Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
File:                     GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft (raw, json)
Hash identifier:          kmgp7+j8E/Gr35fqprfBu8VKjC1ro2bAhY4r+wBD4Fo=
Subject key identifier:   79:C8:69:B9:0B:55:9F:4E:CA:1D:8A:2E:FF:AD:11:7A:16:CA:B0:86
Authority key identifier: 18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F
Certificate issuer:       /CN=A9126BDE/serialNumber=1899AA6415670533224938FAA6655296183E438F
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
Manifest number:          53
Signing time:             Mon 11 May 2026 08:24:24 +0000
Manifest this update:     Mon 11 May 2026 08:24:24 +0000
Manifest next update:     Mon 18 May 2026 08:24:24 +0000
Files and hashes:         1: GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl (hash: lGgmwxeiO9Qz8UD8QzO7RTPzrOi5DIx+fdfI8uZuO6U=)
                          2: 5325F364D3FF11F09B7E5281C4F9AE02.roa (hash: 0DoVxQ7M0n3cZaqCMc5G8GkmP8gnmF47PhLipr8RTHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=1899AA6415670533224938FAA6655296183E438F
        Validity
            Not Before: May 11 08:24:24 2026 GMT
            Not After : May 18 08:24:24 2026 GMT
        Subject: CN=6a019238-4e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:31:b6:60:ed:d8:0a:c4:f9:a2:5d:e7:ec:
                    b4:6c:66:d0:11:f8:9c:69:4e:03:58:8c:45:e4:7f:
                    7f:ad:e2:5b:9e:c6:b6:89:36:dd:e0:eb:a4:4a:dd:
                    e2:1f:8d:29:4c:02:25:48:06:3a:fe:a9:61:8b:20:
                    17:84:1d:05:e1:3a:cd:e3:ac:9c:bc:62:e4:b2:01:
                    07:b6:27:24:b1:03:7b:8d:f2:54:29:25:ae:cb:f7:
                    df:b2:5f:c4:86:44:64:02:db:5d:4d:4d:45:1e:af:
                    e5:ff:6d:89:2c:58:d4:9e:1c:ad:a8:a4:2f:b1:d7:
                    2e:66:39:32:72:4b:c7:a5:fd:0d:dc:be:c8:c5:12:
                    85:e7:bf:ae:cf:4a:4f:64:0f:83:33:27:f9:39:5e:
                    7c:99:f5:dd:a8:7d:4a:c6:76:50:c5:1c:40:91:0a:
                    51:a6:18:30:88:2a:43:c8:aa:ff:57:a7:70:41:8f:
                    35:50:02:1b:5a:80:3b:e1:94:52:e4:be:bf:27:60:
                    2e:7d:df:2a:3d:a3:d8:5b:fa:73:e6:1d:10:87:f0:
                    08:49:7d:b9:02:61:10:34:4a:e0:13:45:18:15:42:
                    77:c3:46:4e:02:e0:1f:75:c4:e9:13:bd:88:39:27:
                    65:37:65:d1:be:68:10:21:71:ce:f3:91:10:e7:5b:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C8:69:B9:0B:55:9F:4E:CA:1D:8A:2E:FF:AD:11:7A:16:CA:B0:86
            X509v3 Authority Key Identifier:
