Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
File:                     Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json)
Hash identifier:          YHOKquKEUe2dkD7qp818vW6D5lvXHGyV264Oyn3a05E=
Subject key identifier:   D7:AB:7E:02:E3:10:82:5E:36:C4:7D:E1:B6:41:6C:36:30:20:7C:75
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Certificate issuer:       /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
Manifest number:          DB
Signing time:             Tue 03 Mar 2026 06:14:48 +0000
Manifest this update:     Tue 03 Mar 2026 06:14:47 +0000
Manifest next update:     Tue 10 Mar 2026 06:14:47 +0000
Files and hashes:         1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: Ap6/YUxVy7JeLUYFmDknfRMnGRMDd09mz+eKE2ZAq6s=)
                          2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: a+z8gU2dcHNDUL1gCY0yav+6Ucjo7RhblDm9DMgQ1BA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
                          rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
        Validity
            Not Before: Mar  3 06:14:47 2026 GMT
            Not After : Mar 10 06:14:47 2026 GMT
        Subject: CN=69a67c58-cbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:1f:d4:2a:68:0f:86:e4:bb:96:56:84:25:
                    04:2e:69:01:27:85:67:b2:72:7a:2f:1e:a2:29:55:
                    02:83:fc:7f:21:ec:05:c9:3e:c8:51:ce:8f:74:c8:
                    bf:06:96:5f:56:d9:f4:cc:59:53:7b:2a:43:39:23:
                    bd:d3:eb:05:18:2f:a5:95:d3:f4:89:eb:ed:1f:38:
                    62:f2:f2:0a:ff:6d:27:67:d9:6a:1c:58:f9:a4:31:
                    65:32:6c:9a:45:6c:61:cd:dc:fb:33:ee:26:c3:bf:
                    9a:e8:6d:86:c8:33:be:84:2c:e6:42:e8:de:9d:85:
                    82:ad:48:6f:d3:9e:77:5e:25:24:6a:cd:4f:1a:de:
                    55:f9:39:d2:76:ed:5a:4a:4b:17:91:da:34:08:4c:
                    3d:a6:19:00:96:e1:4d:91:d6:18:84:cd:d9:0f:c4:
                    9d:f2:d7:84:74:97:69:a1:f1:f7:6c:ff:69:ac:42:
                    3b:81:60:61:fd:58:67:1f:d7:74:2e:76:2f:ae:e3:
                    63:d7:70:e7:7c:75:1c:4b:35:8c:64:e1:d6:e3:06:
                    03:da:03:cf:35:d6:91:2a:ac:ec:4a:46:74:6c:28:
                    8c:36:80:76:a6:5d:2a:43:5a:5c:4d:6d:f6:79:92:
                    55:b3:65:28:39:50:91:49:b5:85:2e:35:66:5e:07:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AB:7E:02:E3:10:82:5E:36:C4:7D:E1:B6:41:6C:36:30:20:7C:75
            X509v3 Authority Key Identifier:
                keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:86:e1:b0:68:33:b3:e8:ce:4d:0f:b1:ad:56:13:b1:21:
         7f:98:a2:7f:16:2d:33:8a:ce:31:ca:9c:02:e6:bc:12:64:ea:
         9c:7a:ba:b9:22:67:a6:d8:e2:0d:19:2a:d1:b5:23:3b:d9:bf:
         57:2e:c0:98:1f:03:b7:99:88:b7:d9:24:0c:95:b3:b9:54:44:
         02:31:c8:b8:d2:ad:cb:af:57:8b:a9:bd:8a:45:f9:87:ca:4d:
         20:a4:5e:46:cb:fd:c1:e0:15:d9:28:e9:4f:c9:66:fb:8d:19:
         1c:61:ca:2f:0f:3e:1f:48:4a:22:09:35:f5:0b:fe:c1:8e:bb:
         ec:c5:37:df:82:47:15:b6:83:ca:67:7b:80:f4:e5:3b:ae:64:
         d2:cb:1a:bd:6a:e0:c7:36:f7:a0:60:52:8d:fe:4f:f9:2c:40:
         b2:8a:1f:b0:06:25:fc:7e:7a:bb:b4:53:44:42:cb:67:e6:05:
         6c:a9:19:a1:e5:06:7e:9f:ad:2e:7b:54:bf:8b:1b:ea:14:4f:
         64:e6:5e:19:10:bf:85:3c:8c:ec:9b:9b:36:98:42:1a:7b:4e:
         37:c7:e2:90:21:91:3c:ca:2a:a0:07:fa:d9:56:85:60:e7:4b:
         c0:0f:4a:3d:76:4d:7e:64:40:52:67:7f:c0:84:6b:11:38:d2:
         2d:10:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:31 2026 by rpki-client