Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File:                     Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier:          2XtaM1gpAFYJWlWe7j96g7aoaM0MUYUnMT1hcplLHGI=
Subject key identifier:   4E:A4:F5:06:20:21:DC:14:9B:4C:F8:AC:CA:AB:DB:9B:F4:34:A5:43
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer:       /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial:       03E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number:          03D0
Signing time:             Sat 21 Mar 2026 00:05:51 +0000
Manifest this update:     Sat 21 Mar 2026 00:05:50 +0000
Manifest next update:     Sat 28 Mar 2026 00:05:50 +0000
Files and hashes:         1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: JP9rP8ZJJ2sOgNEZ9YUM4RSPeQ1sW9iJQ6s6SpzYJyk=)
                          2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: tIlegLOK6K2gzpC3EMxXzCQPQ5ijkvaOZu7GF+ennV8=)
                          3: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: Olp3ZD+KVecOlfGoX1LPX5Wca4ynuugi2374UO2D6d4=)
                          4: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: +jMfdrNgrz1Nzrt0QgBnBGHQwacuV0bREddxSJbErg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
                          rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 00:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998 (0x3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
        Validity
            Not Before: Mar 21 00:05:50 2026 GMT
            Not After : Mar 28 00:05:50 2026 GMT
        Subject: CN=69bde0df-3e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:aa:9d:f3:2e:7f:b7:19:82:a9:05:1c:49:
                    b9:25:f6:fa:53:07:f4:6b:9a:26:e6:0f:db:64:f9:
                    36:b4:af:e8:3e:60:6f:ad:b3:79:72:27:de:9a:26:
                    71:3a:2a:1f:83:08:8a:d6:18:95:90:7e:6e:f6:2a:
                    67:eb:b4:a4:97:e3:4d:7f:4a:73:87:3b:71:98:a5:
                    09:47:fd:f9:f8:5a:d4:80:8f:c9:f1:e5:18:e1:56:
                    37:ef:6a:fd:08:97:65:b7:ec:9b:c0:a2:6b:cb:ca:
                    db:d3:6d:bf:fc:a4:b7:9d:48:ec:b6:2a:e6:5f:24:
                    f4:22:57:b8:10:85:41:8c:84:e7:9d:d6:6c:91:75:
                    cf:f8:ec:08:e7:10:8d:5f:b7:c0:10:09:d0:bf:4b:
                    aa:80:90:67:87:fa:dd:11:ea:63:a6:5a:7d:ee:27:
                    77:cd:e0:ff:19:34:a3:c9:37:b9:34:f2:b1:76:8d:
                    eb:25:6c:ef:44:c4:e9:73:69:60:8a:78:c6:22:37:
                    a1:23:24:43:9b:d6:8b:6d:d8:82:e8:fa:3b:1d:79:
                    ad:66:29:f8:cb:1d:7e:13:c1:11:12:8e:16:4f:2e:
                    27:0b:59:88:db:a4:ae:ba:7f:34:93:0e:77:8e:7e:
                    96:b5:32:09:79:8a:09:7e:d0:ea:cb:8e:35:17:ce:
                    a7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A4:F5:06:20:21:DC:14:9B:4C:F8:AC:CA:AB:DB:9B:F4:34:A5:43
            X509v3 Authority Key Identifier:
                keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:85:93:b7:e7:bf:94:56:13:0b:ed:77:1f:a1:3c:ea:ba:
         32:6d:c5:e2:32:49:68:80:b2:53:53:8c:f6:32:25:54:cf:5b:
         40:d5:49:4c:44:83:85:65:06:d2:e9:75:b0:79:dc:11:25:06:
         66:85:de:df:59:c9:ed:e7:e4:82:42:7a:f7:d9:4e:9c:2a:3f:
         46:79:81:00:da:24:51:5d:d2:1b:30:e1:3e:e1:ff:ee:e4:87:
         15:78:83:6d:f5:68:ca:72:f6:c8:f3:ed:5f:1b:57:58:1d:29:
         68:2e:6f:d4:e7:cd:1f:cd:b7:df:ab:80:34:f1:59:83:f1:09:
         5a:a1:da:3c:50:d0:18:f6:7f:72:69:dc:3f:26:3e:52:1e:c8:
         b2:6c:ad:8f:ac:c2:96:68:fa:f2:14:ad:50:c5:e0:6f:79:d5:
         9b:c9:17:5d:20:0d:5d:f5:54:3f:f8:46:a4:bf:2d:b0:12:d2:
         36:ae:86:57:cd:c7:b9:27:71:fc:ca:4a:40:ec:4a:71:61:75:
         42:15:81:a6:18:c4:0b:17:d3:cf:cb:8d:78:cc:64:c3:69:9e:
         78:56:67:ae:41:65:d6:3d:f5:b4:a9:37:b5:4c:a1:0d:26:cb:
         17:0f:c3:73:7b:2d:dd:33:81:71:11:e8:93:47:0c:36:78:c8:
         83:56:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:43:29 2026 by rpki-client