Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
File:                     GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json)
Hash identifier:          iFj3eeyE22NiPdhpcSWY3CHSMy0MNoUWoImP57wrwlo=
Subject key identifier:   E9:79:F1:31:E5:D6:8A:34:15:DA:2E:3D:F2:F1:5A:FE:C2:3F:02:2F
Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
Certificate issuer:       /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
Manifest number:          7B
Signing time:             Sun 01 Mar 2026 09:05:48 +0000
Manifest this update:     Sun 01 Mar 2026 09:05:47 +0000
Manifest next update:     Sun 08 Mar 2026 09:05:47 +0000
Files and hashes:         1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: Rc9axLExAjR5bocdo0m1X1gZf3NlAc02jztiJ2gC6jM=)
                          2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: 1NXHAu+AZ4qLnyhJ+zCsGi162UnSM+oKyxK/qaHl5fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl
                          rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
        Validity
            Not Before: Mar  1 09:05:47 2026 GMT
            Not After : Mar  8 09:05:47 2026 GMT
        Subject: CN=69a4016c-c847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:aa:c5:41:17:4f:88:fd:8d:7d:7f:6c:f0:
                    31:4c:53:28:7c:2f:18:70:6d:d0:19:9f:5d:b5:b5:
                    a5:e1:30:72:cf:91:79:c5:d3:76:eb:27:43:ba:db:
                    71:93:9e:90:5b:db:5f:ff:87:75:fc:3d:fe:e0:7d:
                    f6:ca:a2:64:d2:8a:e6:db:92:88:e3:4d:7e:c9:d3:
                    77:9c:ed:63:95:e6:bb:2b:5f:2d:d1:2e:83:b0:a7:
                    92:65:af:c2:82:71:2f:7c:e9:3b:cc:c5:92:9b:1d:
                    4a:93:48:9b:94:d3:de:a0:83:7b:30:03:ce:1b:8c:
                    5c:ab:57:75:3f:39:fb:5d:a2:59:2e:75:86:58:ae:
                    67:c0:c3:0e:d1:12:ab:35:ea:de:e4:70:bd:67:f4:
                    ed:d4:e7:97:58:74:82:07:64:a2:65:f5:c5:90:ea:
                    c6:33:e2:97:9e:a0:20:5a:89:cf:79:ae:7c:87:19:
                    bf:2e:fb:fa:98:0e:17:f2:2f:68:1c:7d:c3:cd:e2:
                    52:07:42:21:e4:83:73:a5:e2:c2:1a:bf:7e:db:99:
                    db:05:3c:a9:6b:e8:a5:08:db:89:3e:72:30:8c:05:
                    19:a9:a3:3e:d4:61:f8:9c:d6:81:85:22:bf:82:69:
                    0b:7d:cc:51:79:ba:4b:db:f7:a1:7c:5e:18:99:5a:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:79:F1:31:E5:D6:8A:34:15:DA:2E:3D:F2:F1:5A:FE:C2:3F:02:2F
            X509v3 Authority Key Identifier:
                keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:66:27:de:ea:ab:c0:2b:cd:de:a2:08:08:6b:67:e8:d3:2c:
         4e:6c:c3:28:95:ba:60:a0:de:b5:b9:79:ab:98:00:cf:57:b3:
         34:5f:51:6b:5d:c8:9b:37:1b:4c:d6:0d:32:c1:a5:70:32:0a:
         4c:c4:1a:3a:cb:ae:1d:d8:1a:de:a7:ee:28:5f:82:11:6a:fe:
         e5:bb:58:2c:bc:5d:d9:8b:37:d0:7e:7c:f8:7e:7c:0a:0c:92:
         1f:8b:8a:bb:a9:2e:8c:0f:a4:25:45:6d:41:75:7f:a2:90:29:
         0d:99:65:3e:44:04:d3:7f:45:9e:fc:98:f4:c8:89:99:08:e7:
         f1:71:8d:20:89:08:f2:75:4a:1a:ce:c6:3c:f4:fe:2d:9f:2f:
         e3:70:bc:84:89:c2:8d:18:27:1b:2e:59:34:d1:82:23:9a:e0:
         0d:d9:9b:96:62:95:29:6d:3e:6e:99:bf:80:c5:c1:68:fd:3a:
         15:e5:4c:61:33:ef:28:e2:a1:d0:8e:6d:ed:30:a9:7e:4f:ff:
         57:c6:31:e1:8b:6c:f6:57:a2:9a:1c:ff:98:74:0a:3a:46:ce:
         1f:7c:76:cb:0d:a3:4f:15:d1:f0:c2:2e:0a:20:01:8e:85:fd:
         69:67:85:db:be:27:d8:e7:d0:82:10:7e:2d:a6:aa:1d:a2:59:
         14:1b:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:15 2026 by rpki-client