Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
File:                     gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json)
Hash identifier:          GbZDdOqSSe6qOzyZvkNKs0su6FsoYho2GmJyBz2F5LM=
Subject key identifier:   D2:F2:4B:46:C3:68:39:A0:75:7B:94:0E:EB:5F:78:4D:A0:51:56:D6
Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
Certificate issuer:       /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Certificate serial:       060D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
Manifest number:          05FD
Signing time:             Sat 04 Apr 2026 22:41:49 +0000
Manifest this update:     Sat 04 Apr 2026 22:41:49 +0000
Manifest next update:     Sat 11 Apr 2026 22:41:49 +0000
Files and hashes:         1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: jer8EKT9TwmPr1pyc1ecBvzqHguB4F7FpaJ8BeNodfY=)
                          2: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: 9EVY6/bljSmGk69kgq+cWH0JVAlXlHuEraH6jeuw/7c=)
                          3: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: m3HEhEwWSLfKtQb2ikmT/BSylxepHuo5uXczBb4yR7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
                          rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6D2, serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
        Validity
            Not Before: Apr  4 22:41:49 2026 GMT
            Not After : Apr 11 22:41:49 2026 GMT
        Subject: CN=69d193ad-eabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:03:4c:f5:68:ca:c3:1b:5a:86:11:a3:c0:9a:
                    64:fe:0f:13:b4:5d:de:3a:a8:8a:f1:a1:28:d1:ce:
                    b8:9e:85:46:6a:6d:76:8c:65:11:f2:7b:03:b0:08:
                    38:9c:ac:46:18:c1:2f:d0:29:ca:9a:2e:b0:26:f2:
                    17:23:7f:f6:ce:50:d9:0d:fc:16:18:41:cb:3e:71:
                    4e:ed:6a:e0:4d:25:fd:24:5a:3b:8f:54:95:f5:27:
                    3d:26:56:c0:ad:49:76:8d:51:69:9e:61:c0:4b:1f:
                    8a:2b:76:4e:fb:61:ae:68:64:a6:6f:5a:13:80:18:
                    ec:08:48:46:36:e9:f8:3d:02:18:3e:95:08:2e:70:
                    41:ec:62:22:1c:68:d3:18:4a:93:a9:c0:70:30:4a:
                    fa:90:41:3a:be:b2:b9:ed:69:57:d5:83:d0:32:da:
                    86:28:9d:4b:3d:9c:53:16:d7:d3:6f:90:c0:62:4c:
                    40:83:17:bb:b3:c4:af:48:30:84:44:53:f5:49:cb:
                    3a:6a:cb:1d:e1:8e:02:d3:3e:de:7a:e1:bb:d8:25:
                    2c:f1:c4:c6:18:e5:f5:ed:97:48:d3:dd:b1:a3:82:
                    d5:d7:8e:29:fb:6e:af:07:e9:21:ea:42:c1:3f:39:
                    cc:83:8f:2e:e4:2a:02:fd:ad:9e:9f:26:b7:f3:5b:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F2:4B:46:C3:68:39:A0:75:7B:94:0E:EB:5F:78:4D:A0:51:56:D6
            X509v3 Authority Key Identifier:
                keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fc:f3:71:7f:d4:59:f8:f2:fb:1a:eb:25:1f:3f:1c:d8:80:
         b6:ce:3f:4d:e2:64:6e:1d:08:4b:88:02:16:fe:14:a4:f5:fd:
         00:d7:41:41:1d:a1:58:22:e3:71:9e:29:9e:8a:ee:39:14:96:
         8f:7d:0b:ba:c8:48:ea:b6:9d:ba:a1:58:7e:c6:06:99:4a:8c:
         1a:c4:88:7d:ee:1a:de:7d:97:c0:63:38:d1:10:7b:3d:d6:79:
         63:21:ef:7e:e8:63:30:1b:38:04:2f:83:c3:a8:e0:30:ed:87:
         6a:73:51:06:58:7f:72:32:c7:0b:22:c8:28:bd:d4:fa:48:fd:
         df:06:52:f4:dd:13:b4:05:08:5d:8f:9a:e8:3d:d9:be:8e:a4:
         7d:d6:76:2c:9e:eb:0a:99:83:11:9b:5b:c4:aa:0a:09:d5:3c:
         ff:c4:53:e8:5d:a3:d2:78:c0:3a:d3:47:59:3e:5d:dc:a9:97:
         53:cd:9d:ed:44:ae:b8:5e:b0:82:8a:d7:4c:87:24:b1:51:c8:
         19:e6:72:fc:42:f3:30:eb:37:7f:89:43:cb:84:a2:42:fa:4d:
         65:c7:cf:74:15:20:cb:13:02:ac:86:f6:a4:bc:43:6a:59:ca:
         44:06:d9:12:16:70:a5:8f:0f:5c:80:b5:c6:f9:90:53:1c:4f:
         97:3e:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:11 2026 by rpki-client