Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
File:                     ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json)
Hash identifier:          amGV66lrYKYYl26vrtfEA+r/UBeP4OClYoBCK5+upBM=
Subject key identifier:   CF:96:E5:3B:F7:E7:30:EB:F8:6E:D2:59:0D:C7:80:E0:2C:C1:98:A1
Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77
Certificate issuer:       /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
Manifest number:          EB
Signing time:             Sun 05 Apr 2026 05:48:31 +0000
Manifest this update:     Sun 05 Apr 2026 05:48:31 +0000
Manifest next update:     Sun 12 Apr 2026 05:48:31 +0000
Files and hashes:         1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: MuJXDMO4FJUbeIDsJlQ0Yeg449C8FnA1eWtAHU4dXoQ=)
                          2: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: VPm4SknJQLz4jStnPVeOHdN+rR2StpfDf8Lhwbu1ITk=)
                          3: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: GcZaKKkUm4eJadng809d875dfAtSrkk2RvfSOSlgS2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl
                          rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577
        Validity
            Not Before: Apr  5 05:48:31 2026 GMT
            Not After : Apr 12 05:48:31 2026 GMT
        Subject: CN=69d1f7af-5996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:e6:2e:0e:c4:9b:c3:ee:5d:16:b2:b4:9b:
                    29:1d:b0:cb:d3:cc:13:24:49:53:3e:bd:b1:b0:37:
                    1a:0e:25:a7:11:a7:fb:fd:08:30:72:38:6f:55:d9:
                    97:d5:9c:17:d9:e7:65:b1:14:df:cd:f8:c3:4e:0e:
                    46:13:cc:a6:cc:d8:1e:40:1b:31:ee:d5:28:ff:66:
                    ef:dd:d7:2d:1c:e2:57:32:e4:14:f0:40:07:2c:a4:
                    5c:d2:79:91:84:a0:27:f1:6d:2c:68:96:d0:f6:c6:
                    1d:50:b9:d1:68:4e:75:a3:19:85:7f:fe:b1:ea:58:
                    8f:db:94:d3:63:06:c9:70:e0:7c:34:66:96:84:87:
                    2c:78:bd:d7:ea:ab:89:2b:82:9b:64:4a:c8:de:6f:
                    4e:c9:8f:6f:f9:c6:72:a7:a7:2c:f1:2d:9c:cb:a8:
                    0a:8c:9d:31:3e:00:21:14:31:12:cf:9d:43:08:a0:
                    cc:c3:98:a4:5f:95:d4:f5:e9:47:d9:b7:10:10:2e:
                    c9:83:02:01:4d:ac:28:fc:40:46:d9:54:41:1f:1b:
                    a6:a7:fa:f1:97:5b:2c:2a:6f:ff:0f:41:b9:06:05:
                    59:af:b2:23:d9:fc:cb:45:1b:94:10:07:d9:03:d5:
                    94:a4:82:b2:ff:6f:dd:16:2e:be:af:35:a6:71:1b:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:E5:3B:F7:E7:30:EB:F8:6E:D2:59:0D:C7:80:E0:2C:C1:98:A1
            X509v3 Authority Key Identifier:
                keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a4:c9:83:1b:21:53:2c:62:a7:c7:cc:e3:32:dc:91:b4:a4:
         8c:f9:b6:4b:b7:6b:7f:2d:a1:93:1a:ba:88:e7:d3:da:b3:5e:
         6f:d8:c9:db:69:05:9a:2c:03:2b:c1:89:3e:7a:d8:ae:1c:b1:
         cc:6e:20:79:fe:b6:f1:8b:eb:5b:dd:70:6a:21:59:40:34:3f:
         6c:70:58:77:f3:f4:1c:c2:ef:4b:fb:90:0d:96:dd:b2:05:f0:
         ce:b6:04:92:3a:7c:36:28:48:1f:0f:fe:10:dc:dd:b8:45:98:
         2c:ba:f0:6a:8a:fb:67:65:ba:74:17:72:0f:35:59:9b:01:0b:
         1a:57:af:12:64:b0:15:9f:47:41:66:aa:de:21:79:84:d8:ae:
         6f:6f:ea:2b:1d:c5:c7:f6:63:2c:c2:7e:5f:45:8d:65:f6:de:
         9c:e2:06:4e:39:53:4d:2a:bb:0d:1b:34:7d:e6:39:9c:82:95:
         8b:4d:c8:65:65:46:c7:48:99:0e:a6:76:76:84:df:d4:bf:57:
         e1:c7:fa:93:e0:1e:1d:2b:c4:1c:b3:ae:e3:76:a5:fa:9f:50:
         c6:e3:ff:de:19:d0:e1:bc:22:1a:03:a5:a6:bd:0d:43:22:91:
         07:ca:6b:a2:e7:49:2c:73:82:c9:f5:13:36:91:1d:88:22:73:
         2d:55:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:47 2026 by rpki-client