Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
File:                     ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json)
Hash identifier:          u1nreu+iQUu6chwEPEig7FHEm+zhqRRjq8Rqr2ZcHTs=
Subject key identifier:   55:F6:35:4D:22:66:3F:85:3F:7C:C3:72:F8:AE:6D:5F:2A:53:27:F2
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Certificate issuer:       /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
Manifest number:          0260
Signing time:             Mon 02 Mar 2026 00:01:52 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:48 +0000
Manifest next update:     Mon 09 Mar 2026 00:01:48 +0000
Files and hashes:         1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: IEfK03tLKRd20/ysKGGBIEAT1wx+LnA3Ph/SOMwfwL0=)
                          2: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=)
                          3: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: feVu+a8lF5HfZtn0mtMt+vLIfU2xl9dTaoTUFZoVD6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
        Validity
            Not Before: Mar  2 00:01:48 2026 GMT
            Not After : Mar  9 00:01:48 2026 GMT
        Subject: CN=69a4d36f-e925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:4a:4c:67:e1:b5:8f:e2:6a:4d:8f:d7:91:
                    ae:de:84:52:79:aa:d5:ff:98:46:ff:66:8d:d2:ee:
                    40:fe:95:c4:b2:cf:37:be:3e:9d:4b:af:80:3f:a2:
                    27:94:03:ae:80:89:29:14:06:58:01:50:56:34:1e:
                    7d:97:8d:d1:cc:0c:07:e3:af:2c:10:1f:12:22:ac:
                    85:28:02:88:77:e8:1b:ff:e1:84:52:ef:09:d5:62:
                    68:97:b7:32:6d:26:6b:e3:d3:03:8a:89:24:74:d3:
                    26:fd:07:44:de:65:51:05:27:38:a2:2b:cf:46:c6:
                    f2:d5:b3:8d:b4:77:25:f7:48:04:7e:24:47:11:94:
                    dc:58:55:68:74:6a:e2:cc:17:1f:e0:07:d9:7b:86:
                    5d:8e:0c:60:e2:2b:a3:36:aa:16:40:67:14:f3:52:
                    d2:15:ce:b1:60:79:54:16:a9:15:e8:57:a1:14:29:
                    85:b2:ca:0e:2d:96:02:f4:ad:c0:4d:a0:52:2c:da:
                    68:ec:7b:a4:8c:77:39:c6:25:fb:fa:f3:c3:57:2d:
                    ba:83:46:84:62:04:14:9f:37:1a:8a:db:52:1d:81:
                    30:ae:1e:c4:43:89:01:e7:7b:9c:5e:a6:3f:f7:f3:
                    3b:1c:dc:e0:3e:54:b1:6b:d6:d9:8f:f7:e3:95:68:
                    13:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F6:35:4D:22:66:3F:85:3F:7C:C3:72:F8:AE:6D:5F:2A:53:27:F2
            X509v3 Authority Key Identifier:
                keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:de:5e:4e:91:7a:50:07:b4:ca:51:81:1e:d2:d2:ef:46:26:
         0b:8c:3f:18:09:84:5b:e3:e9:ac:17:7c:9b:fe:99:81:75:12:
         7b:5f:8b:fd:c0:0b:24:30:87:e5:2d:4d:85:15:e8:b6:b0:03:
         07:eb:62:1b:6c:18:5f:53:a2:92:09:09:6d:f5:5a:17:a2:93:
         77:b2:fb:cf:12:ee:39:88:87:ab:0c:fc:69:e0:e5:36:6c:76:
         8d:a4:5b:b0:19:5e:24:84:ee:25:07:33:40:b0:c6:1b:0e:d5:
         c3:15:81:d8:1b:75:ae:55:77:ed:73:8c:c2:ac:a1:bc:ba:5b:
         8b:b8:19:ba:f9:a4:f5:85:21:7a:ca:f6:d7:9f:23:4a:8a:2b:
         40:1b:d2:a7:89:2e:97:4f:cc:eb:96:8e:83:24:0a:6d:c9:22:
         95:39:a3:dc:f0:51:f9:7f:49:af:7f:1c:94:58:b1:25:61:08:
         26:ea:3d:db:4c:d8:0b:d0:e8:72:de:b9:ec:d6:06:6f:62:7c:
         b8:c1:b9:a3:9f:d1:f6:0a:82:f7:fc:df:f5:29:97:c4:11:f2:
         13:18:29:f9:79:04:37:fe:7a:9e:29:ce:82:bc:4a:fa:dc:53:
         ad:06:d1:5b:2e:fd:b8:ab:15:d6:48:77:82:97:8d:d0:5e:c1:
         34:51:7c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:19 2026 by rpki-client