Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
File:                     GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft (raw, json)
Hash identifier:          j8GRoJ+CxPrkPJpKoWLAF62AxogehLx7ZELQdS2WlXg=
Subject key identifier:   0E:29:7B:50:04:87:0C:1A:8A:4F:DF:93:F4:29:97:9F:98:45:2D:E0
Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
Certificate issuer:       /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
Manifest number:          5F
Signing time:             Mon 11 May 2026 08:17:11 +0000
Manifest this update:     Mon 11 May 2026 08:17:10 +0000
Manifest next update:     Mon 18 May 2026 08:17:10 +0000
Files and hashes:         1: GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl (hash: i5H9dXSxcLcbdpwrPhg/nlXRqq3B1H5OaoDk9ibnTks=)
                          2: B17823E6C92411F09DCC8126C4F9AE02.roa (hash: d4byGVZuBDPHHV4mRW8FS73gbpeL9gIriIfIPhZnw/0=)
                          3: 239DB440D4B011F0A2D8361AC4F9AE02.roa (hash: KGXKq0AkI/BfAPF8kDLFwg0GtVgkSnereWR0OLwNeuQ=)
                          4: CF829C38C92211F0B48DBA21C4F9AE02.roa (hash: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
        Validity
            Not Before: May 11 08:17:10 2026 GMT
            Not After : May 18 08:17:10 2026 GMT
        Subject: CN=6a019087-c2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:e2:01:86:bc:6d:44:5b:1c:e6:89:0f:f0:
                    f3:9e:71:b7:77:c7:c7:03:82:3d:88:a4:36:4b:26:
                    cf:79:80:3c:53:7f:1b:00:10:33:0c:8a:62:ec:e0:
                    ab:99:11:31:90:10:6c:b9:87:96:07:f0:d3:09:80:
                    d0:76:95:bf:73:15:3c:87:b8:3d:0e:18:3b:bd:1f:
                    f6:37:93:21:b4:4e:ac:6d:7d:54:d1:7d:8b:6a:59:
                    34:68:95:60:81:54:f3:e8:55:60:df:8c:68:48:5f:
                    5a:44:46:bf:73:aa:b6:9a:70:0d:69:97:6c:e9:08:
                    80:45:75:26:d4:48:95:f0:e4:a8:af:5a:45:d1:3d:
                    00:f9:78:22:15:03:81:a6:a7:84:b1:d5:e5:7b:57:
                    c5:d9:00:3f:88:ac:9c:29:02:d2:52:5f:41:68:11:
                    fb:29:11:e6:ae:9b:22:b5:fe:c5:61:de:cd:72:39:
                    86:14:d8:78:14:07:70:fe:28:e7:07:8d:40:6d:b2:
                    96:ed:c9:a8:c6:a4:f0:e3:dd:49:4c:30:3c:f2:63:
                    97:56:3a:f5:2f:ac:2e:28:91:99:f5:ae:28:7a:9b:
                    90:a9:95:3e:95:7e:c1:1b:c4:e3:de:66:5e:68:01:
                    91:47:f5:1f:76:8f:d3:d4:c9:83:b5:1a:c7:77:a2:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:29:7B:50:04:87:0C:1A:8A:4F:DF:93:F4:29:97:9F:98:45:2D:E0
            X509v3 Authority Key Identifier:
                keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:3b:3b:db:50:80:0b:2a:2e:77:88:97:fc:26:c3:6e:65:
         e0:da:3f:d6:5c:77:eb:d7:ce:b8:96:c2:ce:b3:4b:f2:b4:cc:
         76:7d:93:1d:85:b8:08:aa:8d:ed:0a:5d:4f:ec:4e:ce:31:30:
         d8:e8:e4:18:24:6d:ee:3d:0d:7c:7e:66:51:b7:31:28:87:10:
         d7:48:fe:99:c1:b7:68:bb:7e:5c:50:f1:32:4d:20:d1:ca:d2:
         31:19:3b:67:e5:be:1b:33:29:02:19:be:63:5a:73:30:12:16:
         fe:80:b8:e6:48:99:c4:af:92:12:f2:69:fa:65:de:25:98:a8:
         7c:bc:a6:f9:96:cc:48:26:59:b3:c1:9d:98:f9:f7:f4:db:9a:
         4c:c2:2c:9d:38:e1:9d:8d:fe:31:b4:56:c5:9e:90:f9:a8:c1:
         46:f7:49:52:ca:55:86:42:a1:a7:f8:a4:48:63:09:86:e3:9f:
         0b:3d:88:7b:8f:62:70:d7:60:e8:51:d5:65:75:45:0d:9f:09:
         c0:8a:cf:63:91:39:c7:4e:62:64:bd:a5:6a:5e:ba:5e:1e:dc:
         f9:b0:44:2c:d5:f5:12:f9:90:3f:e9:78:9a:b6:b0:90:10:45:
         b2:92:d1:e8:77:6e:96:ea:d2:2e:91:04:44:43:96:fa:ec:cd:
         46:52:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:33 2026 by rpki-client