Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          MoODkRG8vGpCahYwaAjtRa+LRiQlD0ojOZbtYfex3j0=
Subject key identifier:   28:51:F0:E8:A8:7E:EC:10:2B:24:24:E4:CF:B5:71:3C:98:89:47:4A
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          D3
Signing time:             Sun 05 Apr 2026 06:07:25 +0000
Manifest this update:     Sun 05 Apr 2026 06:07:24 +0000
Manifest next update:     Sun 12 Apr 2026 06:07:24 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: PrSnBT1zkY9miV3N4b6lyOqJ4gcEDvC+Zrcndhfgl6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
        Validity
            Not Before: Apr  5 06:07:24 2026 GMT
            Not After : Apr 12 06:07:24 2026 GMT
        Subject: CN=69d1fc1d-c491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:fe:4f:68:f7:54:42:7b:16:94:7a:8c:b9:
                    ec:c9:69:a5:2a:c0:b5:7e:e9:8b:47:51:37:fa:72:
                    41:d1:fb:79:ef:20:27:a2:cb:d6:b3:db:18:80:59:
                    fa:0c:81:e8:a9:97:6f:5d:4b:1f:96:2c:39:f4:cc:
                    fb:a6:21:f9:cb:b9:ec:11:f8:78:9b:cf:d5:cf:28:
                    9d:8b:d5:44:e0:ab:a2:f5:36:a4:8e:86:7e:c6:1b:
                    c0:24:a3:95:1d:70:12:08:47:50:53:92:88:8a:fe:
                    55:01:92:7b:b8:4f:ae:c1:5f:30:9a:50:27:c4:3b:
                    35:f3:2f:7d:4d:bb:55:9b:14:9e:b9:0d:12:4d:90:
                    65:0a:f0:c8:ad:b5:89:b8:b0:8a:35:13:56:85:45:
                    f6:af:56:37:68:71:84:a3:06:fc:49:3e:3d:b3:70:
                    71:23:f7:6a:6d:b2:0b:8d:4a:07:a8:b1:02:87:87:
                    78:7e:1a:01:49:9e:88:7d:bd:a5:fe:b7:c1:14:04:
                    b8:dc:fd:9a:8a:42:93:f5:34:db:2a:28:80:54:c9:
                    32:b4:82:5d:a8:7e:af:07:c3:97:f4:41:68:ec:83:
                    f7:b5:37:50:31:44:ab:60:c7:f2:7f:79:43:4d:a6:
                    6b:3d:b2:cb:98:0b:11:fb:ae:88:49:70:e0:14:6e:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:F0:E8:A8:7E:EC:10:2B:24:24:E4:CF:B5:71:3C:98:89:47:4A
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:49:e3:bb:8b:3e:b6:4a:4c:fd:87:12:eb:e7:5c:33:48:8e:
         b1:6b:9f:af:f1:5e:6e:fd:d9:7e:23:c5:97:de:46:55:90:1a:
         0f:19:8b:8e:9c:ec:81:7e:38:99:b1:80:b2:41:12:83:6d:30:
         53:4e:c9:14:83:c1:19:71:03:e5:c0:fb:11:47:72:8a:7a:1f:
         05:96:ac:f7:5e:42:49:94:31:55:7d:9a:5d:9b:55:fe:6e:98:
         14:0c:ee:cc:da:00:34:59:e2:ec:aa:86:48:89:94:d3:13:4d:
         ac:42:cd:bb:40:0e:5e:8f:34:06:a9:86:07:bc:d5:11:91:33:
         ac:a9:9d:92:c9:00:0a:30:37:57:17:4e:47:9d:87:16:bd:1c:
         ee:e7:7a:4a:93:0f:a8:00:1b:3d:3c:8e:96:07:2f:e6:51:a4:
         77:e8:38:36:df:5f:8f:d4:df:d2:78:6d:9f:5a:bb:b0:a8:63:
         15:e2:81:49:05:54:08:25:21:4c:22:95:42:ee:e7:3b:51:2e:
         7f:b5:4f:4c:67:9c:b6:9b:fd:fb:47:50:96:dd:a6:fa:12:21:
         63:ce:03:be:d7:10:b4:75:53:fd:15:fe:40:55:82:bf:a1:d7:
         8e:8e:b0:99:55:b7:b5:cb:9c:2d:40:16:57:73:06:01:10:f8:
         f0:45:0b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:39:01 2026 by rpki-client