Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
File:                     gyiT0KdSAaIToGRFUyA9Aac8-v8.mft (raw, json)
Hash identifier:          d8nSzBRXsQGfLG5GzmiPb4lGfhLp7JiwEDyk8q7hlyA=
Subject key identifier:   EC:BE:74:BA:8A:50:00:D0:A6:8C:68:99:B5:55:CD:3C:0F:3B:3B:45
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Certificate issuer:       /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
Manifest number:          7A
Signing time:             Tue 03 Mar 2026 07:22:31 +0000
Manifest this update:     Tue 03 Mar 2026 07:22:30 +0000
Manifest next update:     Tue 10 Mar 2026 07:22:30 +0000
Files and hashes:         1: gyiT0KdSAaIToGRFUyA9Aac8-v8.crl (hash: Amqqeszhu/hm6E9Da6fl62WgUl7o5oF0hP+gLpPoNqk=)
                          2: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (hash: R+yKKJFZUpnxPKJ79z1OaMA2OB1A9rsyasLFDhiY1WY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
        Validity
            Not Before: Mar  3 07:22:30 2026 GMT
            Not After : Mar 10 07:22:30 2026 GMT
        Subject: CN=69a68c37-73e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:00:75:26:1c:d7:9c:7a:a2:72:8a:cd:f0:
                    83:c6:e6:7f:1c:10:bc:59:49:64:c1:18:83:fc:07:
                    9e:a1:54:13:dc:28:ce:72:b1:93:b1:be:8a:68:7e:
                    2d:bd:a2:f4:ea:1f:19:21:fe:8d:06:81:13:ef:2c:
                    bf:74:2a:55:9f:67:b5:cb:aa:fa:71:c3:f3:5b:76:
                    43:54:a5:ae:68:cc:93:9f:90:44:de:9a:18:2a:24:
                    80:a6:67:bc:ae:03:24:64:4c:56:ec:fc:89:07:c8:
                    63:bf:5c:a9:c2:19:f5:80:47:3f:a4:d0:0e:14:8c:
                    75:43:24:9b:b1:81:89:60:5b:5f:a4:3a:99:1b:37:
                    c2:06:d9:51:b9:c5:f3:86:d0:b8:18:fd:ec:3c:05:
                    b1:1a:62:4e:54:f3:9d:8c:1c:24:3e:99:d2:c7:75:
                    42:79:9c:e2:24:91:2d:df:e2:31:a8:6c:9a:1b:0c:
                    ee:92:2b:9c:4f:66:b2:58:a8:02:ee:64:44:1c:dd:
                    22:4f:6d:a6:5a:68:01:ae:b6:ef:67:d1:50:44:46:
                    ae:d6:60:aa:18:cb:fb:38:68:3c:1f:1f:ec:cf:46:
                    7a:b4:40:e0:36:af:e9:bc:da:56:77:d5:72:78:d1:
                    63:6a:75:d2:d3:fd:b5:c8:a8:f5:3f:d4:21:bf:22:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BE:74:BA:8A:50:00:D0:A6:8C:68:99:B5:55:CD:3C:0F:3B:3B:45
            X509v3 Authority Key Identifier:
                keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:69:7b:ed:8b:e2:8f:19:2e:e9:d3:ee:09:cd:34:4a:21:13:
         09:ad:7c:97:f2:c3:36:5c:c9:0e:94:65:a3:e9:ff:8f:09:b8:
         01:a2:b5:5d:4c:83:3d:fc:39:c0:44:f8:9e:38:a7:2c:0b:84:
         59:91:99:ef:12:41:fc:aa:d5:d5:29:ec:2f:6e:76:57:5e:49:
         d6:63:33:bb:90:46:05:21:c5:5b:a5:cc:2a:50:16:1e:d8:06:
         63:88:b5:96:f6:3e:76:cf:f7:66:c6:0e:df:ce:3e:8b:9a:c4:
         a3:c6:88:8f:12:56:d4:c0:dd:34:38:17:0a:db:c7:a2:04:43:
         ce:54:53:fb:66:c4:c6:c2:4c:a6:f9:48:b7:db:f3:f4:02:21:
         c1:6a:39:67:9b:9d:4e:32:b0:ef:81:27:85:9c:a4:6b:53:76:
         1d:56:47:9b:93:cc:8e:99:83:8e:3a:97:a5:c2:ae:1c:a5:bd:
         4d:7d:a3:f1:65:9c:e3:59:da:2e:dd:d6:bc:af:76:5f:87:93:
         1a:cf:b8:70:fc:14:43:41:bd:75:c7:b7:89:49:a4:af:13:98:
         8a:db:85:d2:ae:a3:15:93:82:55:20:27:0a:0e:92:04:34:fd:
         91:c7:ff:a6:67:31:d9:75:b0:6e:44:53:57:9b:3f:2a:0d:80:
         bc:18:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:08 2026 by rpki-client