Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
File:                     GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json)
Hash identifier:          cbUAo6J7LGCnn9A7szzcxA5KJEFE11Dpkiex41Nn0fM=
Subject key identifier:   AF:16:3C:1A:99:2D:28:5A:25:0E:8F:B5:7C:6A:C5:C8:B8:2A:81:FE
Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
Certificate issuer:       /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
Manifest number:          D9
Signing time:             Fri 13 Mar 2026 05:36:33 +0000
Manifest this update:     Fri 13 Mar 2026 05:36:33 +0000
Manifest next update:     Fri 20 Mar 2026 05:36:33 +0000
Files and hashes:         1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: 9qBZWvcGVu38UPZ1lngX3vYJI+KHhBOpMkDUoXPUFt0=)
                          2: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: vmkU+Wc2xpDQMgPam/mAe6kA8brCuJz9cHHqu3MmaNY=)
                          3: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: n/hyIjFqCJzOht5Ju7CI7zedjM3U4KBE15I93wtTvdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl
                          rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 05:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
        Validity
            Not Before: Mar 13 05:36:33 2026 GMT
            Not After : Mar 20 05:36:33 2026 GMT
        Subject: CN=69b3a261-0856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:16:bc:55:c7:66:b4:17:ab:40:37:2a:1a:7d:
                    23:cb:e2:6f:72:03:a4:40:9a:1f:ce:f8:a0:36:46:
                    bc:b6:45:a4:2f:42:40:fb:a4:b9:2f:62:6c:3e:d9:
                    f7:43:80:b2:04:45:f5:1c:13:27:fd:ec:68:9e:86:
                    77:47:4e:cd:f7:67:a2:ee:99:ac:1f:de:ba:50:81:
                    71:56:14:7c:5b:ea:16:1e:ab:07:9d:e7:b9:88:49:
                    29:63:22:96:56:75:d1:44:ec:80:2d:66:d0:87:18:
                    5e:af:ea:3a:41:30:0b:de:f5:93:09:2a:33:03:21:
                    e8:13:70:ad:03:f7:42:59:dc:bb:9e:da:74:96:ac:
                    fb:09:bd:c4:08:5d:f6:63:7f:4f:3f:07:82:ce:d5:
                    dc:c7:d4:fc:75:dc:44:4a:fc:4e:5e:24:a4:df:c3:
                    51:2d:b5:51:76:84:7d:50:ea:7b:c2:cd:43:94:68:
                    24:37:11:bc:27:29:9b:c9:3e:c7:52:89:16:65:83:
                    67:05:c5:80:bf:fa:93:1d:a7:6a:b7:88:7e:62:c0:
                    40:c2:27:7b:46:91:ae:91:12:07:fd:b2:b0:f0:c0:
                    fb:77:0c:6f:eb:ce:ef:fa:f8:bd:35:0e:6f:74:2a:
                    b8:fc:9e:dd:19:c8:6c:bb:f7:43:dc:2a:d0:11:16:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:16:3C:1A:99:2D:28:5A:25:0E:8F:B5:7C:6A:C5:C8:B8:2A:81:FE
            X509v3 Authority Key Identifier:
                keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:6b:6c:65:e3:1d:56:a2:4e:3d:00:13:e8:fd:9b:1f:84:22:
         1c:30:6c:db:f6:41:df:bf:98:2c:37:23:0e:e0:1e:df:b3:bc:
         02:28:d3:bc:0e:0f:c6:e3:15:51:29:bf:cd:b5:90:96:7b:d3:
         25:fb:53:63:7e:da:b2:c7:63:d9:34:7e:b5:2e:b7:6c:68:7c:
         75:6b:9a:b6:5f:c2:4d:a8:8e:13:8f:9e:8e:10:9f:d7:8c:77:
         11:ef:93:79:24:44:17:05:0e:77:0d:d9:af:61:17:94:c6:2a:
         18:08:46:86:55:e0:06:c7:4f:b7:1f:b8:70:19:29:42:22:75:
         3a:67:59:e7:39:a0:d4:f1:7f:a4:97:27:13:c4:61:0f:23:1e:
         f3:4b:2f:18:08:9c:e9:ec:e8:38:0a:f2:d8:de:05:51:01:7e:
         9c:2b:32:5b:f8:12:d7:0f:aa:d2:3a:4a:92:6f:f9:a0:c1:66:
         c2:e5:92:97:2c:fe:4a:9e:dd:59:8f:74:0a:c0:6f:bf:e7:3d:
         e6:62:58:43:f9:80:f2:d7:49:45:49:a0:ce:8a:b6:27:5d:3f:
         02:ca:8d:9e:db:c1:41:2e:dc:a3:45:ff:ab:f7:14:85:23:e2:
         ec:34:d0:43:2a:bf:80:ef:f5:8a:47:b9:2b:b6:87:f1:3b:4b:
         45:d9:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:41:03 2026 by rpki-client