Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
File:                     gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json)
Hash identifier:          7BVfMf/2d4Su/NVP/MJ3BK0FHPcjo2BLGCS6qFF0fwc=
Subject key identifier:   9E:4A:85:A6:AC:BA:E8:CE:9C:E1:30:51:10:CD:AA:27:8A:3D:76:0F
Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
Certificate issuer:       /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Certificate serial:       0630
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
Manifest number:          0625
Signing time:             Thu 16 Apr 2026 22:43:27 +0000
Manifest this update:     Thu 16 Apr 2026 22:43:26 +0000
Manifest next update:     Thu 23 Apr 2026 22:43:26 +0000
Files and hashes:         1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: 9A42jhbgFBzGwAhUCcq7wwBB+sA4+Hs3Nqx1MdwIBqQ=)
                          2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: RNOiyIzbKTB4ZVG6uJRWT45MJtr9H4xdATELouVGdxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
                          rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
        Validity
            Not Before: Apr 16 22:43:26 2026 GMT
            Not After : Apr 23 22:43:26 2026 GMT
        Subject: CN=69e1660e-48b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0c:ce:5a:2e:77:8d:e4:1e:65:ac:35:f5:a5:
                    40:3b:01:35:76:ad:cb:88:dd:c2:ec:cb:f5:4a:c3:
                    a5:16:d2:83:db:ae:fd:7f:7d:e2:80:88:c3:05:ab:
                    f4:fa:3b:33:28:3d:ab:b5:f3:df:5d:c1:cd:a0:84:
                    2b:33:1f:2d:ee:65:1c:f8:c3:d5:44:79:0e:3f:64:
                    b6:ef:82:28:13:d3:c2:f0:a0:3d:45:a2:c2:78:cb:
                    92:0a:86:60:3d:a4:c0:2e:c3:60:33:75:b8:d3:24:
                    e9:b8:80:f9:ac:dd:1e:8c:a0:e0:59:fc:9a:99:ed:
                    f3:a4:60:1b:f0:24:5a:0e:9d:25:96:2b:55:dd:73:
                    86:45:ed:e9:cf:d1:96:37:b6:7a:68:13:97:41:ac:
                    87:c0:f3:fb:66:d8:5f:00:98:38:3a:2a:dc:f9:25:
                    ea:7b:cd:da:08:9e:19:23:91:31:6f:04:67:43:46:
                    c7:e5:65:77:d8:f2:9f:8f:38:ac:f6:bf:c9:0b:ac:
                    e4:d9:83:4d:40:15:95:23:5e:80:f6:ba:d0:6f:59:
                    71:f2:44:4c:fe:0c:69:ca:5c:a8:1b:bf:98:6e:a5:
                    e5:d8:31:06:e3:e5:8c:f3:cc:fd:19:1c:ba:90:ca:
                    12:41:ef:89:86:6a:23:c5:92:2a:db:3f:38:2b:95:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4A:85:A6:AC:BA:E8:CE:9C:E1:30:51:10:CD:AA:27:8A:3D:76:0F
            X509v3 Authority Key Identifier:
                keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:e4:20:7a:2f:f0:6a:72:ef:d9:67:f8:cf:c4:cb:c0:3f:
         11:ea:c7:e1:a3:11:3d:de:d0:b3:1b:2c:18:ee:63:f2:b9:a8:
         86:a9:5b:a5:72:9c:e6:1c:53:1e:bb:5d:ff:94:a4:2f:11:85:
         c0:44:04:ed:4e:7e:b5:7f:b0:d0:9d:f6:dd:d9:a4:b0:d2:8a:
         4b:98:41:27:52:34:de:9f:9b:d6:a7:19:39:19:a1:5c:29:52:
         ac:c8:20:86:f4:4d:88:b7:09:50:d5:e2:65:97:cd:c5:d7:a5:
         17:2c:cc:2e:36:71:24:2d:bb:6e:33:38:bc:6d:c6:66:ea:d3:
         8a:ea:97:3b:57:cb:44:cd:47:15:6b:08:e9:41:97:ce:80:82:
         3b:8e:c6:a4:a7:f0:a8:99:81:e4:1a:fc:36:be:30:b6:58:54:
         af:60:ff:3e:ff:1e:1b:cd:90:8c:c5:9f:b8:52:ff:57:7f:93:
         24:fe:cb:4a:e6:a3:b5:35:77:c8:de:df:75:2b:34:6d:36:84:
         73:da:94:00:c8:73:aa:67:11:ea:9e:fb:a5:b3:d7:9a:eb:05:
         87:c9:fe:f1:14:1c:12:23:90:ad:d7:5c:28:52:e8:db:b5:23:
         c6:03:8d:22:83:7a:78:d8:be:2a:17:8e:a6:c2:0b:f2:a4:e4:
         20:e3:de:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:08:20 2026 by rpki-client