Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File:                     gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier:          9fokdJGP/RFkPVl7Umejq0ZtspVrjhV+Nu7pAbLF/R8=
Subject key identifier:   DB:89:D9:5F:95:19:04:6C:B9:69:84:B2:4D:B2:48:30:A2:66:DB:EE
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       06D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number:          06A7
Signing time:             Sat 04 Apr 2026 22:15:40 +0000
Manifest this update:     Sat 04 Apr 2026 22:15:40 +0000
Manifest next update:     Sat 11 Apr 2026 22:15:40 +0000
Files and hashes:         1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: W17ZjNE0MN0V+qI75/GOaDYVeYORJV7WV+p0H4LpFrw=)
                          2: 899A5138691611EFBED13942C4F9AE02.roa (hash: 641x4scZUN4ZCVnjjE3qhhOg1CGXgMpeMklKEZlPiCI=)
                          3: A6C94076624711EC9B815772C4F9AE02.roa (hash: V13ycXWWqywILndXonJ3QjvrQDnIDg003VYRA9hMyI8=)
                          4: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: DeneMHcuZrF9hDdFh94wwzaZjKMUOYRWB0wTW8HEivQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Apr  4 22:15:40 2026 GMT
            Not After : Apr 11 22:15:40 2026 GMT
        Subject: CN=69d18d8c-4b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:e5:32:83:af:3f:1e:4d:22:5a:bb:ae:63:
                    10:f6:8a:6a:a4:1b:dd:2d:6b:a8:05:03:bf:f1:90:
                    d8:2e:45:ef:5a:64:36:ea:e1:c5:da:d3:aa:c7:5a:
                    d8:ba:09:00:fa:0f:5c:df:b6:93:d2:f1:53:50:4c:
                    36:1c:d6:dd:7e:99:6c:5f:cf:d7:bb:d4:e8:6c:0f:
                    33:ba:38:10:53:bc:0f:64:63:e6:6c:a8:07:96:4e:
                    7e:7c:2d:b4:a5:27:0d:47:94:2d:9c:85:9b:5b:d2:
                    c5:13:ff:14:00:07:db:35:7c:ee:40:ea:ea:7e:01:
                    c7:43:22:1d:1f:44:20:c0:1c:bc:98:49:1e:f0:22:
                    62:2d:cc:21:a6:fc:bf:e4:05:94:11:7c:03:7e:5d:
                    2b:90:81:41:23:22:bd:50:15:bf:18:b6:7d:15:0d:
                    e7:3d:06:48:23:be:bd:6c:16:c9:2c:93:23:9e:3c:
                    99:5e:a2:4e:ab:c6:68:9d:cf:36:35:a7:e0:be:65:
                    4e:11:9e:9c:cb:d1:d4:92:7f:6c:9d:17:15:28:ba:
                    41:91:22:53:ef:9a:84:95:20:56:68:57:fa:da:56:
                    f1:24:2c:5b:cd:2a:f9:1f:c5:23:e8:a4:be:6d:c6:
                    4b:f7:f6:53:8b:0a:57:5b:e2:28:b4:f0:57:3a:7e:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:89:D9:5F:95:19:04:6C:B9:69:84:B2:4D:B2:48:30:A2:66:DB:EE
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:48:a4:7c:8e:95:4b:38:b0:0c:e0:ba:ba:f3:da:2c:20:bf:
         4f:d2:1b:46:b0:fb:b2:36:4a:cb:73:73:bd:7b:2e:0d:49:d7:
         d9:c6:e8:f2:51:c3:36:5e:22:d0:55:df:4e:8d:01:f5:58:a5:
         f8:85:b2:e9:b5:36:34:ba:a9:12:f6:79:4d:cb:a0:07:b7:49:
         7e:10:75:dd:2a:7a:cd:a0:d4:58:7e:8a:bb:b2:8c:c0:78:69:
         ee:0e:25:dd:4d:a4:9c:ab:e3:53:34:09:d7:78:ba:13:63:8f:
         5b:da:e0:39:b1:5e:b2:de:78:aa:e2:d3:0b:94:63:05:06:bf:
         66:e6:a0:a4:8c:51:60:42:f8:21:c7:de:21:6b:a0:6f:f8:12:
         11:f2:b9:62:c8:d4:0b:2c:9e:db:7a:15:b9:b5:8d:ba:5a:92:
         4f:67:d9:2f:8b:41:ba:7a:23:9c:07:32:e5:c2:23:86:bd:f2:
         09:d2:3a:18:c0:7e:9a:62:cb:18:a4:f5:13:9d:75:0f:c5:cf:
         58:ed:4b:32:e7:f7:35:b6:ed:c8:4c:fa:58:19:32:b0:ca:65:
         82:25:67:ee:06:3f:0c:f7:0a:04:bc:11:92:1e:27:d6:fc:6f:
         60:2b:45:5a:c7:06:9e:16:0e:65:ce:52:7b:c6:df:c7:da:bf:
         d8:43:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:09 2026 by rpki-client