Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
File:                     E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json)
Hash identifier:          cnYio5vS8bNvaHxKzMiYbIbSg1GHsy0h2XX/Q7+ZoPs=
Subject key identifier:   B1:35:C2:20:CC:3C:28:04:46:3C:D7:E9:11:2B:17:2E:E8:5C:B1:D4
Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24
Certificate issuer:       /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
Certificate serial:       0338
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
Manifest number:          032F
Signing time:             Fri 17 Apr 2026 00:59:27 +0000
Manifest this update:     Fri 17 Apr 2026 00:59:27 +0000
Manifest next update:     Fri 24 Apr 2026 00:59:27 +0000
Files and hashes:         1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: Sux5LAUGMEze4o0qKKbS9unduNlvHPivquPDyGgTDRY=)
                          2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: RVg2h7hOH2w99l5JLC3wkh/gist/wN6AmqKxVj6qbAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B60, serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
        Validity
            Not Before: Apr 17 00:59:27 2026 GMT
            Not After : Apr 24 00:59:27 2026 GMT
        Subject: CN=69e185ef-550f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:d4:b1:d9:d3:a2:4a:be:0d:8b:b9:ce:7c:
                    23:cc:d3:3d:a0:48:2c:79:a5:fd:b1:46:fe:4d:db:
                    7a:2d:46:ec:6c:aa:1c:36:f8:05:42:0f:06:60:6c:
                    d3:b5:f7:ac:57:6d:e4:81:cb:ba:c2:f8:ba:fb:9d:
                    a9:3d:a6:61:8b:10:42:44:5a:bf:9a:f1:e2:16:3a:
                    93:75:67:d4:e4:ac:e0:73:85:0e:5f:90:25:be:46:
                    83:44:d4:b3:a6:ee:5e:7a:e9:ef:38:e4:bb:08:10:
                    4b:ac:6d:a2:9d:1d:58:cf:c1:bb:7b:6a:f0:b9:66:
                    2f:39:0b:cd:73:18:c6:6e:5b:42:39:cd:20:33:fb:
                    c4:66:84:3c:29:af:56:20:e5:87:45:54:05:a7:ed:
                    39:70:58:91:a4:46:bf:0b:92:21:f0:af:a0:b3:f8:
                    e2:ee:b6:d5:93:26:8f:1f:1b:9a:91:d6:6e:c1:66:
                    b3:e8:20:e4:27:3e:44:29:ab:71:d1:15:f3:7c:91:
                    ce:df:46:63:d5:10:15:0c:ab:c8:f3:20:e8:68:0e:
                    0b:00:b7:11:44:21:05:f6:36:2a:d0:57:2a:1b:24:
                    52:bf:2a:a9:ef:47:8c:a7:59:25:37:0f:d6:2e:f5:
                    7d:46:bd:53:9b:30:9f:26:8c:d7:97:93:f1:a5:d1:
                    d0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:35:C2:20:CC:3C:28:04:46:3C:D7:E9:11:2B:17:2E:E8:5C:B1:D4
            X509v3 Authority Key Identifier:
                keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:20:ef:4c:fc:fe:a5:56:63:fe:a3:8f:6f:68:36:85:b9:1e:
         9c:64:15:8c:97:b2:5e:35:cd:c5:04:5f:24:b0:f5:6a:ff:6f:
         a1:a9:4b:86:ee:59:f4:c4:96:69:2b:1d:ee:69:44:76:14:28:
         32:80:b4:0e:67:c9:30:95:4b:8b:f3:09:e9:40:bb:2d:8c:3b:
         15:59:76:13:66:34:3b:53:da:0c:63:9d:cd:2e:de:11:cc:c2:
         87:97:fa:09:17:d5:0e:ec:35:cf:bf:1c:15:6f:a9:80:f0:bf:
         d3:7a:2d:52:c0:d4:3f:a4:c8:21:85:12:5c:aa:b4:2b:b9:9f:
         4b:99:0e:23:53:cd:08:4c:fb:95:57:26:e8:60:70:04:a7:b1:
         7b:bf:ae:0b:9a:2f:b2:1b:8b:e0:7d:35:df:e2:2e:1e:bc:e2:
         57:54:23:ea:f2:16:d0:88:d2:41:68:0d:f6:2d:44:77:a8:b7:
         90:c2:42:1a:44:15:cf:bc:53:f4:0d:31:e1:8e:cf:ba:73:db:
         00:d9:d5:f0:87:63:85:77:99:8b:67:5b:4d:85:74:12:77:c2:
         99:77:06:0b:13:11:93:10:4b:22:4b:0e:7b:3d:14:c8:dc:4e:
         20:df:69:af:f3:88:91:e5:21:1a:ff:28:8e:d1:cd:fe:d5:3f:
         88:2d:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:59 2026 by rpki-client