Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File:                     _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier:          AvJtEKiFWn4SvK0MFjbb3B+kLEd3j4uXTbc3z0JN034=
Subject key identifier:   09:86:8D:AA:E5:AD:89:4E:15:F6:45:4D:EF:48:51:2C:7F:07:DA:92
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer:       /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial:       038B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number:          0385
Signing time:             Mon 02 Mar 2026 00:08:12 +0000
Manifest this update:     Mon 02 Mar 2026 00:08:10 +0000
Manifest next update:     Mon 09 Mar 2026 00:08:10 +0000
Files and hashes:         1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: mUQhd+vD8vL9N2SNrY0gtkGNg8CGyFa6CySg+fxB7hU=)
                          2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: hEszwjLLlGjAQWr8R8eiMuWITyAjg0iy90PkI3Yb1NY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
        Validity
            Not Before: Mar  2 00:08:10 2026 GMT
            Not After : Mar  9 00:08:10 2026 GMT
        Subject: CN=69a4d4eb-666b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:0c:d7:88:f9:51:e2:a0:eb:3a:6a:1a:e6:
                    a9:eb:46:8b:4b:a8:a8:f8:89:dd:83:e0:fa:12:e5:
                    92:4e:e6:1a:22:fc:76:e6:ad:c6:61:e6:33:86:22:
                    07:be:a4:5c:55:81:2f:ba:2c:a7:3a:35:69:74:e8:
                    c2:97:12:d8:51:73:9e:55:b8:48:bd:8c:1b:c4:7b:
                    9d:c4:ef:a0:db:ca:38:78:3f:80:69:7b:50:31:bd:
                    bc:6b:f2:76:4c:df:aa:3d:c8:2d:b3:b9:e0:cc:4c:
                    25:a2:4f:53:99:ac:e6:8a:71:4e:fa:b1:ce:77:ca:
                    51:99:bd:4b:b2:33:87:61:43:4c:03:73:9c:a3:21:
                    c4:be:e3:8e:35:4d:7d:80:9f:7e:8b:91:d4:f6:1e:
                    35:ac:54:f4:b2:ed:eb:54:53:f9:10:19:02:f7:c2:
                    5e:31:67:c2:a9:c4:84:53:49:0b:e4:73:d6:f4:a6:
                    8e:73:0e:44:db:96:e7:c5:47:59:bc:42:5b:90:02:
                    da:fc:c7:4c:d8:05:71:8d:0a:4d:cf:b0:f6:b3:3c:
                    46:41:8e:e1:2f:b1:75:e6:d1:e0:c2:05:7e:dc:af:
                    66:ee:c5:bc:cb:0c:7f:78:0d:51:d0:45:48:5b:10:
                    ca:82:39:3e:23:bf:10:38:06:f3:19:cb:9a:ad:c1:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:8D:AA:E5:AD:89:4E:15:F6:45:4D:EF:48:51:2C:7F:07:DA:92
            X509v3 Authority Key Identifier:
                keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:f0:65:48:b6:3b:81:b2:75:36:a8:11:ee:23:91:49:58:
         a9:1f:1c:08:f5:d9:cd:7e:a5:68:e9:2a:96:94:86:dd:c2:43:
         ae:9a:24:7b:90:28:b7:54:74:6e:15:e5:8a:78:5e:d7:b2:f6:
         3d:24:92:ea:48:b0:e3:c4:f6:92:b0:3b:de:0e:39:1f:0e:79:
         1d:6e:3e:85:54:ad:a9:17:68:e3:4d:40:6f:f4:de:1f:c8:b2:
         a1:36:86:a4:a8:95:ee:28:75:56:6b:43:29:d1:16:72:6e:9c:
         89:1d:cc:bf:bf:c7:07:e5:dd:2a:62:a6:48:aa:4d:48:ab:32:
         ef:4c:9c:e1:9a:5d:37:96:c5:34:02:5e:75:cd:0a:04:fd:7a:
         c7:3a:c6:48:17:d4:64:97:38:99:74:12:1b:a5:42:6f:38:7a:
         72:cf:ca:f9:33:b1:d2:f9:fd:8c:48:7d:70:df:09:9c:5e:28:
         7d:87:a0:43:72:4e:87:95:86:23:6a:6e:2d:06:0d:3a:01:d3:
         93:e8:47:26:02:f7:01:07:38:6a:f6:e0:31:63:4f:ed:bc:e3:
         ce:d7:32:46:fe:eb:b8:09:02:66:a3:7f:1e:3d:a6:a2:d5:67:
         9b:15:a0:2f:20:47:11:9a:ee:12:5a:d4:92:55:ea:b6:7b:eb:
         82:c8:9d:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZENDMxMTAvBgNVBAUTKEZDNjg4RkI5NUNDNTIwNUUwM0U3MEE2MDVDOTk0QzVE
NDk1QUIzMzIwHhcNMjYwMzAyMDAwODEwWhcNMjYwMzA5MDAwODEwWjAYMRYwFAYD
VQQDEw02OWE0ZDRlYi02NjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hIM14j5UeKg6zpqGuap60aLS6io+Indg+D6EuWSTuYaIvx25q3GYeYzhiIH
vqRcVYEvuiynOjVpdOjClxLYUXOeVbhIvYwbxHudxO+g28o4eD+AaXtQMb28a/J2
TN+qPcgts7ngzEwlok9TmazminFO+rHOd8pRmb1LsjOHYUNMA3OcoyHEvuOONU19
gJ9+i5HU9h41rFT0su3rVFP5EBkC98JeMWfCqcSEU0kL5HPW9KaOcw5E25bnxUdZ
vEJbkALa/MdM2AVxjQpNz7D2szxGQY7hL7F15tHgwgV+3K9m7sW8ywx/eA1R0EVI
WxDKgjk+I78QOAbzGcuarcFQNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAmGjarl
rYlOFfZFTe9IUSx/B9qSMB8GA1UdIwQYMBaAFPxoj7lcxSBeA+cKYFyZTF1JWrMy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ0My83RDk5ODA3NkRD
RDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklGNEQ1d3BnWEpsTVhVbGFz
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19HaVB1VnpGSUY0RDV3cGdYSmxNWFVsYXN6SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkQ0My83RDk5ODA3NkRDRDExMUVDQTNBQjlEMzZDNEY5QUUwMi9fR2lQdVZ6RklG
NEQ1d3BnWEpsTVhVbGFzekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfYvwZUi2O4GydTaoEe4jkUlYqR8cCPXZzX6laOkqlpSG3cJDrpoke5Aot1R0
bhXlinhe17L2PSSS6kiw48T2krA73g45Hw55HW4+hVStqRdo401Ab/TeH8iyoTaG
pKiV7ih1VmtDKdEWcm6ciR3Mv7/HB+XdKmKmSKpNSKsy70yc4ZpdN5bFNAJedc0K
BP16xzrGSBfUZJc4mXQSG6VCbzh6cs/K+TOx0vn9jEh9cN8JnF4ofYegQ3JOh5WG
I2puLQYNOgHTk+hHJgL3AQc4avbgMWNP7bzjztcyRv7ruAkCZqN/Hj2motVnmxWg
LyBHEZruElrUklXqtnvrgsid1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:02:58 2026 by rpki-client