Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
File:                     GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json)
Hash identifier:          Manw5ztDy7y5/WqEfiN5U4YWDg0RSv4iaZDMdXrWw6o=
Subject key identifier:   94:A3:5D:27:55:E1:79:5B:7C:35:9C:66:AD:CB:7B:91:9B:14:AC:27
Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE
Certificate issuer:       /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
Certificate serial:       3520
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
Manifest number:          566F
Signing time:             Sat 04 Apr 2026 14:52:17 +0000
Manifest this update:     Sat 04 Apr 2026 14:52:17 +0000
Manifest next update:     Sat 11 Apr 2026 14:52:17 +0000
Files and hashes:         1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: FVlxGyu90YmI/DY6cbTkPjhQ28CzKMr0htUDP3rTt+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13600 (0x3520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
        Validity
            Not Before: Apr  4 14:52:17 2026 GMT
            Not After : Apr 11 14:52:17 2026 GMT
        Subject: CN=69d125a1-331f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:75:f8:92:f9:9c:11:f8:00:9d:09:8c:19:
                    1a:f4:84:8c:75:ea:3f:1a:b6:bb:be:c0:18:fd:35:
                    c0:45:2d:5d:62:88:74:55:a2:db:9d:5c:e6:d1:c2:
                    13:5a:b9:76:48:6f:e3:50:e7:87:d0:09:d9:69:28:
                    72:d4:74:94:5d:7f:c4:85:30:22:c3:ea:0e:c5:e0:
                    d5:e4:43:67:e6:a9:4c:72:be:ba:6f:05:88:76:bc:
                    99:97:27:d4:72:01:66:2c:4b:eb:91:ea:d1:d1:26:
                    b9:f3:2f:cc:a4:cb:f4:2c:f0:9d:b7:02:8a:04:da:
                    9a:ab:de:50:71:90:42:b8:a6:10:95:dd:b0:54:5c:
                    4f:a6:d8:71:08:0f:20:da:1e:53:be:8b:dc:ed:b2:
                    6b:f2:fa:ca:2e:44:86:31:eb:0c:8d:c5:3e:1e:a3:
                    94:04:e0:ce:6c:45:f4:12:b3:9f:4a:7b:de:e7:1b:
                    e3:4d:cc:b4:1a:7d:96:2b:88:24:72:d6:51:f2:de:
                    80:98:33:ae:bd:20:dd:e5:98:5e:1b:61:07:27:9a:
                    3f:94:81:15:5e:ce:e5:fd:bb:77:9f:ab:bf:39:99:
                    74:d5:9b:43:a2:c3:cc:ea:cc:e5:ec:03:ee:28:35:
                    5d:f1:f4:84:7c:73:50:e0:1e:7c:71:92:71:14:9d:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A3:5D:27:55:E1:79:5B:7C:35:9C:66:AD:CB:7B:91:9B:14:AC:27
            X509v3 Authority Key Identifier:
                keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a0:c7:f6:6a:69:3a:44:1c:1b:8f:f3:92:40:54:10:73:a3:
         a5:ef:f2:44:44:b2:e9:20:dc:dc:d1:23:d4:74:06:5b:06:2d:
         df:d5:68:00:2b:1a:3c:74:ad:a3:45:a1:6a:d4:08:cb:85:ea:
         74:31:39:0a:6f:15:71:79:3b:1d:f4:74:cd:0b:1b:38:9f:4d:
         20:98:47:46:70:ed:ce:47:31:7a:0f:91:43:de:56:8e:a7:74:
         fe:3f:8e:93:90:2b:f2:26:06:15:a1:25:fc:b6:85:f1:08:f5:
         53:44:e4:69:cb:3d:1e:6a:93:5a:c2:0a:bf:3f:26:39:01:a0:
         61:bb:8f:17:5b:85:5c:7b:8f:58:a5:0a:bf:b0:b4:5f:1c:39:
         de:05:b3:37:55:e4:de:26:55:32:77:a9:83:03:8f:08:c0:39:
         b1:c4:ba:12:0b:8d:ea:b8:b4:94:8b:67:f6:62:7d:5c:36:f2:
         67:ca:99:6e:4a:e4:fb:f5:c8:22:53:13:33:69:f6:9b:c0:1b:
         2c:81:d1:60:22:78:dd:71:6b:60:04:01:a1:a6:59:9d:7d:1b:
         b4:9f:81:b9:4b:ff:81:58:6b:26:27:44:59:12:d1:ef:60:21:
         fc:ed:04:1a:1c:1a:70:88:87:82:bd:a5:7e:63:0a:c1:3c:96:
         ac:18:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:03 2026 by rpki-client