Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File:                     gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier:          8qI1++aGoN6eW4te0OVQq7NcMRj8cv5zJaTliG0PqFM=
Subject key identifier:   B5:34:A7:DA:B2:74:AB:96:7B:BB:A6:74:18:A0:71:C1:D9:A6:BA:23
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number:          0218
Signing time:             Sat 23 May 2026 02:59:47 +0000
Manifest this update:     Sat 23 May 2026 02:59:46 +0000
Manifest next update:     Sat 30 May 2026 02:59:46 +0000
Files and hashes:         1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: ftaG86kq2/o7EdA5bpMfVg4i0Kx2Ib2hy8B4faqf+Xs=)
                          2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=)
                          3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 02:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: May 23 02:59:46 2026 GMT
            Not After : May 30 02:59:46 2026 GMT
        Subject: CN=6a111823-476f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:d1:96:f0:1f:ce:29:23:95:d6:53:cb:44:
                    c7:60:1d:e6:3b:d1:c1:1a:12:59:4d:6a:63:20:65:
                    de:15:d1:07:02:84:47:a8:67:85:86:6c:9e:cb:9a:
                    8a:0e:98:d4:c1:2b:18:4d:5d:2f:b6:da:bd:f4:10:
                    38:9c:e2:76:67:69:31:84:fc:fb:95:f2:ba:20:9f:
                    96:bd:1f:82:f7:d8:d9:b0:fe:75:48:f5:71:a4:18:
                    34:11:c4:a6:96:23:66:db:a0:e6:47:09:80:ee:e2:
                    17:1c:ba:33:75:8a:f7:12:ee:c8:d9:2e:84:00:61:
                    22:75:62:f1:b2:73:6c:23:5d:ee:a1:04:df:05:0c:
                    76:50:6a:2c:d4:34:9f:8a:0d:42:23:17:6a:1b:83:
                    39:5f:89:54:7f:66:4d:a8:aa:6c:24:01:2d:2c:4c:
                    9d:51:e9:e5:b1:ad:9b:e9:54:a6:dd:a1:53:b7:6e:
                    5f:7d:34:6e:d0:6b:64:a6:4e:55:29:4a:50:36:a4:
                    f3:5a:10:76:30:75:3c:c0:0a:9a:c8:e0:ea:7b:8f:
                    b9:2e:41:44:17:44:b8:6b:67:b4:dc:af:7d:d4:f6:
                    3e:3e:f5:a4:e5:10:72:d1:23:56:ec:3d:df:93:9f:
                    71:c3:6b:81:c6:f5:73:3f:80:b9:cf:f1:a0:97:d9:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:34:A7:DA:B2:74:AB:96:7B:BB:A6:74:18:A0:71:C1:D9:A6:BA:23
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5e:60:ca:40:bd:be:50:0c:1c:3c:cb:a4:7a:a5:3c:9a:ee:
         42:82:06:e3:0d:79:ff:2c:0a:d6:04:12:d4:76:8f:66:8a:a9:
         81:63:f8:5b:d9:f0:c0:a6:66:5c:39:97:46:1e:db:4d:af:39:
         59:a8:9a:74:19:40:68:ed:3f:39:52:24:97:cd:87:f3:d2:12:
         c6:60:f7:fc:a2:4b:39:73:b6:c9:0a:dd:73:65:dd:e6:d0:cd:
         ee:ab:90:ae:2d:df:f7:dd:24:99:95:de:f4:d2:d0:3e:8f:bd:
         1a:8b:26:a2:56:a8:c6:38:c0:7e:04:32:c6:93:d5:32:1b:32:
         d5:cd:2c:d3:cc:5c:7c:56:57:c0:ab:e5:09:0d:70:22:3e:a1:
         ed:5a:57:e0:61:89:6c:ea:d8:91:54:1d:2e:dd:51:c4:79:71:
         8b:3b:fa:54:7d:09:97:bc:7c:e9:42:73:90:b7:5b:14:ac:38:
         8c:1b:78:63:e6:86:dc:52:87:1a:22:76:2c:22:7f:f0:b5:ed:
         ca:9c:ff:db:58:34:71:6a:6d:dc:be:56:f4:88:d3:b0:7f:39:
         8d:97:f5:92:c6:9d:0c:95:cf:b4:33:72:48:92:2c:40:e3:bf:
         f9:07:4b:fa:70:b3:22:52:a2:71:df:f9:07:3e:0e:1c:ab:ea:
         f2:db:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:58:13 2026 by rpki-client