Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File:                     GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier:          wn8ik+tHzBLuqVrTIOHJSLGZbWmvkV00iPJeb5UeKQA=
Subject key identifier:   64:47:AC:84:54:A3:69:35:7C:E2:77:F4:9E:57:63:60:C8:E7:63:C8
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer:       /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number:          67
Signing time:             Wed 15 Apr 2026 07:29:38 +0000
Manifest this update:     Wed 15 Apr 2026 07:29:38 +0000
Manifest next update:     Wed 22 Apr 2026 07:29:38 +0000
Files and hashes:         1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: hMRJ5Dt1vQaIuiHpHNEn3tfOXzEO4LP+qDnPDaDxSgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
        Validity
            Not Before: Apr 15 07:29:38 2026 GMT
            Not After : Apr 22 07:29:38 2026 GMT
        Subject: CN=69df3e62-fd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:18:fa:57:eb:7e:09:7f:9d:e2:b2:df:78:
                    7e:d6:08:7b:70:44:c6:7f:86:41:7c:75:3a:46:e8:
                    1a:9c:48:0c:00:90:16:e4:3d:20:00:37:4e:24:3e:
                    b5:49:17:4b:ad:ad:a1:ea:84:a4:a7:a8:bb:36:48:
                    d6:93:d7:b5:e5:9e:df:89:6f:eb:00:5e:de:8b:94:
                    6a:15:cc:48:5c:c5:49:cb:d8:73:38:f1:f8:a5:fe:
                    de:68:20:f6:74:59:96:b4:a2:95:7f:1c:30:fe:25:
                    72:93:3d:0d:ae:d7:92:0a:9c:0a:64:ca:be:80:a2:
                    b7:99:a5:c6:4c:5a:30:86:ee:fe:2b:c7:c9:78:01:
                    6b:52:d2:10:fc:27:2b:5e:83:95:09:6d:70:8e:38:
                    cc:79:44:08:25:dc:fe:39:a4:a1:01:92:5d:2f:c7:
                    7c:ee:ea:7b:46:fb:a8:c6:8c:45:f0:8e:3c:6b:dc:
                    67:3d:c4:46:4e:57:6e:63:9a:5a:ab:25:0e:3c:df:
                    87:e0:03:fa:05:81:f5:07:ec:72:1a:db:cb:8c:c1:
                    03:ae:e2:d6:64:ed:c2:4f:0d:ee:b8:58:d7:dd:b9:
                    36:49:4e:a1:dd:cd:41:06:47:74:18:2b:12:9d:69:
                    85:2f:b1:c7:a0:e8:30:18:ba:16:0a:3c:6c:04:f2:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:47:AC:84:54:A3:69:35:7C:E2:77:F4:9E:57:63:60:C8:E7:63:C8
            X509v3 Authority Key Identifier:
                keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:70:1e:52:38:cb:ce:0f:20:b1:48:cb:f6:07:34:6e:2c:ed:
         da:55:d0:9e:ff:5d:32:91:34:0e:2f:fe:02:bf:da:46:31:93:
         d6:3a:5a:d8:ca:67:48:26:07:0a:ea:8c:1a:86:6c:3d:ed:91:
         0b:3c:32:21:27:20:fc:ed:98:59:31:cb:30:99:0a:44:83:c5:
         1b:d8:b9:b0:07:90:c9:50:bc:0c:2d:06:e7:25:fa:6c:e4:09:
         73:ff:f9:cc:6f:9e:af:36:74:56:85:10:97:06:d6:65:ab:c1:
         23:14:4d:28:c6:f5:bf:9d:17:b4:40:36:0b:0d:c0:ec:ad:bb:
         db:57:dd:d3:cc:b6:79:a2:a4:13:bc:f6:f3:0f:5e:94:0f:07:
         77:8d:d4:41:9e:ff:43:26:67:eb:5d:56:81:8b:93:cd:92:98:
         8b:b2:d5:41:bb:90:95:96:a0:1b:67:ec:27:c2:25:72:90:30:
         a4:85:60:4d:f8:49:1b:e5:f1:3d:4c:50:ca:ed:66:4f:d0:5c:
         19:19:a8:75:7a:0d:33:91:dc:ce:7b:34:bd:95:0e:b2:f4:1d:
         3c:65:81:d6:c5:2e:2b:8c:84:d3:43:59:18:a5:e1:cf:99:81:
         c1:97:39:d8:ea:28:b6:73:58:72:95:79:5a:dc:37:e7:84:63:
         c1:35:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:16:29 2026 by rpki-client