Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
File:                     gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json)
Hash identifier:          4WOIj9hs2MwWbwB2peLqeh6DQ97931nX5Lb46wmyRtM=
Subject key identifier:   A7:7B:2E:6B:D5:51:86:96:8A:BE:00:CE:10:F9:7C:74:F1:D0:A4:A8
Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
Certificate issuer:       /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
Certificate serial:       03D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
Manifest number:          03D0
Signing time:             Mon 01 Jun 2026 01:20:26 +0000
Manifest this update:     Mon 01 Jun 2026 01:20:25 +0000
Manifest next update:     Mon 08 Jun 2026 01:20:25 +0000
Files and hashes:         1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: 4/tYgcSBGVBwjDhpn8WLMRyYqSCtkbeQ2hDBBSORyNI=)
                          2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: ZWSjR9hPEgzTd16SzLm/XWDFrj10G67gV4xDp96p4xE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl
                          rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 01:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
        Validity
            Not Before: Jun  1 01:20:25 2026 GMT
            Not After : Jun  8 01:20:25 2026 GMT
        Subject: CN=6a1cde5a-98bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:90:3a:75:05:64:4c:43:e5:3b:c6:6c:e0:
                    c0:4e:a9:e1:4a:13:8a:4f:a1:eb:06:69:e9:37:ce:
                    46:9c:80:9e:a5:aa:99:13:fc:98:fc:97:1d:4a:69:
                    e4:1e:7e:f4:0e:ec:3f:b4:b8:9e:d4:a8:0c:e7:c1:
                    06:64:84:46:74:b9:ca:15:f2:39:dd:6b:d3:22:40:
                    8c:19:76:8d:34:d4:cc:df:76:09:79:09:c3:00:e2:
                    b4:d2:b3:89:97:c4:5c:a0:99:3f:b7:da:81:56:19:
                    19:43:8d:5c:db:9d:13:55:24:ae:6b:47:e4:71:c9:
                    94:32:bc:e5:02:52:dd:dc:46:01:51:33:16:22:13:
                    c0:70:46:89:4f:f4:a6:83:01:76:75:33:7f:f3:44:
                    a6:56:d2:c6:c5:68:1f:62:90:8f:d4:77:72:df:40:
                    e6:f4:ff:ed:2e:e8:df:8a:c9:95:8f:32:84:76:54:
                    f7:35:56:35:4d:c0:29:fb:5c:a0:53:0c:d2:f2:5c:
                    39:e0:b3:6b:77:40:46:f9:47:cd:a8:10:bd:99:01:
                    eb:c6:94:95:ee:05:ee:1d:81:8a:fb:16:44:0c:7d:
                    10:3a:1c:5b:bb:68:96:8b:dd:ad:dd:08:94:e5:8b:
                    e1:dd:ce:70:3a:07:5d:96:4a:89:0e:52:b9:d3:62:
                    ea:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7B:2E:6B:D5:51:86:96:8A:BE:00:CE:10:F9:7C:74:F1:D0:A4:A8
            X509v3 Authority Key Identifier:
                keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:05:9c:66:9f:fe:ca:73:90:86:04:5a:fd:94:fb:85:5f:97:
         e3:2f:55:08:ea:18:a5:bb:b4:54:dd:72:c5:47:69:e3:55:5d:
         02:b6:44:a2:d1:00:9e:58:28:69:b8:20:b6:26:6c:e7:87:d9:
         10:3d:e8:fa:70:e1:ca:1d:e1:06:eb:60:bd:45:41:0f:1e:a6:
         47:db:fa:9f:0e:19:d1:8b:5a:b9:a0:d1:03:50:01:17:af:30:
         40:0a:ff:0c:dd:73:d0:f7:2c:11:49:17:b9:f2:c5:23:b4:c2:
         04:f2:0f:f5:5b:4c:99:0b:3a:5e:be:a7:35:c1:17:e0:8f:40:
         f8:b2:bc:37:cf:f6:9d:0d:76:7e:ee:27:51:18:ab:0d:3e:7a:
         b4:c0:2d:bb:42:94:11:19:e2:32:50:00:64:e0:31:a1:c9:f9:
         f0:ac:fe:27:60:11:5d:16:f3:37:78:41:55:35:82:c5:2b:71:
         f0:53:9b:27:8e:94:ec:e0:94:ba:19:c5:8f:61:fa:0d:ba:0c:
         b4:21:96:2e:bd:74:43:41:62:a8:fd:0f:6d:27:c6:01:77:b4:
         41:78:f4:a8:0d:10:75:8f:41:1a:ab:91:16:ef:74:c8:a1:96:
         73:39:aa:86:d5:e9:d0:a2:91:2f:5a:9e:39:bf:53:97:dc:5e:
         cd:52:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:09 2026 by rpki-client