Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
File:                     GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json)
Hash identifier:          oyJhG0/oGTnL9MpHZEfse6NrzVG4MOR/5pV4M9EqAjg=
Subject key identifier:   89:58:4D:F9:A5:3E:D6:FD:C8:C5:3A:01:7C:D4:D1:C8:85:9A:45:2E
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Certificate issuer:       /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial:       239E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
Manifest number:          2342
Signing time:             Wed 04 Mar 2026 15:46:06 +0000
Manifest this update:     Wed 04 Mar 2026 15:46:06 +0000
Manifest next update:     Wed 11 Mar 2026 15:46:06 +0000
Files and hashes:         1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: xFKCDcM0EKhBBiUUMP4r8EBubQkJNhve0OzgkOxvhPs=)
                          2: ECB36EBCA54211F08D0FD466C4F9AE02.roa (hash: Vp655EUq1bYTO4F2LYz3iZOH92f+YMmdmZb/7bsJcaQ=)
                          3: 05596FAEBA1811F080138957C4F9AE02.roa (hash: tyGMd+HN3XNyreUh3joDHlUhGigz8P1uPZWOL8YggfQ=)
                          4: 32758AB4A54011F0ADC9D13BC4F9AE02.roa (hash: QjFvESci20D4rlZANt8++cDFTKLxTPMJmHxTZ8tiizg=)
                          5: 55D95690A13811F0BF53567FC4F9AE02.roa (hash: cP2UtQYt9tf5d70dpMhTcvHuru1oQc7Oe7m5QldjiH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
                          rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 15:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9118 (0x239e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
        Validity
            Not Before: Mar  4 15:46:06 2026 GMT
            Not After : Mar 11 15:46:06 2026 GMT
        Subject: CN=69a853be-6c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:df:a2:37:65:92:80:cc:19:c3:3f:a3:eb:88:
                    0f:29:a5:eb:c8:50:5e:c0:5e:27:c5:cb:2a:4e:62:
                    27:be:cc:df:ba:f1:6a:ba:5d:12:b4:7b:3c:9d:72:
                    b3:12:f5:3a:07:26:8b:44:31:9b:2a:74:a7:bb:66:
                    28:41:e0:1b:85:62:4e:e9:1a:ea:3c:ba:35:a0:d2:
                    2d:b0:a9:e6:af:2b:49:12:f4:3d:b0:db:14:f4:1d:
                    b2:e9:a9:32:96:81:21:6f:1c:61:95:bb:54:6b:53:
                    01:0c:09:e7:ba:ba:8c:d1:16:01:6f:0f:af:8d:d0:
                    f5:09:b4:59:0b:bf:e4:3a:db:ee:87:25:13:c7:31:
                    32:e0:ad:d7:a9:01:6c:6f:53:b6:f2:42:3d:4b:1c:
                    6d:91:17:3b:eb:b8:19:d6:f1:c2:c9:5d:ee:b5:d6:
                    e7:6d:0a:d6:cd:f0:c9:a2:97:8d:7f:23:c3:c8:ff:
                    17:98:0d:f4:a2:0f:b7:4c:fa:ff:40:87:e8:09:93:
                    72:65:11:cd:0f:fd:68:63:00:38:28:ae:e2:74:cf:
                    49:10:1b:ae:f2:97:69:fa:73:b4:43:a4:27:2c:99:
                    99:9d:6e:f5:14:ea:7f:87:68:a2:0f:56:88:6b:30:
                    1a:08:80:2c:b9:0f:eb:b1:64:08:62:ca:aa:10:30:
                    31:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:58:4D:F9:A5:3E:D6:FD:C8:C5:3A:01:7C:D4:D1:C8:85:9A:45:2E
            X509v3 Authority Key Identifier:
                keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3a:f6:a4:44:25:a5:dc:50:1c:b6:3e:96:e8:d4:34:84:aa:
         dd:71:65:4a:2e:31:73:37:c9:bd:6a:06:4e:bb:68:34:08:ff:
         c3:94:dc:d1:cc:ce:62:c3:2f:b4:aa:65:34:d5:bf:cb:3f:0e:
         97:30:97:c3:5a:ef:e6:52:98:fa:8d:45:bf:bd:61:2e:70:5d:
         e2:ac:45:a9:90:2d:e0:e9:a9:e8:f8:1b:5a:c1:f1:8a:38:5e:
         7b:f8:39:be:e8:e8:36:e5:da:37:51:70:c9:22:ad:5c:f9:c0:
         cd:4b:16:50:4a:0b:f0:ce:c9:75:e0:76:f0:74:da:42:66:cf:
         4d:28:d2:d0:be:4a:30:07:63:8d:6d:77:ba:d8:ac:7e:1a:84:
         2e:54:2a:ed:cb:fe:a0:08:c0:6b:ac:01:94:96:98:34:d2:7b:
         a7:68:c3:b1:8a:f2:c2:02:6a:5a:1d:ba:06:db:28:1b:60:87:
         cb:cb:37:a7:e5:a1:c4:0d:4a:51:d3:70:33:a3:67:89:ab:f8:
         71:8f:06:12:e6:88:a0:80:68:60:fe:50:d4:1a:f9:66:44:27:
         fe:e9:a3:d7:68:e4:bd:ef:a5:c8:7f:45:c9:86:00:1a:ef:8d:
         42:a4:88:d4:89:59:f9:07:6d:38:90:93:3f:c7:39:eb:1a:f9:
         87:87:9b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:50:39 2026 by rpki-client