                keyid:18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:33:18:24:8c:5d:b6:e0:0e:3d:db:c1:5a:c5:45:c4:37:e8:
         0c:b8:47:cc:d9:3b:97:9b:68:5f:75:70:00:8e:7f:18:5e:ef:
         bc:16:84:fa:e1:0d:7d:30:73:0d:c3:d5:2e:a6:30:56:14:cd:
         eb:75:17:ae:78:ab:9a:87:d6:06:96:e8:e5:22:39:db:93:12:
         c7:29:82:59:b8:4d:d6:32:a1:93:aa:ca:1d:91:10:12:bf:b1:
         bf:d0:62:6b:f8:c2:5c:1c:57:f1:8c:1b:d6:fe:b3:32:92:03:
         dc:85:26:92:19:d2:7b:34:37:eb:2d:ef:b9:48:14:17:6d:8a:
         da:63:57:2e:76:bc:73:ca:c2:4d:86:45:0b:86:ef:a6:af:23:
         2e:67:4b:53:68:be:60:93:ed:b8:dc:64:5d:6c:e0:a5:f4:db:
         2b:7a:55:50:a3:64:cb:6d:02:5b:15:25:70:10:0b:01:6e:11:
         b7:7d:9e:44:47:c4:b0:62:c3:38:19:7a:26:16:c7:e6:60:44:
         54:e3:cd:ec:72:ef:d0:bd:24:6c:0e:f3:bf:42:a4:99:75:7a:
         f5:7f:69:9a:38:1d:47:23:e9:6a:fe:d9:70:40:57:f4:7d:50:
         f3:ee:8c:7e:19:ab:5e:6f:3d:89:8e:78:b8:97:1b:26:eb:64:
         ab:15:a6:a0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NkJERTExMC8GA1UEBRMoMTg5OUFBNjQxNTY3MDUzMzIyNDkzOEZBQTY2NTUyOTYx
ODNFNDM4RjAeFw0yNjA1MTEwODI0MjRaFw0yNjA1MTgwODI0MjRaMBgxFjAUBgNV
BAMTDTZhMDE5MjM4LTRlMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4MzG2YO3YCsT5ol3n7LRsZtAR+JxpTgNYjEXkf3+t4luexraJNt3g66RK3eIf
jSlMAiVIBjr+qWGLIBeEHQXhOs3jrJy8YuSyAQe2JySxA3uN8lQpJa7L99+yX8SG
RGQC211NTUUer+X/bYksWNSeHK2opC+x1y5mOTJyS8el/Q3cvsjFEoXnv67PSk9k
D4MzJ/k5XnyZ9d2ofUrGdlDFHECRClGmGDCIKkPIqv9Xp3BBjzVQAhtagDvhlFLk
vr8nYC593yo9o9hb+nPmHRCH8AhJfbkCYRA0SuATRRgVQnfDRk4C4B91xOkTvYg5
J2U3ZdG+aBAhcc7zkRDnW8jTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUechpuQtV
n07KHYou/60RehbKsIYwHwYDVR0jBBgwFoAUGJmqZBVnBTMiSTj6pmVSlhg+Q48w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QkRFLzM5QkMwNDk4RDNG
QzExRjBBNzBENjQzMkM0RjlBRTAyL0dKbXFaQlZuQlRNaVNUajZwbVZTbGhnLVE0
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR0ptcVpCVm5CVE1pU1RqNnBtVlNsaGctUTQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2
QkRFLzM5QkMwNDk4RDNGQzExRjBBNzBENjQzMkM0RjlBRTAyL0dKbXFaQlZuQlRN
aVNUajZwbVZTbGhnLVE0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC7MxgkjF224A4928FaxUXEN+gMuEfM2TuXm2hfdXAAjn8YXu+8FoT64Q19MHMN
w9UupjBWFM3rdReueKuah9YGlujlIjnbkxLHKYJZuE3WMqGTqsodkRASv7G/0GJr
+MJcHFfxjBvW/rMykgPchSaSGdJ7NDfrLe+5SBQXbYraY1cudrxzysJNhkULhu+m
ryMuZ0tTaL5gk+243GRdbOCl9NsrelVQo2TLbQJbFSVwEAsBbhG3fZ5ER8SwYsM4
GXomFsfmYERU483scu/QvSRsDvO/QqSZdXr1f2maOB1HI+lq/tlwQFf0fVDz7ox+
Gatebz2Jjni4lxsm62SrFaag
-----END CERTIFICATE-----
Generated at Wed May 13 07:12:37 2026 by rpki-client