Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File:                     gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier:          Ls4zcNAl4frfBHV4Q69owsxvm7JKrTxvFSLtkUoY7Z4=
Subject key identifier:   B2:3D:26:B8:8A:62:78:B0:42:0B:76:8C:6F:60:03:68:7D:B1:94:EF
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer:       /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial:       12FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number:          12E2
Signing time:             Sat 18 Apr 2026 16:57:39 +0000
Manifest this update:     Sat 18 Apr 2026 16:57:39 +0000
Manifest next update:     Sat 25 Apr 2026 16:57:39 +0000
Files and hashes:         1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: jMORg9bEmVLmqsXGt1ZFFcxT31mCQepagmiL1KmGxzQ=)
                          2: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: 67lyQNjbiYHBIBW9WpGHspfkkZM/Tc9EOPndYw2IyM0=)
                          3: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: tZukN75APhSScUoC/I4H/NT8GRXX5KYKrXgWcXFLnoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
                          rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 16:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4859 (0x12fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
        Validity
            Not Before: Apr 18 16:57:39 2026 GMT
            Not After : Apr 25 16:57:39 2026 GMT
        Subject: CN=69e3b803-3759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:ae:f8:7e:f3:52:ec:e5:b8:ac:e2:bf:13:
                    b7:6b:a1:34:a3:70:3b:fc:a0:48:ec:7c:f0:95:4c:
                    2d:83:41:82:cb:8f:69:08:88:89:f0:db:6f:93:ed:
                    5d:b0:0c:c3:65:df:b9:c0:f1:1d:81:5d:fa:c7:a8:
                    a0:f6:07:4e:b5:b0:a2:83:3b:46:33:c9:00:9d:1a:
                    32:81:43:71:21:ae:88:32:41:1a:49:fb:93:66:d7:
                    34:b2:c6:91:7c:13:6c:14:90:81:51:b8:92:92:cf:
                    27:e4:90:f4:a2:ee:90:39:ce:c1:62:7d:a2:b7:a1:
                    34:c1:db:b0:36:0c:5a:37:d5:0f:c4:f0:8b:ac:4f:
                    a0:b6:ad:48:c2:da:7c:84:af:d0:e5:6f:21:aa:59:
                    86:e0:e4:a8:c5:c9:b8:43:53:e6:b4:20:b4:69:d7:
                    63:73:6f:d2:c2:c4:ce:41:fd:f0:4a:c9:6d:51:82:
                    b1:c6:1f:d6:5f:ca:85:62:e3:0d:55:a8:11:39:c0:
                    a5:29:58:68:e5:3a:be:8e:9f:7d:24:46:69:2a:a2:
                    ba:b0:d9:e6:6d:08:ac:6a:c4:4d:f5:84:0d:d0:0e:
                    dc:d1:6c:45:e2:fd:a8:84:97:2d:39:0e:1c:5a:b9:
                    ac:fd:bc:47:d1:54:55:49:d1:7e:80:e4:60:e1:23:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3D:26:B8:8A:62:78:B0:42:0B:76:8C:6F:60:03:68:7D:B1:94:EF
            X509v3 Authority Key Identifier:
                keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:04:cf:4c:a5:31:29:0b:d4:0c:5f:05:3e:10:6b:8d:07:01:
         e1:8b:94:f6:12:72:74:9f:ff:5e:d7:ae:7e:67:8a:dc:39:6f:
         ec:5d:10:68:26:56:e4:38:4c:e6:4f:aa:90:0c:10:5c:dc:de:
         5d:c8:4e:18:fe:73:17:ec:f7:a8:5d:3b:ba:f2:17:fd:94:be:
         13:0e:61:6b:96:3f:18:1a:61:a9:22:8f:9a:e5:f0:fb:fc:42:
         77:ee:a9:c0:26:28:73:d0:e0:37:17:11:5a:64:1b:d3:3b:2b:
         81:f9:c5:08:4f:60:4c:a5:ef:9d:b5:38:45:e3:34:06:39:61:
         20:16:f1:28:9f:da:d6:d4:b9:ce:a8:09:39:9e:6c:a7:aa:b9:
         8f:50:98:da:96:f2:3d:54:a0:68:ff:2b:a4:e2:76:82:49:86:
         a3:0f:0e:75:f3:c9:5d:35:35:60:37:3f:12:3d:2a:75:8b:74:
         a6:d8:f5:e9:f7:76:ee:c1:35:fa:bd:ab:92:8c:95:eb:e4:6f:
         36:9f:15:6b:81:7e:3e:82:a3:45:04:13:5f:8f:b3:be:55:59:
         f9:c8:64:d5:9c:37:7b:fe:97:67:02:c7:6e:2c:4d:96:4c:f6:
         ba:15:ad:3c:ee:4e:57:8c:61:83:1f:90:08:cc:11:df:71:63:
         2f:55:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:32:50 2026 by rpki-client