Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
File:                     Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json)
Hash identifier:          sQgPZ3ssrIdpkH7Wvxgm3qakaS1R2cX2wnuflty8pKE=
Subject key identifier:   51:73:BF:60:64:1C:41:A4:23:BC:6C:FE:AF:E6:C0:66:B2:74:37:D7
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Certificate issuer:       /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial:       0550
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
Manifest number:          0544
Signing time:             Sun 01 Mar 2026 00:03:20 +0000
Manifest this update:     Sun 01 Mar 2026 00:03:20 +0000
Manifest next update:     Sun 08 Mar 2026 00:03:20 +0000
Files and hashes:         1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: 6T882pNtAIDls4FetWrhtHQY5+oFsCMLOoGqzq/r1u4=)
                          2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: OgxkGLoBh6HGvCB/fRUVvIfnQUfu5bCnmyvUAGDoCoM=)
                          3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: 7kV6yNtY0OEuz4gBv/+8ihVZGqJgfv8o7qKBHm8GmBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
        Validity
            Not Before: Mar  1 00:03:20 2026 GMT
            Not After : Mar  8 00:03:20 2026 GMT
        Subject: CN=69a38248-39bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:26:2d:e8:7b:3a:a0:3f:fa:f2:15:29:38:
                    a1:fb:0e:07:5d:83:55:d9:88:66:07:03:8c:64:d0:
                    0f:a7:3e:b3:04:0e:43:bc:2d:08:59:4b:c4:ad:6f:
                    68:d3:20:6a:63:94:8c:87:22:5b:25:5d:1a:c6:61:
                    af:c3:8b:0b:6a:1e:ba:8b:5d:83:82:6a:7a:1f:3e:
                    aa:64:f8:83:7d:94:f1:27:b4:88:17:1d:11:49:b1:
                    8e:24:94:dd:6a:c3:69:3e:42:ea:28:8d:27:e1:19:
                    f5:63:3a:0e:f0:59:3a:30:a4:ee:cd:18:b8:48:a6:
                    0b:c5:5f:e7:53:5b:13:09:8e:47:4f:7e:1c:1f:ae:
                    35:ce:a0:de:71:0a:c4:f7:f8:ae:ed:dc:88:a1:7b:
                    13:67:47:2a:0c:f9:20:4c:4c:8c:82:7a:6d:e5:f0:
                    29:00:60:c0:3b:25:16:64:67:37:82:75:27:d6:f9:
                    01:8a:8d:e8:45:f5:29:ce:3f:13:c6:71:5a:ef:09:
                    4f:fd:d9:2e:14:cc:1b:db:43:1d:6c:6e:04:c9:a7:
                    77:3b:bd:60:79:75:c6:db:16:4a:ff:74:a0:da:25:
                    62:9a:cd:21:31:89:dd:a0:dc:e2:98:20:29:cc:31:
                    be:b0:a5:4f:72:79:c5:d9:11:3e:06:f8:b4:e1:01:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:BF:60:64:1C:41:A4:23:BC:6C:FE:AF:E6:C0:66:B2:74:37:D7
            X509v3 Authority Key Identifier:
                keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:20:1a:dd:84:2d:40:f9:9b:64:86:c9:77:c1:df:84:88:
         83:a2:6c:ca:55:f7:40:7a:ab:35:a2:e9:bf:0c:74:3b:65:a8:
         9a:71:7f:af:c9:35:d9:dc:92:f4:17:3d:c0:01:01:6a:c5:a5:
         20:6b:d7:86:00:91:bf:2c:86:7d:04:ea:33:ff:dd:2d:de:29:
         44:e0:41:ab:40:ba:1c:26:d8:53:82:cc:f1:d9:35:3f:46:c7:
         8e:f5:fd:42:c0:01:57:0b:92:1f:35:a4:e9:53:81:eb:22:3f:
         b5:75:ab:91:d0:c1:97:b3:7e:8a:60:fa:6e:60:b9:b6:ed:40:
         f7:47:b5:a4:4f:7d:61:85:a2:4a:17:8d:53:ab:47:84:59:2f:
         78:4e:34:ae:2b:9e:bf:f4:80:d5:18:ef:6f:20:40:97:c8:2a:
         2a:f4:49:49:f4:18:11:0d:ce:8f:69:28:19:aa:68:1a:15:d8:
         65:06:55:e8:23:47:b2:a0:f7:e7:d4:30:38:fa:6a:96:56:74:
         4b:9c:d7:58:11:1e:1f:0b:8c:db:e2:ba:69:30:fc:99:29:fd:
         ba:55:be:7d:fd:53:2f:93:ec:fa:26:62:e9:4b:97:40:d0:b7:
         12:78:0e:f7:6c:aa:4c:74:4c:18:0b:b0:d6:d2:c6:d5:a9:12:
         2d:4c:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:36 2026 by rpki-client