Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
File:                     gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json)
Hash identifier:          9uQuIwskyCTI81+WvXmbsA34tK1JQwY3/M1owbFIpOI=
Subject key identifier:   47:9E:2B:92:E2:30:B1:02:EB:3B:57:EB:FE:EF:35:30:40:B0:87:FD
Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
Certificate issuer:       /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
Certificate serial:       03CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
Manifest number:          03C5
Signing time:             Mon 11 May 2026 00:42:16 +0000
Manifest this update:     Mon 11 May 2026 00:42:15 +0000
Manifest next update:     Mon 18 May 2026 00:42:15 +0000
Files and hashes:         1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: VOQlJ1iLDoNNsqfaPxRYiyGqh905mGZmL1gZliDBBXc=)
                          2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: ZWSjR9hPEgzTd16SzLm/XWDFrj10G67gV4xDp96p4xE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl
                          rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
        Validity
            Not Before: May 11 00:42:15 2026 GMT
            Not After : May 18 00:42:15 2026 GMT
        Subject: CN=6a0125e8-aeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:2c:72:1f:55:79:0f:65:14:57:a0:d1:dc:
                    56:e8:dc:ef:1f:59:ff:6a:3d:e9:c6:51:4d:bd:9e:
                    6a:d0:55:93:e0:26:06:9e:1d:3e:7d:ed:4c:01:43:
                    69:a9:02:b6:c0:c9:39:1b:46:75:12:1d:fe:58:f5:
                    e6:78:50:c9:54:32:89:45:e0:12:06:01:e9:79:14:
                    5c:39:59:07:58:07:ea:bc:a9:bd:96:ca:4f:89:5a:
                    96:7b:0b:66:46:21:86:bb:d4:e7:ea:1a:4f:83:f0:
                    b7:9b:4a:95:82:68:2d:46:91:4c:6f:8e:db:7c:36:
                    9f:a9:1e:36:b6:f1:f7:21:35:51:58:2d:34:35:7c:
                    18:63:3e:98:14:36:01:5b:38:94:11:ef:66:90:5b:
                    1e:40:b1:2d:95:95:bd:d1:82:9d:f9:ef:82:67:96:
                    35:8a:48:13:a0:e2:83:56:e4:b4:95:cf:48:fb:1c:
                    2a:35:0d:42:02:c1:99:8d:c7:41:90:c3:71:c3:60:
                    59:ea:b6:5e:8a:cf:ff:ab:73:8c:2a:8f:1a:2b:42:
                    7e:ee:74:d4:ae:c3:45:9c:88:a9:0f:6f:c5:a5:6d:
                    52:df:06:8d:bf:93:ab:80:88:84:ba:21:60:14:2d:
                    1b:32:24:1c:68:c2:16:66:5c:7d:76:37:34:35:82:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:2B:92:E2:30:B1:02:EB:3B:57:EB:FE:EF:35:30:40:B0:87:FD
            X509v3 Authority Key Identifier:
                keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:36:2b:fa:bf:0a:45:d6:08:dd:be:ab:cc:7c:e6:fb:9b:c6:
         ab:25:d7:60:5e:ed:cc:26:cd:31:63:82:91:ce:10:17:26:42:
         f7:14:0d:6c:55:cd:89:94:99:92:db:2b:32:ac:8c:43:45:59:
         e2:2f:f6:f6:0f:d3:8f:dc:e6:03:28:4b:36:9e:f7:dd:13:c0:
         7c:00:8a:5a:3f:b0:fc:75:cf:fb:21:21:62:43:ff:8b:12:d5:
         6a:4e:94:3a:b9:cb:e8:fd:65:e3:65:6e:c4:26:95:15:f3:06:
         ba:57:b2:f7:0a:44:d8:60:1b:f3:0d:cf:8b:97:a4:a0:57:42:
         46:dd:d8:47:9f:80:8c:8f:1d:22:3c:8d:e8:ea:0d:27:16:e2:
         b7:7c:c1:5c:ec:f1:88:60:6e:fc:e6:0a:b4:81:a8:c0:3c:8c:
         29:96:c8:07:de:97:97:cd:17:51:2e:7e:2d:2f:17:3f:73:85:
         03:af:c3:ea:b9:06:b8:7b:1c:44:72:f6:fe:ac:5a:46:dc:9f:
         2a:54:22:10:8b:95:54:aa:cc:b0:01:3a:da:a2:21:f6:17:81:
         c0:2b:0a:c6:45:df:dd:3a:26:a7:d1:07:37:18:78:56:81:d3:
         cf:cc:6b:1f:a8:82:26:6d:ca:0a:94:c4:0c:ba:86:9e:14:07:
         07:32:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:17 2026 by rpki-client