Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
File:                     gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json)
Hash identifier:          2t7YWjd+RGsmvdMWj++eoZPV3YDg1RNV6eJGDI94jJs=
Subject key identifier:   1B:2B:65:02:9C:96:5A:9F:BC:0A:4A:D8:48:59:A8:2A:30:A6:CB:DB
Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
Certificate issuer:       /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
Manifest number:          C8
Signing time:             Thu 21 May 2026 06:54:12 +0000
Manifest this update:     Thu 21 May 2026 06:54:12 +0000
Manifest next update:     Thu 28 May 2026 06:54:12 +0000
Files and hashes:         1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: vYdiHzlxyttEzoHrXgup6SNXT6mzg2YH5e/b3OT3fQo=)
                          2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: FnYin0UiwJQP6hi7lM7gz0Ixigka5o2aszBJSr3nCik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
        Validity
            Not Before: May 21 06:54:12 2026 GMT
            Not After : May 28 06:54:12 2026 GMT
        Subject: CN=6a0eac14-3f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:26:94:1b:6c:78:48:ca:c5:8c:d5:f3:79:
                    43:26:0d:3e:13:c2:00:e5:d4:4f:87:f3:80:a5:fa:
                    cf:6b:b3:06:9f:bb:b1:17:af:fb:aa:b3:84:2a:60:
                    9b:6f:ad:77:76:35:c1:71:dd:ec:06:9a:6d:85:5c:
                    7a:c8:c6:d7:45:97:65:ea:79:15:2a:03:15:8f:26:
                    0e:e3:f6:f1:13:b0:fb:35:b1:f9:49:80:f8:79:3b:
                    35:9b:75:f2:6f:a1:4a:b0:f9:dd:25:c2:eb:e5:5d:
                    ef:49:30:63:e2:6d:22:a8:bb:87:8a:57:56:28:af:
                    24:63:64:95:40:90:18:33:4d:4e:68:38:63:ee:c1:
                    64:b7:69:3d:1a:17:b9:95:d7:bf:e4:ab:1e:1d:02:
                    37:4e:2a:b0:9e:4f:ef:65:ed:4e:93:8b:ad:74:d5:
                    22:25:7e:50:8e:91:aa:b4:91:1d:94:a8:b4:a2:61:
                    22:9b:55:81:d0:5d:8d:81:e1:c2:de:55:0a:de:fc:
                    18:77:20:2e:cd:e5:b4:78:95:55:38:71:49:cd:7a:
                    16:15:1b:f6:27:3d:f2:ae:75:97:b3:8e:1e:01:08:
                    09:54:5d:14:03:1a:fa:52:3a:ac:3b:33:68:de:f4:
                    f9:94:e0:6e:3d:0a:31:1f:13:16:2b:1f:da:f6:9e:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2B:65:02:9C:96:5A:9F:BC:0A:4A:D8:48:59:A8:2A:30:A6:CB:DB
            X509v3 Authority Key Identifier:
                keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:6f:89:be:89:f4:cd:0e:69:1c:82:eb:b0:c2:00:e8:04:24:
         f3:c5:09:a1:3b:14:ff:28:c0:c3:dc:ae:09:b8:98:1b:a4:6e:
         d7:dd:d5:60:b5:33:7c:54:ea:57:4d:31:56:e0:57:ed:bb:6c:
         b1:59:77:42:11:fc:0e:51:3f:e6:fb:71:e0:0d:4c:b1:06:26:
         08:7b:15:29:8f:3c:31:c5:88:ab:a8:89:1c:1a:33:a2:31:0b:
         d3:a9:df:46:57:0f:0c:8b:49:50:1e:14:09:44:3e:93:ea:6f:
         b0:2c:9d:0e:04:88:62:51:f9:af:2d:31:8b:40:de:66:e8:bc:
         c7:f4:e7:4d:24:07:4b:fb:88:99:b2:85:1d:6b:87:4f:f8:f6:
         1a:8f:f0:6b:2e:e5:2c:d3:ad:f8:ac:3a:69:fe:74:1f:29:58:
         ad:21:4b:5c:b6:9d:92:a7:29:7c:dd:be:fb:90:e1:f0:9c:a6:
         b7:8a:fa:bc:8b:61:97:12:00:e4:af:be:d5:0f:01:78:19:b2:
         c8:92:9c:be:9a:cf:09:bf:17:ec:07:1d:01:a7:52:e7:05:03:
         83:79:02:13:c1:7c:0b:20:e1:cf:78:36:55:82:b2:fb:8c:52:
         ee:16:e0:cb:d1:ad:18:af:bd:0c:a3:b9:ee:81:fa:0e:98:ca:
         6f:ec:c8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:31:11 2026 by rpki-client