Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File:                     gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier:          W+QzJW3MvPxuLYwm0LbQYrXa+A0uW5RbjjFEhJz4VnE=
Subject key identifier:   62:AB:05:30:2A:AE:23:A3:16:88:14:74:A0:4E:8D:47:7D:4A:D0:0C
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer:       /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number:          9A
Signing time:             Fri 17 Apr 2026 04:37:41 +0000
Manifest this update:     Fri 17 Apr 2026 04:37:40 +0000
Manifest next update:     Fri 24 Apr 2026 04:37:40 +0000
Files and hashes:         1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: XnIeRSM5BMe3lcCncsXxNoeHb6tQ55oeKvKYAfLcYJQ=)
                          2: A78653B2561F11F09624D128C4F9AE02.roa (hash: U+SMdhKcC6YZLVwx7CjvcktHCkK7+pBrjdw40Tvbfas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
                          rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
        Validity
            Not Before: Apr 17 04:37:40 2026 GMT
            Not After : Apr 24 04:37:40 2026 GMT
        Subject: CN=69e1b914-9c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:ae:c4:d0:19:11:03:9b:84:86:d1:6e:71:
                    8c:80:80:81:7b:5e:d7:74:2c:b7:b2:d4:86:5f:4a:
                    df:64:94:1a:fe:8b:11:92:46:46:48:89:bf:3d:c1:
                    8d:ee:08:f3:dd:60:2b:f2:d9:31:5c:55:8d:0b:17:
                    fa:83:39:ea:92:b8:a8:5e:2e:a2:c1:96:f5:b3:f9:
                    75:78:5a:2f:02:a1:df:71:ab:e0:7f:c9:83:6b:49:
                    e4:4b:f5:a7:7e:43:8d:82:2b:a9:d7:ca:64:c2:bf:
                    f4:9a:8a:6b:27:b6:7f:c9:eb:87:81:53:fe:fd:b6:
                    b6:79:d3:f3:d1:ac:6e:a2:d9:04:cc:e4:44:c0:9e:
                    e2:df:63:73:a2:37:06:28:a6:b7:dd:75:2b:1a:9f:
                    60:8e:1a:88:f1:bb:f1:db:9d:e3:16:c1:e1:ba:70:
                    8a:8d:8c:82:15:1b:55:f9:38:1b:8f:80:ce:be:f2:
                    9b:37:c5:9b:0b:5d:c1:d1:a9:72:2c:5e:67:22:c4:
                    89:cd:01:f3:51:c7:f0:ee:74:5c:39:62:8b:14:47:
                    ef:9c:39:88:11:de:2a:f0:53:fe:42:ed:d6:ae:ee:
                    83:87:a7:59:85:07:6e:d8:82:bf:1f:f2:1b:0d:b0:
                    9d:e9:92:0e:45:17:20:90:0a:39:72:50:30:29:d3:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AB:05:30:2A:AE:23:A3:16:88:14:74:A0:4E:8D:47:7D:4A:D0:0C
            X509v3 Authority Key Identifier:
                keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:19:5b:be:bc:2d:b5:0e:50:10:f7:57:47:52:57:59:00:b0:
         d2:f4:d0:f7:63:32:74:a8:d6:63:9b:1d:eb:d0:07:d7:27:05:
         cd:25:48:f1:ea:69:1f:d7:b0:b6:13:a7:99:8a:c4:d2:a4:e8:
         78:97:93:0f:98:01:50:75:3f:8e:1e:23:1d:9a:a4:4e:39:b1:
         da:2f:19:b4:23:66:d4:60:49:2d:0d:c3:d1:03:d1:f9:f3:ed:
         46:9c:9e:06:c7:81:e8:a3:b9:66:80:cd:a3:08:da:2e:d8:6f:
         ac:93:32:b3:9a:ea:a7:85:1d:9c:69:3c:f5:22:3f:fd:18:a7:
         1c:a4:f7:38:40:4b:a8:02:f2:04:79:ea:2c:8d:88:2c:91:d3:
         82:ef:82:c8:2a:8b:8f:7e:99:c5:45:60:f9:6b:00:a2:2b:10:
         9d:dc:40:bd:e1:e7:8f:f4:d4:21:0e:23:68:76:17:d2:eb:d0:
         e5:b3:c7:f0:64:c2:f7:93:da:3c:27:6d:53:eb:4c:8d:b3:46:
         8c:c9:c1:61:ae:a0:4c:6d:4a:a8:6b:4f:6b:50:41:dc:30:0d:
         f9:00:e5:53:da:0a:26:5f:6c:34:5e:bb:f7:93:f8:74:a5:e8:
         9b:c9:df:d2:39:b1:c7:0e:d9:91:c0:ee:59:d5:37:05:76:66:
         c5:55:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:55 2026 by rpki-client