Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
File:                     giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json)
Hash identifier:          qWf45o59XsElKtzYik3m4fDuxUHRtkE+K/cZsOzo3Nc=
Subject key identifier:   B2:51:73:BB:CE:81:5C:60:59:24:83:D1:20:F7:9E:CC:3A:DE:DB:5D
Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40
Certificate issuer:       /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240
Certificate serial:       0C06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
Manifest number:          0BFD
Signing time:             Sat 04 Apr 2026 18:40:08 +0000
Manifest this update:     Sat 04 Apr 2026 18:40:08 +0000
Manifest next update:     Sat 11 Apr 2026 18:40:08 +0000
Files and hashes:         1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: o8QmLeIWglYSMHBBXtbWFMYTjuqnxzMqH9BpyUI1B/c=)
                          2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: TI2KVdmBR8c+EKodG88ZYvgfW8TmL2x0GR8/djTO5Zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl
                          rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3078 (0xc06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240
        Validity
            Not Before: Apr  4 18:40:08 2026 GMT
            Not After : Apr 11 18:40:08 2026 GMT
        Subject: CN=69d15b08-6e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:74:16:ae:a1:bf:6b:77:4a:fb:6b:d2:b2:
                    2f:f9:b6:d6:29:4c:a5:38:cf:9c:17:d0:ba:49:78:
                    9b:15:fd:6b:ee:37:1b:c8:aa:ac:f7:5c:50:17:2e:
                    e0:56:fb:eb:97:18:14:d9:52:fa:d6:ef:f5:89:10:
                    9c:a8:a9:46:1b:5d:99:07:1a:6e:de:51:64:df:e7:
                    4b:6f:c4:e6:f7:8c:08:a5:ff:d7:99:70:e3:d0:83:
                    5c:c9:c8:ca:ca:43:43:00:86:56:43:b3:db:8b:14:
                    01:b0:18:80:38:b8:3d:1b:1d:7e:63:97:5a:60:43:
                    e8:f5:2d:a3:9e:57:cd:88:58:95:72:e7:fd:16:f8:
                    19:94:5c:36:98:45:3b:de:0b:e9:10:2f:23:33:49:
                    00:c2:94:81:54:3c:ce:43:db:ae:29:8d:07:9b:de:
                    6b:fb:e6:d3:be:74:72:d8:38:b6:b9:25:d7:ce:a7:
                    b0:fa:c2:02:0f:9c:7b:2a:b3:74:15:a7:2e:39:a5:
                    f2:47:94:a7:eb:88:26:2c:4e:8d:00:9d:31:d0:e8:
                    97:c4:77:50:57:38:63:c6:b1:61:06:e2:25:39:b1:
                    ce:8d:d6:dd:20:5a:59:77:cb:2a:86:51:c5:97:3b:
                    1f:de:99:66:bc:6d:ac:7d:18:68:5e:64:57:0e:cc:
                    3f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:51:73:BB:CE:81:5C:60:59:24:83:D1:20:F7:9E:CC:3A:DE:DB:5D
            X509v3 Authority Key Identifier:
                keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8e:bc:67:de:50:d6:fe:fc:e1:d5:80:d9:ed:a7:5a:d0:1a:
         49:e2:36:e1:eb:2b:88:e7:88:df:7a:81:f5:0f:b9:1b:c9:da:
         3e:67:84:bb:44:dd:06:d1:56:6d:4c:bf:66:a8:d4:d8:6d:68:
         12:d2:62:55:7f:ee:c5:ac:20:df:c2:71:88:cb:10:45:5e:a5:
         2c:bd:05:10:64:82:d3:6b:e1:34:cc:bc:27:32:d6:a6:c2:23:
         cf:47:43:48:6b:f1:64:ee:d1:b3:17:e0:51:52:25:f9:d8:5f:
         9e:0e:9d:9b:a0:6e:1b:67:9b:1f:bd:83:68:35:18:4a:97:c2:
         51:81:98:a5:1d:a8:83:9a:26:4f:ba:42:f6:64:19:9b:49:c5:
         f5:36:84:48:77:b2:80:7a:43:9a:7d:39:dd:7c:2b:ff:af:f7:
         fe:0a:aa:10:0c:40:e8:a2:d2:81:ec:d1:78:87:ae:8f:4a:b4:
         48:21:05:73:71:7e:9e:2a:cc:b8:e1:f2:22:2b:1d:51:45:8d:
         3d:d3:cb:b6:60:e2:e5:4d:61:ed:e6:16:87:a5:07:a7:54:38:
         7b:3d:08:9d:be:a4:33:92:5b:d9:88:da:20:38:f5:0b:f3:90:
         4c:2e:96:87:a5:1d:9e:3c:91:3b:2e:1d:16:e5:1a:1e:d0:4a:
         74:e7:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:41:07 2026 by rpki-client