Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
File:                     gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json)
Hash identifier:          hd6p1Pbq18ZRWtdAxP0c1kzrBPITxCk7GCqicOqrB7k=
Subject key identifier:   4E:53:D7:32:71:40:1F:48:88:CF:74:55:7B:DF:82:C9:53:D7:9F:52
Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
Certificate issuer:       /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
Certificate serial:       03BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
Manifest number:          03B3
Signing time:             Sun 05 Apr 2026 00:27:57 +0000
Manifest this update:     Sun 05 Apr 2026 00:27:57 +0000
Manifest next update:     Sun 12 Apr 2026 00:27:57 +0000
Files and hashes:         1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: cYJbRkMENWVReBJbL/3/1H2YWUASdzT5ZQVG0oH0caY=)
                          2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: ZWSjR9hPEgzTd16SzLm/XWDFrj10G67gV4xDp96p4xE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl
                          rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
        Validity
            Not Before: Apr  5 00:27:57 2026 GMT
            Not After : Apr 12 00:27:57 2026 GMT
        Subject: CN=69d1ac8d-0090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0d:44:2f:4c:a7:13:83:35:47:2d:9f:f6:1c:
                    da:f4:2d:3b:f7:80:d8:a7:f7:bb:b8:f9:39:d9:de:
                    da:03:39:1b:7d:e1:0e:7b:06:96:0a:4e:e7:0f:04:
                    69:d9:da:ff:27:ca:0b:7e:7c:2a:96:fb:a4:52:72:
                    13:9d:53:03:e8:75:cd:47:13:ba:52:6c:71:8f:ca:
                    d3:29:13:43:8b:c7:af:43:4f:b7:61:78:16:f5:07:
                    2d:e2:3f:da:39:eb:4d:a9:3a:08:a6:8a:12:b6:0c:
                    a9:c1:b3:26:93:95:52:e5:7a:13:6b:e7:5b:0e:4b:
                    07:d3:64:db:90:ac:b9:73:fa:b8:d6:06:2f:4f:95:
                    7e:04:85:7a:ed:40:d4:34:30:1d:25:32:b5:c4:64:
                    d6:70:b5:6b:76:10:cc:65:72:15:19:21:d8:58:73:
                    b2:ff:a6:35:74:f7:89:cc:16:02:70:1b:d6:53:b5:
                    8e:96:5e:27:49:98:80:e0:e1:5b:5b:12:ea:16:d3:
                    dd:d1:17:9c:cf:63:5d:82:06:9b:d9:03:35:5f:2d:
                    2d:d3:33:ef:5f:dd:16:9f:ba:34:c8:82:82:90:bc:
                    8b:54:62:f1:91:c0:30:5b:e9:55:ae:5e:4c:dc:20:
                    30:21:7b:e4:6c:66:73:1b:9e:4d:94:f3:b1:df:49:
                    9c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:53:D7:32:71:40:1F:48:88:CF:74:55:7B:DF:82:C9:53:D7:9F:52
            X509v3 Authority Key Identifier:
                keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2f:1c:f7:29:44:46:49:d3:b3:24:28:e9:db:5f:14:c7:ff:
         bd:8f:3a:e9:74:55:5d:14:19:e2:42:94:ba:42:0d:49:f9:d8:
         54:cd:8c:0b:75:a4:0f:3e:d1:f1:20:cd:6f:a7:c9:c3:1e:44:
         6e:ee:d1:c2:53:d6:65:5f:d1:81:d5:06:02:40:7a:01:54:4c:
         9b:58:9f:9a:6b:f2:5a:08:5a:8a:41:4f:de:00:1f:ac:30:72:
         2e:40:3d:0e:5f:d8:41:b1:50:43:48:58:61:a6:9e:e4:61:52:
         06:fc:bb:3e:3e:99:60:fd:99:7c:f0:d4:8e:ac:ac:36:f0:e0:
         5e:5e:da:f3:f7:30:eb:50:35:b6:37:8d:d7:1a:e2:d5:20:f6:
         88:94:31:2d:f4:bd:27:12:f3:36:5d:a3:ec:e5:80:b3:1d:f9:
         05:a4:21:89:09:fe:f1:67:cb:da:e4:a9:82:2f:b2:d6:f8:50:
         14:93:f9:5d:68:29:f2:e6:03:5f:95:05:c9:be:b5:1a:2c:83:
         84:f6:98:91:0b:b7:ba:07:17:28:c4:62:47:f1:c5:66:f2:34:
         87:1d:49:f5:bc:34:b4:c3:1b:36:c4:e0:cc:b5:63:26:e7:dd:
         84:38:87:d4:e8:45:d4:3f:01:24:59:dc:d0:47:8d:e0:39:9c:
         a8:05:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:40 2026 by rpki-client