Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
File:                     gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json)
Hash identifier:          V7XNTo8DHIbcHgeB16jQwDqSUWIKDvz9mPhK3W/eMI0=
Subject key identifier:   84:70:52:B8:42:4A:53:21:70:28:00:9B:DD:40:F8:A7:CC:60:AE:45
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Certificate issuer:       /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial:       04F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
Manifest number:          04D9
Signing time:             Thu 12 Mar 2026 23:25:09 +0000
Manifest this update:     Thu 12 Mar 2026 23:25:09 +0000
Manifest next update:     Thu 19 Mar 2026 23:25:09 +0000
Files and hashes:         1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: XgKf1H3HCZQI56d6khxUQNJRMzD5Qju3p+HtxV1Ua3c=)
                          2: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: H5Kg0WWi2ArQlY3F4MuVxADOQ4KYkHou5PZkoZEWfh0=)
                          3: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: +pV8MUFMD6DhuSiuoXuPicHZS5pTjm70rSYAIUz1WWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
                          rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
        Validity
            Not Before: Mar 12 23:25:09 2026 GMT
            Not After : Mar 19 23:25:09 2026 GMT
        Subject: CN=69b34b55-a868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:01:5d:43:e3:2c:e1:6a:62:e8:39:9e:92:
                    e5:6d:c4:6e:ec:d8:e1:67:64:09:e2:58:78:84:c7:
                    82:d6:8e:82:10:9f:78:f8:3f:2e:76:52:10:fa:c4:
                    c6:0d:f5:b5:d5:13:a3:73:6c:aa:f2:d9:30:2e:ca:
                    38:8b:0a:af:69:8e:ed:e0:89:8d:85:82:98:09:23:
                    33:d0:bf:74:e3:fd:5c:ae:c2:78:c4:19:23:fe:75:
                    a5:f0:c4:b7:ae:c9:18:b6:cc:e2:c4:f2:b2:5a:8e:
                    74:dd:81:a1:92:ed:b0:e8:3e:0e:a7:40:1a:df:7f:
                    01:08:c7:46:0f:27:88:be:30:1d:85:47:c8:d0:68:
                    db:a4:8b:8f:e7:85:5a:21:ec:6c:bb:30:5e:95:f4:
                    bd:91:d8:ba:c7:df:9c:18:94:c6:a1:e3:68:a3:dc:
                    94:ef:04:b5:95:d1:b1:76:94:d6:49:7d:f8:ef:66:
                    20:9d:0d:1c:35:2b:dc:8b:80:86:c9:ab:81:66:21:
                    02:07:aa:91:38:8a:cf:39:b6:bd:57:2e:fe:aa:a3:
                    ad:0e:fa:87:43:38:bd:bb:29:76:e7:58:69:9e:19:
                    32:93:a3:c7:cc:9e:c8:5e:ff:54:79:5c:0e:e2:c6:
                    54:5a:03:ee:32:1e:11:62:4c:7d:5a:4e:31:de:2f:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:70:52:B8:42:4A:53:21:70:28:00:9B:DD:40:F8:A7:CC:60:AE:45
            X509v3 Authority Key Identifier:
                keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:16:a2:ae:01:29:b9:fa:58:0b:aa:5e:65:e8:11:fc:2c:c0:
         9c:9b:97:84:70:fb:4b:7c:82:01:67:46:18:bb:b5:02:db:bf:
         38:5c:10:e4:f9:50:2a:bc:5f:ff:20:d3:5d:00:dc:da:8f:53:
         ac:ff:a1:78:8f:8a:7c:9f:01:54:5d:91:41:a9:16:52:df:b4:
         3a:27:f2:1d:7e:6b:10:39:c7:a9:ba:9f:c1:30:18:10:0c:fe:
         e4:95:f8:81:20:b1:73:4c:f9:f2:92:75:ab:63:73:60:10:95:
         f1:31:53:99:ff:10:de:18:7d:02:c6:e9:8a:69:7d:e1:18:cc:
         69:85:b2:9d:7c:ec:eb:81:da:06:03:91:24:96:54:ce:35:15:
         35:9a:11:bd:46:09:ed:9d:a9:6d:2a:ea:ba:0b:fd:7b:d5:7f:
         bf:4a:ee:79:26:78:4d:9e:7c:ef:9e:f3:de:4e:9d:cc:f7:ef:
         8b:22:f6:60:c5:0f:ab:5d:24:d8:50:e2:76:2e:32:8e:ac:2c:
         40:6a:51:36:58:c7:40:55:f0:00:fc:b2:0f:62:88:ba:5c:75:
         10:c3:e2:2d:56:31:6d:e2:a5:f5:4b:ef:69:ac:39:90:2b:9e:
         c2:b1:e9:0d:79:9f:3a:74:23:19:f4:af:2c:c1:24:91:dc:de:
         43:07:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 02:20:20 2026 by rpki-client