Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
File:                     GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json)
Hash identifier:          xf1NuCfX4Hcnk4kLgj+RNfGrQym9JE2LOYii32XuALs=
Subject key identifier:   6B:B4:8B:C2:29:F8:9C:82:DB:88:3E:88:9B:77:25:90:44:47:CE:92
Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
Certificate issuer:       /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
Manifest number:          018F
Signing time:             Wed 13 May 2026 04:31:07 +0000
Manifest this update:     Wed 13 May 2026 04:31:06 +0000
Manifest next update:     Wed 20 May 2026 04:31:06 +0000
Files and hashes:         1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: 7VtqQFFPaD7els6WIeuCtXNUgVWgc0eg8QsPVcsVl+E=)
                          2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: epSNdxky22TBESs7X/2oDXWpoJovm523A9D1YZGpSUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl
                          rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
        Validity
            Not Before: May 13 04:31:06 2026 GMT
            Not After : May 20 04:31:06 2026 GMT
        Subject: CN=6a03fe8b-fb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:5d:0f:4b:1a:f7:f0:f3:1f:23:22:e3:85:
                    f4:dd:8b:9f:a1:a4:32:a3:db:f2:d4:12:b8:4e:ae:
                    27:73:ed:f8:10:7d:3b:0b:fa:69:8c:ea:c7:36:c3:
                    fd:cd:ba:bf:af:5f:27:d9:a6:22:b8:96:60:3e:9e:
                    d9:b1:77:66:00:87:1a:da:30:bc:ff:a0:a9:cd:df:
                    1d:21:a5:1b:2b:1e:ba:72:64:ba:7e:68:c1:90:03:
                    56:8a:96:79:f3:7e:04:44:f1:f6:b3:92:7e:9c:f7:
                    5d:4d:77:88:df:52:ed:15:2a:2c:37:9c:bf:cc:38:
                    d1:ae:97:69:af:3c:03:07:b8:df:81:bc:86:a3:63:
                    a2:79:72:c1:94:c2:be:96:ea:4c:07:29:08:9a:51:
                    94:21:39:8e:e6:38:93:db:c2:f1:18:79:7d:a2:51:
                    c6:22:dc:35:7c:22:36:1c:2e:e3:63:72:18:35:07:
                    57:cb:12:7c:aa:c1:b6:0f:ee:8f:bd:d2:b2:bc:30:
                    bd:5a:94:9c:7f:3c:c2:e8:e0:cf:5a:f8:95:62:eb:
                    6e:e4:e7:8f:7a:72:4a:1c:c5:4e:f6:52:2e:6d:e6:
                    93:35:e0:d3:d7:e5:55:0d:61:2c:1d:8d:2f:e4:8a:
                    23:6b:5c:be:4a:65:07:cc:88:8f:f7:67:3d:7b:56:
                    5f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B4:8B:C2:29:F8:9C:82:DB:88:3E:88:9B:77:25:90:44:47:CE:92
            X509v3 Authority Key Identifier:
                keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:2c:59:ce:5c:0d:e5:26:22:5f:89:af:45:77:3f:cd:88:
         1d:e4:1e:44:1c:c1:64:eb:c4:d2:36:d3:38:36:e4:ab:10:4e:
         bd:bc:33:8c:5d:95:c3:69:2b:21:0c:55:69:2a:f1:ee:16:ac:
         85:b3:5a:24:05:dc:77:d6:82:99:85:79:05:3d:1d:0b:d3:36:
         17:3b:71:dd:f5:45:22:2f:bd:89:a7:d2:c9:4d:13:26:b8:9e:
         46:b9:7f:77:ae:20:47:5b:92:df:1b:79:49:0f:08:34:8c:71:
         f9:ba:ec:cf:ac:c2:9f:e7:ea:9a:92:3c:1d:a8:fc:e6:10:8c:
         65:ae:b7:7f:28:09:3f:8a:f8:54:ce:89:8c:aa:45:17:fd:2f:
         62:ec:07:64:26:41:90:fe:ec:53:06:bc:34:bd:71:b6:4c:f7:
         ae:c1:5c:9c:98:f1:97:3d:75:50:25:ce:1f:a5:3b:09:50:6c:
         d5:c6:bd:b9:62:66:b4:21:54:71:60:3f:c2:ab:f1:7e:a5:85:
         b3:b2:0c:40:2a:8d:c7:30:a7:a0:5c:6d:74:ee:c8:05:4b:c7:
         ba:a9:e4:71:a6:5f:31:d6:e3:d2:b1:88:29:14:bd:c9:01:c1:
         52:74:47:ce:e3:0a:97:5b:6a:ec:14:91:ef:99:00:ac:81:e6:
         f4:e5:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:19 2026 by rpki-client