Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
File:                     gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json)
Hash identifier:          4ZbjsuEWYb7KS/CE4Z06Ztfzz3Q5exHz4Uvhg8kPRe8=
Subject key identifier:   F9:6B:C6:3F:53:81:77:D0:F8:4E:18:2F:6E:8E:8E:00:7F:47:66:1C
Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
Certificate issuer:       /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
Manifest number:          F4
Signing time:             Mon 02 Mar 2026 00:14:31 +0000
Manifest this update:     Mon 02 Mar 2026 00:14:30 +0000
Manifest next update:     Mon 09 Mar 2026 00:14:30 +0000
Files and hashes:         1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: ab3v1bSZrW39lc61lIUEm2dHnAScOGKCIC2X6lsZX9s=)
                          2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: BtHfDz8Hw6cGvROOr50leZJ/AmtKCEWaHsU3HjKIGvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
        Validity
            Not Before: Mar  2 00:14:30 2026 GMT
            Not After : Mar  9 00:14:30 2026 GMT
        Subject: CN=69a4d667-027f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:2b:5d:ea:48:7a:9e:a1:e7:78:24:f9:bd:
                    9f:de:ad:6d:f4:1e:7d:f9:92:d2:c9:de:89:d3:a8:
                    81:1d:00:dd:6f:99:37:74:fc:1a:62:c1:0d:18:50:
                    45:b7:ee:6e:4a:e8:02:65:b7:67:dc:ea:1f:cb:f6:
                    5e:b8:6a:10:0a:65:1c:c0:21:a8:4f:18:9a:f2:45:
                    c3:d4:3f:cb:47:7d:87:8b:fd:a5:85:fd:c3:35:77:
                    65:7e:00:e5:09:2e:4f:a8:44:ed:15:3c:20:4a:84:
                    20:8c:1b:32:fb:84:71:72:c6:d2:2d:05:91:84:a4:
                    b5:07:5c:4c:ee:08:d3:ad:18:fa:21:49:24:5c:2e:
                    78:e3:21:f8:76:c1:b9:26:b3:15:59:0c:bc:0c:2a:
                    a5:9f:b6:6b:20:90:36:00:15:c8:1b:b8:8c:cc:7d:
                    70:25:80:06:85:5e:d1:29:0f:1e:9e:a4:bb:0d:7c:
                    5e:0a:e1:27:ba:36:36:5e:57:02:19:59:b9:ec:9a:
                    78:93:89:ef:27:2b:b0:3a:7e:25:85:d2:e1:11:f8:
                    f2:c4:60:83:71:3e:7f:d4:bb:c2:13:07:0d:3c:37:
                    45:d4:11:6c:89:f8:d4:cc:ef:84:eb:fe:5e:16:b2:
                    18:a7:54:fa:dc:0b:19:3a:98:2e:c2:80:94:ba:23:
                    d6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6B:C6:3F:53:81:77:D0:F8:4E:18:2F:6E:8E:8E:00:7F:47:66:1C
            X509v3 Authority Key Identifier:
                keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:3f:e0:21:11:2f:dd:20:b0:1d:b6:19:2e:1d:2c:fa:96:
         c8:f9:ad:ed:33:1a:be:66:ce:11:96:da:86:bb:11:f0:a2:49:
         9e:8b:21:4a:6c:d0:55:55:f8:8e:71:bb:e4:b6:ed:7d:fd:25:
         18:84:18:4f:75:0e:26:ca:ba:4f:2c:d8:ed:b3:f7:d5:ad:64:
         f1:f2:5c:1c:a7:e1:f3:ca:bc:e7:c6:d1:aa:f1:cd:0f:b7:12:
         23:f6:e8:1e:b5:a7:bc:43:88:5c:7b:3c:e8:e5:89:4f:a2:98:
         4c:dc:de:16:b1:82:1a:4f:f6:3a:c4:a3:02:46:dc:86:4b:c3:
         4c:c5:48:ba:5c:ee:72:1a:7c:c1:10:f5:fa:ab:f4:4f:b6:02:
         b8:df:81:8c:5c:05:12:7d:37:d2:10:ed:5e:7e:c0:ca:40:c4:
         4b:69:aa:56:7a:38:0b:51:cf:06:b9:25:23:27:8b:ba:c7:4c:
         47:2c:e3:10:48:b8:fe:cc:ea:1e:82:54:a2:14:14:b5:a0:6e:
         54:28:ad:c1:00:00:80:c6:94:7c:6b:f4:86:1d:04:19:50:79:
         e9:62:b8:13:1a:da:df:3e:d4:aa:18:72:3c:6b:58:42:88:ed:
         e2:0e:1a:31:00:80:ae:f4:6a:64:2a:6f:2e:93:19:1f:d1:10:
         43:a2:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:08 2026 by rpki-client