Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
File:                     gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json)
Hash identifier:          1lHRkTh62s5r+PGXLBrG7h38dozWHEZVtztkayEnilM=
Subject key identifier:   DC:B3:E5:8A:4F:3E:6E:97:52:C7:70:A8:68:6C:7D:E7:11:FD:A9:E3
Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
Certificate issuer:       /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
Manifest number:          8B
Signing time:             Sun 05 Apr 2026 06:54:57 +0000
Manifest this update:     Sun 05 Apr 2026 06:54:57 +0000
Manifest next update:     Sun 12 Apr 2026 06:54:57 +0000
Files and hashes:         1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: sjIFQwpbk8clvH59Q8I0CD3zYzi61AdfuFLzkn0182A=)
                          2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: eC+Ca7N9y7VnPMiNtCOnwDbBNDTPawuOGNwqU/JVjQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
                          rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
        Validity
            Not Before: Apr  5 06:54:57 2026 GMT
            Not After : Apr 12 06:54:57 2026 GMT
        Subject: CN=69d20741-3407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0b:8b:b3:10:dc:3c:19:cd:6d:0c:91:57:8d:
                    91:04:2d:28:64:f3:8c:e2:24:2a:2a:81:8a:c5:cc:
                    02:1c:ad:19:25:17:5b:1b:c7:82:aa:55:14:b3:3c:
                    63:0f:61:13:a7:5d:b9:9c:28:da:4d:ea:8a:53:5f:
                    b4:19:43:93:bf:30:57:99:39:bb:9f:08:d4:f4:3b:
                    b8:b0:95:75:27:48:ed:0a:fb:fa:a1:ae:c8:2c:cd:
                    d3:18:94:37:b3:98:7a:92:da:2e:f7:47:67:98:6a:
                    75:52:a2:f6:e8:64:d4:bf:30:26:20:a8:cc:b7:4c:
                    be:5f:3c:7d:94:88:66:74:0e:12:c4:5c:e7:75:02:
                    87:fe:83:48:c6:0b:39:26:80:b6:c8:e0:d3:9a:ff:
                    85:04:1a:da:7e:a4:ec:b7:1b:94:06:61:d5:4c:d9:
                    45:a3:55:b2:b3:17:2a:48:1a:ee:dd:8c:9e:44:3a:
                    9b:cb:04:f2:c9:d4:9e:f1:df:3c:b2:81:6b:7c:cd:
                    4a:6c:e1:81:ac:78:aa:2c:66:f1:cc:c1:5f:f5:01:
                    68:72:f5:05:75:f6:ab:38:96:47:af:ba:bc:00:1b:
                    d8:8b:e5:71:d7:42:28:84:2c:5c:e7:a6:16:c6:43:
                    9a:a3:05:9e:00:b4:36:72:14:47:6f:8f:97:59:4b:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B3:E5:8A:4F:3E:6E:97:52:C7:70:A8:68:6C:7D:E7:11:FD:A9:E3
            X509v3 Authority Key Identifier:
                keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6d:6e:75:65:7e:0a:ba:5d:4d:39:16:5c:73:68:f6:f4:7c:
         20:b2:64:c9:d8:42:60:43:91:1d:0d:19:03:69:54:48:84:2e:
         8f:5d:01:da:6c:3c:22:06:33:65:ce:a6:69:99:1b:29:d2:8d:
         b5:0a:51:5e:6c:c5:bf:59:c8:fd:fa:7e:cb:6b:e3:50:3b:9d:
         24:5a:56:00:16:ed:78:5a:42:25:a4:95:c0:6a:2f:c2:08:d7:
         12:24:a8:50:0c:e3:08:4f:17:92:bf:94:db:13:d8:ff:38:12:
         94:d8:33:d0:d6:85:88:db:9d:7c:c7:e1:67:b8:56:22:04:c7:
         a5:9b:9b:e8:49:e5:a3:7d:67:4c:0c:c8:48:11:50:a6:52:24:
         0e:af:7c:42:52:83:e8:fc:34:45:64:f8:20:d2:35:af:ed:56:
         95:aa:9a:3c:d5:9b:bb:e0:d6:81:78:b0:e4:d7:3a:03:3d:4f:
         8d:12:19:d1:f9:50:12:5b:83:aa:51:55:13:76:29:51:7f:84:
         28:1a:e1:06:f5:d5:88:15:a3:6c:32:cc:f7:7b:68:8e:63:c6:
         1e:c3:0f:c7:09:11:c0:05:c3:ae:49:c0:a0:c1:69:8d:d5:e4:
         7d:ad:f6:99:51:4f:19:20:a1:00:81:7c:aa:cc:aa:e1:2e:f8:
         95:bf:63:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:36:37 2026 by rpki-client