Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
File:                     GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json)
Hash identifier:          sfndP2GB0opqjQzXlr9b7x4HsAC7H0t0RoqeYh3vc0g=
Subject key identifier:   1A:0B:B7:DF:D4:98:EF:4B:35:FA:96:AC:BF:A1:00:FE:9A:46:C8:CF
Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C
Certificate issuer:       /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
Certificate serial:       06A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
Manifest number:          069A
Signing time:             Mon 02 Mar 2026 22:11:21 +0000
Manifest this update:     Mon 02 Mar 2026 22:11:20 +0000
Manifest next update:     Mon 09 Mar 2026 22:11:20 +0000
Files and hashes:         1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: 8y1qO918PhAjwCKug4hSKXmgKU/BaWEiw1kgQinWU8g=)
                          2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: N5/+LdbDSX09Tm0vgYWgPqaG83VSja3xCTK0rs0mm/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 22:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1697 (0x6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
        Validity
            Not Before: Mar  2 22:11:20 2026 GMT
            Not After : Mar  9 22:11:20 2026 GMT
        Subject: CN=69a60b09-1dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:02:b9:c9:76:d5:00:38:11:b4:66:07:46:9d:
                    7a:58:ad:26:d4:09:fe:cf:8f:7d:17:ef:76:25:77:
                    31:b9:e7:f7:ec:09:42:3d:4e:1c:36:71:0a:ba:9f:
                    df:33:d4:66:36:97:d6:06:76:a2:03:c4:db:db:37:
                    70:41:a1:2c:e7:f7:9f:8b:b6:5c:90:57:da:96:d8:
                    c5:cc:1c:ea:2f:72:78:54:a1:7d:4c:de:18:fa:ec:
                    f2:5f:78:d4:b7:e0:b1:c9:f4:a2:ce:b7:1b:d7:b4:
                    af:81:e8:01:c3:4a:86:3e:bc:3a:6d:2c:c0:ba:e3:
                    29:ba:2d:25:56:7b:ac:6d:43:83:0e:a8:5b:56:12:
                    80:23:d0:69:30:3e:2f:e4:34:88:72:fb:f0:c7:30:
                    37:57:7f:94:bb:23:bc:81:21:a2:ac:69:43:19:f9:
                    6b:7c:3d:24:59:18:ee:5c:57:3b:9b:d8:7c:3f:b8:
                    1c:b0:c8:68:04:17:ab:c2:1c:6c:85:13:47:d1:ca:
                    29:c8:72:ce:d6:71:d9:15:a8:b9:42:e2:6d:95:57:
                    cd:b9:2b:18:fa:14:d3:2d:c6:c0:c0:4d:70:37:27:
                    e7:74:69:d1:94:ad:76:d3:b9:65:15:68:0b:e9:99:
                    fc:7a:b1:57:27:18:cd:9f:7f:f7:1c:07:4c:f5:f0:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0B:B7:DF:D4:98:EF:4B:35:FA:96:AC:BF:A1:00:FE:9A:46:C8:CF
            X509v3 Authority Key Identifier:
                keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:84:a6:25:2f:d4:2e:9d:80:90:c4:5a:0e:bc:f2:6e:88:0c:
         4d:90:5c:17:dc:00:41:d2:07:f4:1d:6e:89:e2:d1:02:67:37:
         52:58:d2:70:73:f8:06:a4:28:29:01:50:c7:ce:84:65:0e:14:
         2d:d2:b4:66:71:ea:c2:0d:af:23:e8:af:93:5d:6e:34:3a:7a:
         d5:7c:2d:82:d8:ed:7e:21:d7:8e:2f:2c:4b:14:e9:7f:92:47:
         ca:fe:98:13:11:73:d9:75:54:b2:61:45:87:f6:e8:90:ba:e9:
         af:25:5b:96:d8:6e:82:ed:ee:9e:17:24:4c:8c:92:33:81:7f:
         49:a4:4d:70:31:fc:07:37:f2:2e:8c:15:c3:35:91:29:59:27:
         19:7f:e8:8c:56:a0:7a:49:4e:14:29:ff:f4:24:46:ab:8e:43:
         82:62:6c:b4:75:23:de:1a:a4:c4:33:b2:ee:f8:c9:d1:3b:10:
         e4:a9:28:f9:69:1a:61:51:50:df:94:b1:e7:99:63:e5:bc:b2:
         ae:af:e1:f3:89:15:42:9c:77:50:35:fe:c3:7a:18:be:7e:be:
         02:1d:c9:3c:21:7b:a1:6a:26:de:d7:33:82:e3:ad:a1:f8:95:
         f3:c6:cf:39:bb:ed:33:18:75:16:6c:67:16:65:0d:cd:67:ac:
         12:22:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:20 2026 by rpki-client