:43:a1:0e:80:73:f2:04:46:
                    f1:3d:f5:42:1c:59:a5:a6:12:15:7e:3f:1d:90:4d:
                    4a:32:14:d5:1c:ff:76:48:31:45:9f:ed:bd:c9:46:
                    d2:b5:62:d6:58:80:f5:01:f8:fb:3f:ef:ba:52:52:
                    cb:2a:80:92:b9:3c:29:2d:92:2d:81:8c:c9:d7:b3:
                    88:b1:42:33:e3:8f:81:c0:86:ff:ea:5f:37:7e:11:
                    92:7c:79:0b:a8:8f:f3:23:8e:1d:a2:07:c2:73:e3:
                    e2:60:46:c6:47:e6:7b:34:d6:83:82:96:dc:dc:52:
                    ae:8a:39:6b:51:d0:89:3b:8a:17:a0:26:18:92:1b:
                    8f:98:42:34:b4:0a:4a:6d:d1:8b:5e:f0:39:38:86:
                    ab:7a:d9:53:43:da:36:20:c3:ea:57:d0:05:94:91:
                    7b:b5:1b:bf:06:ac:74:a6:3f:3b:01:28:fd:94:bb:
                    a2:ea:79:05:d4:30:53:77:f6:be:f3:2a:b4:57:d9:
                    45:3a:b3:e4:41:e6:e3:28:b5:a6:9e:af:be:80:29:
                    b0:cd:22:bc:c7:8c:70:ad:bc:e8:33:84:e2:ce:37:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:60:51:A3:B2:74:5A:C5:31:7F:1A:F7:E3:DF:FB:38:2A:BF:7C:1E
            X509v3 Authority Key Identifier:
                keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:25:2a:f9:6e:26:8d:e5:2f:07:0e:49:87:f0:75:b1:1b:38:
         96:c0:55:2f:08:ff:cc:35:63:cc:ec:c4:01:c0:d1:e1:f0:29:
         24:7b:39:0b:db:77:99:53:a8:04:a2:44:e0:5b:44:d3:23:b0:
         1d:d3:7f:cd:c9:99:1f:90:fb:b4:6d:61:6b:7e:67:b6:04:0b:
         73:66:ab:d2:81:1e:45:f7:18:7d:89:e8:6e:95:88:79:55:a2:
         d3:92:8d:38:fc:25:e5:94:0f:3b:df:8e:ac:35:67:7c:02:04:
         dc:73:e9:8f:10:8d:fa:26:67:1e:0a:ef:5c:8b:3f:d1:7e:9d:
         99:32:6e:22:fb:a0:3a:37:e0:7e:68:e3:db:4b:e6:d1:fc:a4:
         36:dc:c4:07:25:cd:f5:bc:15:5c:37:f3:5f:b5:95:a7:2f:4b:
         98:38:0f:0e:04:89:4b:04:8a:25:6a:c3:c1:df:e3:b2:a0:60:
         65:80:5e:1a:6b:56:23:64:21:1a:55:a0:c7:97:7b:2f:d6:52:
         10:69:8f:7b:a5:1e:e9:e8:67:ba:f9:02:ab:49:77:5d:c0:e5:
         ea:07:07:5c:e2:bf:6e:50:56:51:7f:cd:ef:65:4c:d2:f4:f3:
         40:b0:60:5f:24:47:46:3a:d7:a6:82:a7:e7:f6:c7:b1:c4:f6:
         94:12:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:33 2026 by rpki-client