Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
File:                     GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json)
Hash identifier:          4AM6uK75PMv7OAPE/X6rPJ8W0/10MxrBm1Fp6BD3o+k=
Subject key identifier:   3C:2F:65:77:22:1F:53:18:E4:1F:84:25:E6:FE:AF:94:81:1E:FB:F5
Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
Certificate issuer:       /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
Manifest number:          95
Signing time:             Fri 17 Apr 2026 07:11:50 +0000
Manifest this update:     Fri 17 Apr 2026 07:11:50 +0000
Manifest next update:     Fri 24 Apr 2026 07:11:50 +0000
Files and hashes:         1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: KlnV7MIaZkp1DLFoQp5m8wLBoMCLxv7hsXqWlWQ1qIM=)
                          2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: Ht+AYFRYgTia5PfBCXy1G2MKk6pS05Kn+q7rQOjqmks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl
                          rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
        Validity
            Not Before: Apr 17 07:11:50 2026 GMT
            Not After : Apr 24 07:11:50 2026 GMT
        Subject: CN=69e1dd36-f4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0c:87:5c:32:6c:39:fe:87:be:95:3e:d7:c1:
                    cd:c0:88:98:04:65:d9:c3:79:0a:89:e7:2d:06:91:
                    70:cb:b5:a2:5c:fe:27:9a:02:b6:0b:25:97:e7:9b:
                    09:7d:22:09:bf:30:34:e4:8d:51:b7:e0:1b:ce:0a:
                    24:21:84:b7:24:2c:89:4e:9c:7b:5c:4e:0b:04:fb:
                    77:0f:16:39:ed:20:f6:01:5e:e3:e2:83:9c:c6:e1:
                    2b:b8:73:1b:4c:2c:f6:94:a2:ca:53:a8:63:0f:b0:
                    40:d1:93:55:74:b5:84:83:2e:08:74:f3:ae:81:1f:
                    43:c8:b7:62:08:ba:c1:98:90:f2:0b:f6:ca:b6:62:
                    bc:8c:c2:b9:b1:65:c9:24:b3:bb:64:bf:fd:c9:ba:
                    03:f7:32:46:b2:a3:5e:d3:e0:2f:f9:37:27:b6:85:
                    b4:77:28:6a:63:f6:a0:50:3d:97:6d:f7:7b:f0:e8:
                    37:48:1a:0a:29:7a:6c:d9:d0:3b:e3:a1:18:8f:6e:
                    54:67:11:e1:68:8f:f9:99:79:f3:50:1b:17:6a:25:
                    f8:76:33:7f:6e:c4:8f:2f:04:b8:ff:ce:54:26:30:
                    1e:10:02:ba:f2:2f:12:03:e4:3d:44:63:91:e1:94:
                    3e:e7:2a:77:e2:aa:c8:17:aa:dc:84:83:d5:29:94:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:65:77:22:1F:53:18:E4:1F:84:25:E6:FE:AF:94:81:1E:FB:F5
            X509v3 Authority Key Identifier:
                keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:32:a7:d3:ee:d4:e5:b4:7f:e8:a9:38:92:4b:48:35:ba:e7:
         92:90:25:52:dc:21:5c:8f:35:15:19:3b:fc:5a:ac:b9:07:b7:
         a4:96:95:b9:80:86:90:0e:68:d5:29:51:fa:55:93:3b:bc:38:
         79:c2:d1:4a:a3:5d:5c:f1:8d:4d:9d:c8:62:ee:13:a1:44:1e:
         d3:e2:d0:bb:c0:ae:86:fc:70:2c:63:86:11:04:7b:e7:4a:ee:
         3d:11:bc:b2:79:3f:0a:47:32:aa:d1:b8:a6:36:7f:81:d0:f4:
         28:14:d2:8a:91:35:0c:38:28:92:51:67:8b:f4:20:32:a8:8f:
         ef:f8:79:96:e8:01:57:3e:b6:89:6e:65:b2:bd:4e:45:3e:2b:
         b7:9f:29:ee:0c:58:b7:34:2f:8c:6b:25:5e:e6:8b:0b:fa:46:
         f6:4d:9d:f0:64:1c:33:c8:99:85:cf:8d:86:30:2c:ab:d2:54:
         5f:4b:d1:55:5c:db:20:9c:3f:e0:c0:b0:64:8a:0d:e4:7a:98:
         ab:6b:b1:4e:96:ab:02:48:b7:eb:c9:4e:69:2a:65:78:ec:01:
         90:54:a5:d5:30:76:2f:ac:e1:1e:03:ed:26:13:2c:45:14:ca:
         e1:9c:d5:87:b7:1f:c3:07:82:77:fe:81:20:87:1f:cb:a7:fb:
         7c:bc:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:28 2026 by rpki-client