Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
File:                     gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json)
Hash identifier:          x4d2PeV+2Sw62+TvTGyP00ZtSKyjkmub5F4rUSPDWQQ=
Subject key identifier:   73:88:41:99:DC:63:4D:65:5D:B2:C8:1B:69:89:84:D4:22:20:17:FD
Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41
Certificate issuer:       /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41
Certificate serial:       0BC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
Manifest number:          0BAC
Signing time:             Sat 28 Feb 2026 19:17:08 +0000
Manifest this update:     Sat 28 Feb 2026 19:17:08 +0000
Manifest next update:     Sat 07 Mar 2026 19:17:08 +0000
Files and hashes:         1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: 0og28zLJOpoaIM0yu75m3HUo0NiukPF1y0P+EMM4YlQ=)
                          2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: cgyiI2kl1gPRAyy5DRyl604N/9Qi28VjLJjN+yXH9a8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl
                          rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3008 (0xbc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41
        Validity
            Not Before: Feb 28 19:17:08 2026 GMT
            Not After : Mar  7 19:17:08 2026 GMT
        Subject: CN=69a33f34-6514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:e8:f8:4c:9a:f5:64:9b:1f:26:9f:1c:10:
                    a6:36:47:77:de:97:ca:10:ad:a4:e2:b1:80:f1:12:
                    b4:e0:35:73:0e:4d:a4:97:07:10:07:b9:cd:1a:a1:
                    0a:80:71:87:fa:61:71:67:f5:6a:14:b2:4c:cc:bf:
                    dd:0e:d6:8c:b0:6a:ed:d5:61:47:b7:08:08:59:89:
                    9e:e3:51:e9:f6:91:c7:90:64:4a:27:03:c5:ad:18:
                    7a:b0:06:51:d9:01:91:38:46:59:e2:23:ec:0e:87:
                    45:3d:3b:1a:6f:df:c3:f1:74:81:53:a8:48:4b:b7:
                    22:d6:e3:d9:86:0e:50:71:d9:88:10:5b:e5:56:d8:
                    55:03:92:66:5e:28:2c:39:dd:a7:ef:d5:29:60:53:
                    3a:4d:d2:94:e5:88:25:32:0f:dc:7f:77:64:6a:41:
                    dc:c9:b2:e5:fb:b1:6f:52:e1:7b:b3:56:de:b1:f0:
                    65:7e:e3:89:a6:e0:24:3b:d7:90:87:64:90:06:70:
                    bb:ae:4e:87:09:56:e9:23:0d:0a:00:fe:ee:9e:cf:
                    46:d1:a8:e1:71:df:47:0f:d7:86:74:b6:60:76:80:
                    4c:4c:d8:16:36:7b:e7:b8:6a:e1:da:81:71:ec:8a:
                    82:e6:7b:d6:e6:7e:c3:c7:ba:5b:d3:bf:22:7d:e6:
                    ae:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:88:41:99:DC:63:4D:65:5D:B2:C8:1B:69:89:84:D4:22:20:17:FD
            X509v3 Authority Key Identifier:
                keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ab:fb:be:0e:8f:53:96:a0:d9:4c:d8:ba:41:87:86:47:0b:
         30:01:94:63:6e:1e:22:94:6d:9e:47:8a:1e:34:48:c8:71:a2:
         29:04:ce:e3:5d:26:a0:31:12:af:72:bc:34:69:c7:c4:de:0d:
         22:50:19:d9:35:75:d0:a1:54:8c:65:b0:37:1d:6a:49:fd:13:
         a7:f3:02:00:0e:7e:e7:24:6e:91:f7:94:1a:61:38:d0:44:63:
         78:eb:29:73:ca:12:90:13:e7:e7:8e:ba:ef:7c:f9:c7:16:e9:
         5d:b4:d5:48:f5:72:6a:81:88:82:08:8e:88:7e:67:0a:54:6a:
         3d:62:51:eb:00:d4:7f:a5:8b:f7:3b:00:d0:fc:11:ec:d3:d5:
         01:2c:fd:42:7f:d9:fa:6b:f1:36:00:cd:91:67:86:86:38:ac:
         7a:ea:ae:fb:f2:0e:52:81:3a:0f:38:53:ef:31:2f:46:3f:16:
         9d:b5:ec:af:8c:72:82:f8:eb:54:65:18:4a:9f:68:a6:c5:57:
         c2:25:d0:16:32:6d:ba:26:fa:e5:97:a9:c1:19:7e:12:d7:f6:
         a1:fd:cc:bc:92:10:9f:44:e5:30:d3:1a:57:f1:4f:2d:4f:ed:
         b9:6a:48:9d:9f:ad:85:48:20:51:79:d3:d5:51:45:7d:a4:7a:
         2f:93:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:34:23 2026 by rpki-client