Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File:                     GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier:          FDkAe6yA3WdSHSiDlWw/Pv2IwV2c0vjB3zAmoMSFXY0=
Subject key identifier:   16:73:BB:F3:86:E5:39:C2:23:71:AE:1C:D1:67:3E:A6:5E:1C:2B:D4
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer:       /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number:          62
Signing time:             Sun 05 Apr 2026 07:20:30 +0000
Manifest this update:     Sun 05 Apr 2026 07:20:30 +0000
Manifest next update:     Sun 12 Apr 2026 07:20:30 +0000
Files and hashes:         1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: ED2YyEFns1HZwP0IysGN5mn4AbIz+3Dj/HY7TZLbp68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
        Validity
            Not Before: Apr  5 07:20:30 2026 GMT
            Not After : Apr 12 07:20:30 2026 GMT
        Subject: CN=69d20d3e-9871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:3f:6b:62:1e:be:23:56:f6:1c:df:a3:49:
                    f2:91:d6:65:e5:0e:8f:9f:4a:bc:7f:d0:26:af:33:
                    59:53:56:79:85:bd:d0:92:03:45:74:a8:1f:13:19:
                    40:50:b2:ed:42:4b:ec:7e:d7:62:ff:6e:38:cb:07:
                    e1:10:a5:6f:f5:9b:a7:73:ea:8f:e5:ab:7a:84:08:
                    15:85:f0:f5:4a:01:80:b3:52:e8:9e:0e:eb:05:ec:
                    80:87:4b:9a:68:61:e9:f9:4e:2e:b4:0e:13:7c:df:
                    fc:41:12:98:ae:8f:3c:72:f2:22:a2:98:fe:c2:4a:
                    7c:76:96:34:a4:87:98:51:96:01:eb:50:51:58:84:
                    5f:7d:3a:63:7b:a7:7f:73:de:62:83:1a:5c:66:d5:
                    fb:26:b8:90:0e:1f:78:1e:58:3c:d3:0a:c7:9d:40:
                    c7:1d:d2:0f:8d:54:a3:fb:e9:25:ef:51:7d:e3:30:
                    06:03:dc:e1:d7:4c:af:30:9f:61:c2:4e:d1:f2:03:
                    36:a7:df:fd:85:c3:da:5c:b7:2c:05:fe:96:f4:29:
                    aa:dc:d5:f6:9c:9e:45:3a:e7:09:85:e9:b9:0d:ba:
                    80:53:2b:91:fe:c5:71:16:ec:ac:be:6d:a8:59:92:
                    3e:87:03:43:36:e8:e3:ae:b2:66:ec:da:8d:6f:2d:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:73:BB:F3:86:E5:39:C2:23:71:AE:1C:D1:67:3E:A6:5E:1C:2B:D4
            X509v3 Authority Key Identifier:
                keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c1:93:af:35:f6:2a:90:fc:6a:0a:01:1d:ec:74:88:92:50:
         ac:a8:46:95:12:96:02:e9:98:be:80:7a:01:3a:aa:ff:d6:3f:
         87:cc:09:c4:3b:b0:ee:cf:b2:97:64:d9:ba:30:4f:f2:2c:96:
         6a:95:23:4c:52:0c:7b:00:40:09:8b:4b:67:78:a4:72:87:2c:
         a0:5f:59:49:d4:cb:d0:bb:97:5a:64:59:00:e6:19:e0:f3:5e:
         8b:a6:8a:b8:0e:4b:ea:3b:be:4e:1f:a4:30:5c:1b:b9:06:d8:
         eb:d9:f7:3c:21:3b:ca:99:2c:b6:a0:dd:2c:9f:7e:64:b4:25:
         ee:1e:2d:3e:56:ab:0b:ea:ee:f7:65:bc:d3:21:be:89:ba:12:
         42:d7:36:7f:08:c5:95:f6:08:e6:06:d2:5e:a2:e1:c2:27:a9:
         d2:1f:ee:f6:82:e7:61:f0:03:94:12:93:42:fd:e4:19:50:5c:
         f8:8b:d4:2d:16:b9:b7:ca:d6:69:ed:08:05:31:1c:cd:7b:a5:
         82:8b:60:de:a2:60:36:44:79:be:ef:89:f8:10:d0:c1:d5:93:
         00:1f:8e:31:00:14:a1:58:f7:a5:70:79:dc:8d:3b:dc:df:93:
         f9:bd:13:ba:d0:32:95:58:79:ee:47:88:0b:ae:52:6b:61:5c:
         1e:59:1f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:25:32 2026 by rpki-client