Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          mcheBYBQSE2FAep9GfvjzSXZXWoMoVj6hnxinAmQq30=
Subject key identifier:   7B:A9:36:74:7A:E6:BD:0A:06:DB:47:A9:16:97:18:F3:3F:A7:82:AE
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       1125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          1105
Signing time:             Thu 16 Apr 2026 17:13:44 +0000
Manifest this update:     Thu 16 Apr 2026 17:13:43 +0000
Manifest next update:     Thu 23 Apr 2026 17:13:43 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: TfdqcmRp0gEas4kBOCcg1dwcnmOcNTmiGfenNlT29WQ=)
                          2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: adNVp+jeKpiI/DZRqFAXkjDO248rnrJta6jKv+gGFM0=)
                          3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: PaYa3XqCNqlKALsec1HMQNqlcAxMErVMEmTN74jVBUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4389 (0x1125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Apr 16 17:13:43 2026 GMT
            Not After : Apr 23 17:13:43 2026 GMT
        Subject: CN=69e118c8-982b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:dd:66:eb:85:af:e7:b5:0d:6a:f5:25:82:
                    ca:2e:6f:ec:e3:d5:7f:9c:66:58:f5:84:94:e1:95:
                    98:d9:cb:02:30:a6:59:d3:5c:26:f3:6e:22:a7:ce:
                    b6:59:66:a4:f1:bd:2e:51:4e:89:56:90:8b:70:e6:
                    7b:50:79:b1:99:ab:07:cc:70:73:9a:b2:a6:c5:d1:
                    3e:c7:98:12:21:d9:d3:56:75:01:10:05:e5:b8:9d:
                    44:ac:5f:58:8c:d6:a7:a6:1f:f0:0e:6a:03:82:3d:
                    43:95:68:90:aa:22:bb:20:5b:27:7b:ad:62:04:4c:
                    2a:60:c6:59:5c:33:bd:a0:98:a8:cb:50:7d:03:c2:
                    71:98:b0:8b:d1:37:7e:51:6c:0b:64:ec:41:56:1d:
                    21:e5:69:56:dd:db:f3:3e:a5:46:55:2a:88:4f:90:
                    40:ca:e1:65:bf:65:2f:a7:d3:ca:75:0b:45:07:d9:
                    e6:f5:0b:7b:4e:42:5f:10:6f:d9:86:72:fd:d6:87:
                    d0:3e:6a:65:71:67:c7:e8:5a:88:3c:59:a7:5e:c9:
                    83:1b:d2:3d:ba:4b:d3:ba:72:97:59:74:2a:53:ff:
                    49:f3:b1:50:80:ca:eb:fd:89:c8:7f:d4:6c:1a:6e:
                    44:ae:c2:db:93:50:a9:3a:53:10:93:e1:0f:1e:76:
                    3d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A9:36:74:7A:E6:BD:0A:06:DB:47:A9:16:97:18:F3:3F:A7:82:AE
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:26:b6:b7:6c:e5:87:59:a3:53:9a:67:b7:88:2d:69:8c:3a:
         78:dd:43:70:83:26:bc:8b:31:c0:c1:82:b5:12:24:2e:2f:5e:
         66:89:22:7a:11:61:8b:4b:90:2b:82:e6:83:dc:85:b8:26:c1:
         55:77:81:04:f5:80:54:db:3d:88:ed:4c:8a:d9:59:8c:29:79:
         99:b8:fa:90:83:6d:38:31:94:45:a3:0d:7b:cc:9b:4d:28:2f:
         7d:88:10:2f:a7:92:5c:94:45:47:e8:9b:02:aa:40:75:16:82:
         bd:5e:09:25:7c:0a:81:16:0c:28:03:f4:3d:c1:3a:a3:e3:d5:
         14:91:42:f0:c5:03:2a:a6:5d:41:f5:08:28:99:fb:04:75:f8:
         24:e8:19:dc:95:4d:83:31:f6:6f:a4:21:95:79:43:bd:56:df:
         28:b4:70:ee:fa:24:a4:8f:76:79:23:c3:31:d3:e5:10:29:b6:
         a5:63:85:ca:89:07:1c:3a:1d:d6:3c:bb:3d:b7:15:99:3f:ac:
         08:57:b4:e7:97:3e:c9:7d:3d:3b:a3:f6:81:99:21:05:e6:2f:
         18:d1:7e:d1:ac:14:a4:2d:d8:c5:4d:27:dd:c5:73:98:52:bd:
         37:8a:1f:c4:18:5c:c5:9b:86:f3:43:83:a8:b0:bd:9e:51:09:
         39:3e:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:11:45 2026 by rpki-client