Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          j8roj3FwEnxKCGG/zfchIUwFLk+3+4OxKQBnnXhinjc=
Subject key identifier:   B3:7B:11:41:87:88:C5:C0:87:AF:59:A6:7E:1C:6C:2D:DB:65:EF:01
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          0484
Signing time:             Sat 14 Mar 2026 23:36:52 +0000
Manifest this update:     Sat 14 Mar 2026 23:36:52 +0000
Manifest next update:     Sat 21 Mar 2026 23:36:52 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: pTtyk8W9AxTMOHUM7SDqHW2gzFMJwkHA15dWHPxChDQ=)
                          2: A5D75708E07111ED9601E941C4F9AE02.roa (hash: 5EuRxR4B2GheCWIyWlKboSn1b5nyMGZFZDHNErx6Vu8=)
                          3: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: ImTcO2+bYDpyceBVz0sOi75TmPB1NnlNF+YgMjojJn0=)
                          4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: SnwEiSigQk+KbnDBrwRpxTlPdX4p3h8/RF+ekQ3H9UU=)
                          5: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: gw3ZKWMVOPBmgzPuWccsR8SXG2XzgGuDa8yNe9l7t9M=)
                          6: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: pmi8zhqXFg2mBn5F/aX1G/x9te6L5m3n6EllOKjSqMw=)
                          7: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: 47iFeZ3ErKvHzbiwS5iDjv+frLd/9sz/MxYRjxUDLlw=)
                          8: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: aLH1AvmivEk7WizlOlXYSpsdAmTXmH2XnGqApjHlxM0=)
                          9: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: sfu8WqaE1CEl+AbmVvNupiQWqawsQGl2Luz8JyWSfko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 23:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Mar 14 23:36:52 2026 GMT
            Not After : Mar 21 23:36:52 2026 GMT
        Subject: CN=69b5f114-6c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:92:11:c3:a5:6c:9c:ac:da:76:9d:7e:27:4e:
                    24:bb:29:74:a0:d9:79:91:3c:63:3c:7f:fa:49:ce:
                    73:38:91:02:69:56:c4:26:d4:4b:56:1e:1e:10:fd:
                    2b:29:13:4d:c9:5e:5d:f5:07:fd:62:cd:e1:82:de:
                    42:18:0c:79:61:9a:cb:7a:96:b8:de:fd:c1:9c:1b:
                    74:fb:b5:87:08:c9:ee:c4:4b:f1:6c:4a:54:af:42:
                    2b:4e:c6:63:87:43:c5:3a:ce:51:4f:84:f1:13:66:
                    63:f8:e5:77:c2:71:9c:06:d3:92:06:1c:8e:cf:b8:
                    94:2b:4f:12:90:82:52:b2:56:b4:fb:d6:67:08:ab:
                    ca:2e:89:4e:d9:1c:96:2f:1c:68:cc:31:5d:09:96:
                    b0:b1:d9:fe:51:87:b8:56:e2:f5:18:1b:fc:39:5a:
                    d9:9d:33:e0:f8:5e:16:b5:25:96:35:e9:fd:8c:e4:
                    ea:2c:71:55:bf:af:5e:cc:07:25:42:fb:17:14:b4:
                    0f:b4:ab:be:08:6e:b9:28:1f:e2:3d:8e:78:e7:ac:
                    ff:cd:2b:fa:b9:3d:f8:e3:7e:ff:b0:37:13:df:1d:
                    e8:87:38:2c:44:e4:3d:09:8d:22:58:02:4e:c8:1f:
                    52:1f:f1:fa:d4:d5:2b:05:7b:25:22:ca:b9:31:f6:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7B:11:41:87:88:C5:C0:87:AF:59:A6:7E:1C:6C:2D:DB:65:EF:01
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:a0:ca:40:64:b3:52:69:47:f9:f7:96:07:7b:52:92:d1:
         7d:4e:49:0a:cc:36:2b:f5:41:44:60:b0:4a:4f:ab:91:5e:19:
         e9:b5:93:cb:80:9d:5a:4f:40:56:04:f7:56:f8:73:63:f0:1b:
         c1:09:f7:a6:31:c0:92:df:cf:aa:5f:e5:7b:bb:37:f3:8c:a9:
         a0:5d:64:61:95:ae:97:4d:b0:2c:21:21:83:31:10:86:e1:6e:
         d9:87:a1:4d:f2:ef:a6:a8:56:ad:be:74:eb:34:89:57:9e:dd:
         a8:f2:2b:a2:7b:ff:33:57:35:e6:ed:2b:41:2d:be:eb:dc:63:
         47:64:0e:21:ac:5c:69:53:73:83:bc:d2:62:4e:c2:fb:c5:de:
         aa:9f:bd:5c:3d:ee:8d:9c:6a:ae:7e:d5:f5:3f:cc:63:94:04:
         06:25:da:c4:ea:f9:6b:a2:6f:79:46:a7:aa:d8:77:fc:2b:09:
         67:6c:15:ca:33:6d:17:e0:04:40:82:7e:97:f5:83:2f:ac:a5:
         11:ef:68:d4:7d:d4:6c:cd:0b:c9:dd:f9:8e:89:75:13:2f:7f:
         f2:68:3d:e1:dd:da:2c:e3:be:70:d4:72:68:fb:e6:84:cf:b2:
         5d:0a:a8:f3:20:bc:e8:c1:72:54:c3:6d:9e:6d:06:4a:05:a0:
         ea:1d:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 19:11:38 2026 by rpki-client