Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
File:                     gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json)
Hash identifier:          /0jpzvjR39taFoterfkuIlx3I/hHbUwGyXr8aMziu2o=
Subject key identifier:   9A:FD:30:96:97:A9:57:53:81:18:FF:EF:2E:1D:E9:01:4F:6A:DD:2A
Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
Certificate issuer:       /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Certificate serial:       0249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
Manifest number:          0243
Signing time:             Sun 05 Apr 2026 02:02:30 +0000
Manifest this update:     Sun 05 Apr 2026 02:02:30 +0000
Manifest next update:     Sun 12 Apr 2026 02:02:30 +0000
Files and hashes:         1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: 1dcnDPD7kck2m8LFLAKAgdJ+D/4hYO6QmbGtmDMBAmY=)
                          2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: y+Wimi0nOKR+CCaPEyUVlyF7NSoOO3qXylD3M4nU6+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl
                          rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
        Validity
            Not Before: Apr  5 02:02:30 2026 GMT
            Not After : Apr 12 02:02:30 2026 GMT
        Subject: CN=69d1c2b6-e665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:e9:51:c5:ca:25:23:09:d8:9f:a9:0a:c7:
                    5b:c0:ec:b7:9e:89:da:1f:b3:d0:ae:22:32:2f:d8:
                    df:2e:3c:3e:48:58:0b:36:13:5b:5e:27:6a:82:e4:
                    9a:56:21:35:76:9a:22:ce:bc:e4:83:98:24:1a:a9:
                    9f:45:a6:a1:e7:85:1e:a2:b9:4b:a4:5b:2e:1a:ea:
                    ad:0f:01:01:b0:54:71:e3:1e:ea:1e:bf:9b:83:79:
                    94:c1:17:57:7c:22:07:a1:28:34:c6:db:b3:ae:d1:
                    01:f1:51:e5:c7:c7:59:25:53:84:58:da:89:ca:87:
                    9b:b8:e7:99:83:94:c6:4a:9c:35:07:d3:20:f3:e8:
                    0d:39:69:e2:0e:af:78:fa:80:b7:97:65:15:87:ea:
                    c8:14:9f:29:4d:d6:ad:f6:9c:e9:5a:d3:e7:90:c3:
                    66:00:a7:7b:78:fc:03:56:50:da:a4:4f:3e:63:e9:
                    a5:08:df:73:6f:67:2b:63:f2:98:e8:80:37:0e:33:
                    d6:ab:1d:48:1e:c4:5d:60:44:60:05:19:b4:89:66:
                    39:ab:45:5f:28:0a:7e:cd:e5:91:0d:a6:23:c1:6a:
                    12:54:c8:cd:57:cb:12:e2:48:62:ae:73:37:b2:cc:
                    9b:5e:9e:fa:0d:4a:83:e4:dc:66:ee:fb:9a:b5:92:
                    3a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FD:30:96:97:A9:57:53:81:18:FF:EF:2E:1D:E9:01:4F:6A:DD:2A
            X509v3 Authority Key Identifier:
                keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:59:3a:47:ad:91:c7:68:a8:3e:30:c3:c6:66:d9:13:f6:c6:
         28:1f:d0:e0:19:10:19:6d:9e:bb:b5:c4:17:48:4c:71:45:6d:
         39:20:95:44:ae:31:62:6f:8c:75:f6:f1:d4:17:d0:66:97:e8:
         56:c4:39:07:76:d9:8b:c0:ea:a4:a3:e2:9a:28:9d:f0:d8:7f:
         aa:b1:c3:c4:fb:fb:b8:d6:b1:c0:59:1d:71:b5:5b:63:28:7a:
         f2:30:03:06:3d:8a:d8:b4:42:ed:bd:6d:e1:a1:67:82:cf:21:
         d8:91:e1:09:7d:36:2a:d4:2c:36:66:5d:64:8e:dc:4f:c5:bc:
         5a:a7:e6:08:10:7b:db:5f:96:a1:0b:e7:53:e3:c9:c2:47:55:
         46:b5:bb:98:93:8d:5b:00:fa:84:fc:d8:ed:4b:9c:ee:f4:1e:
         3d:62:4a:a8:f3:04:76:03:8c:12:d1:9c:ec:b3:6b:ce:a7:e5:
         f3:4c:20:f4:19:e9:09:7f:65:f1:46:76:f6:a4:f9:f8:60:85:
         57:27:ba:da:78:b6:63:b5:ec:ae:23:b2:ec:64:64:20:de:0d:
         2b:d4:59:3b:21:37:9b:f8:9e:86:46:6b:6f:9b:61:70:47:8a:
         93:a7:4a:81:c4:63:d9:e2:a2:3a:cf:c3:b2:6a:74:4b:c5:3e:
         25:3e:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:06 2026 by rpki-client