Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File:                     gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier:          z96y7crbWq4jqdwYBmdMH+6KXbRTBBP8SWh4c8pzK6g=
Subject key identifier:   13:62:FB:3E:9C:E6:F9:84:FD:55:0B:B3:B9:7C:74:F8:26:D6:93:47
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer:       /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial:       353B
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number:          353B
Signing time:             Fri 20 Mar 2026 14:21:55 +0000
Manifest this update:     Fri 20 Mar 2026 14:21:54 +0000
Manifest next update:     Fri 27 Mar 2026 14:21:54 +0000
Files and hashes:         1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: hKeubH/A3kI6eSYwoRY1zf8Juw/aP28A/9f0DWYVoXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 14:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13627 (0x353b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
        Validity
            Not Before: Mar 20 14:21:54 2026 GMT
            Not After : Mar 27 14:21:54 2026 GMT
        Subject: CN=69bd5802-6725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a7:4e:2a:08:9a:a2:ae:59:3c:de:5e:2b:86:
                    94:1f:e6:22:6a:bc:8f:16:54:08:36:c6:98:3a:69:
                    6f:69:68:b6:0e:33:59:9a:2e:87:e8:0b:9c:95:05:
                    37:81:67:3a:26:92:d0:f8:14:ad:5a:cf:b7:f2:03:
                    96:0a:0e:49:ff:55:d2:f4:1b:37:fe:8a:69:0d:8b:
                    10:51:ca:b5:98:52:59:f6:1b:27:6e:8a:c0:a1:f2:
                    a1:58:ad:93:63:d5:79:d9:a3:b5:80:5a:79:c3:4b:
                    c6:0f:42:b7:e8:d4:0e:96:ed:dd:da:ed:26:7e:13:
                    8b:68:ee:70:65:91:a4:f8:73:63:e5:59:37:7d:6d:
                    00:75:45:22:b2:ed:c6:0f:06:16:82:94:63:5b:e5:
                    f8:2f:c0:4d:0e:58:ff:4e:ff:e3:b8:15:4d:90:bc:
                    41:3c:e7:8e:81:a8:46:78:1b:03:3c:e5:40:c8:1f:
                    36:e7:ff:4b:af:e0:87:65:a2:69:06:17:e4:90:28:
                    19:64:7c:81:64:c1:4a:c0:df:3c:5b:b2:ce:93:2b:
                    19:68:24:d9:02:ee:96:12:48:73:08:cb:dc:98:36:
                    e2:91:25:74:2b:ef:a3:8b:3d:5a:fd:d9:70:9f:3c:
                    18:08:42:1e:6b:a1:63:06:78:2c:b1:ee:f5:a5:77:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:62:FB:3E:9C:E6:F9:84:FD:55:0B:B3:B9:7C:74:F8:26:D6:93:47
            X509v3 Authority Key Identifier:
                keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:af:4a:70:e6:47:31:c4:c1:fd:f4:b4:da:35:a0:05:6b:73:
         73:43:61:4d:82:69:c4:a0:01:7b:54:a3:59:56:0f:41:ff:9a:
         e2:b6:03:71:24:77:a5:26:56:48:9c:d0:b6:8b:50:6c:c5:d4:
         d9:ae:0a:fe:ed:a2:de:2a:ad:5c:7b:d9:20:9f:49:40:6a:bd:
         0f:d7:36:b0:27:4a:4e:0f:e2:43:cb:0f:6f:16:a1:bc:bc:9a:
         c4:cd:42:f7:05:d4:af:61:0b:97:97:cd:4c:07:b1:a2:40:0b:
         f6:76:d7:6b:88:62:3a:81:36:27:02:94:3f:bc:65:02:c0:e9:
         c9:6f:d8:10:ea:4d:29:01:ab:67:8f:05:19:af:1a:16:a2:53:
         d2:c6:63:9f:57:83:e1:cd:4c:dd:90:be:fc:90:52:85:35:3d:
         5d:70:29:ed:60:6a:8d:26:a3:9c:4b:3d:2e:ba:18:22:e8:ae:
         b5:3a:b7:47:76:7c:6c:58:a1:66:09:3a:4d:33:52:76:c3:de:
         b3:fe:a6:1e:80:b1:b5:1f:b1:43:29:f0:bd:ae:8c:61:cf:a8:
         7c:0d:6c:6f:e2:3f:ca:e9:1f:a3:50:a0:09:95:2c:3c:47:a6:
         29:4e:a1:55:cc:00:e7:8b:ad:08:40:26:89:14:9f:b9:c0:6e:
         c0:6f:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 16:32:37 2026 by rpki-client