Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
File:                     Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft (raw, json)
Hash identifier:          yrrqilCqb2iVsfg4Dz9aDe3c2rRROH32hbA2iJ+G7AI=
Subject key identifier:   38:14:76:7C:7D:29:95:F3:C5:E2:E4:DF:4C:35:16:BA:A7:C8:01:37
Authority key identifier: 19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B
Certificate issuer:       /CN=A915233F/serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
Manifest number:          026A
Signing time:             Mon 11 May 2026 02:06:49 +0000
Manifest this update:     Mon 11 May 2026 02:06:48 +0000
Manifest next update:     Mon 18 May 2026 02:06:48 +0000
Files and hashes:         1: Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl (hash: HR0G60NIblyDO3bFBNq94WIm/MV/IK5x/KVBy/FwRx0=)
                          2: 272313529ADA11EDAA08043BC4F9AE02.roa (hash: lX9XDoKOnBlm4jL9eL6wOTSw50WNp30tUJMVN3kwKpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl
                          rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915233F, serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B
        Validity
            Not Before: May 11 02:06:48 2026 GMT
            Not After : May 18 02:06:48 2026 GMT
        Subject: CN=6a0139b9-75e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:a0:d6:6c:b2:63:df:49:c2:e5:a2:85:55:
                    d7:fc:31:97:12:ba:08:08:6a:9c:51:ae:a5:45:a9:
                    99:4b:31:17:02:99:58:c2:fa:af:2f:02:29:a4:38:
                    e8:cc:f9:8f:95:cc:c5:01:4c:34:1e:fb:78:ee:80:
                    4d:9b:1f:e7:1b:59:75:cd:4d:93:93:72:c4:11:4e:
                    26:4e:85:6a:f9:b3:d2:1a:01:b0:5f:9d:80:3e:90:
                    b7:d9:4b:ce:16:55:cc:f1:00:56:7a:3d:48:c1:ce:
                    71:1c:12:8b:3a:65:2d:fe:d9:fc:e3:73:46:d6:d2:
                    d2:16:f4:9a:ba:93:fa:58:78:96:0c:95:72:f2:e7:
                    c3:b4:dc:e1:9b:c5:26:6d:92:98:d5:18:ff:5f:43:
                    f0:e1:5b:f3:f4:7f:81:41:68:af:6b:c9:9f:8b:11:
                    70:1c:dd:5a:a3:92:e8:1d:3c:c2:e0:ba:cf:85:e8:
                    28:ea:75:47:1a:38:21:82:9f:6c:eb:4c:a9:ef:82:
                    01:70:66:09:cc:9c:db:a1:41:fc:88:6f:93:67:59:
                    54:a7:0e:b2:06:1a:3b:f1:c0:ab:87:ce:98:6d:5f:
                    37:0d:3a:07:7a:bf:b3:2a:ba:4e:a4:ff:11:83:d6:
                    62:fe:cb:17:a9:74:a4:c6:8e:92:47:25:59:b9:35:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:14:76:7C:7D:29:95:F3:C5:E2:E4:DF:4C:35:16:BA:A7:C8:01:37
            X509v3 Authority Key Identifier:
                keyid:19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c0:4d:b2:9d:6c:7e:db:be:79:25:db:39:46:a0:3f:14:c9:
         22:d2:69:1a:b1:75:81:99:41:5a:1e:85:1e:da:f0:b7:93:ed:
         73:2c:c1:5a:af:4d:d5:33:d8:a9:54:6e:21:08:3b:8b:c9:ee:
         24:95:c4:df:68:86:a1:b7:5d:8f:97:8d:01:3c:92:dc:2f:b4:
         a1:f9:79:3d:8d:37:f2:3d:32:c2:2d:92:fe:f1:29:fb:ed:26:
         ff:08:20:06:4a:46:64:c2:43:61:33:26:76:4b:fd:98:a8:f9:
         9a:cb:5b:15:cc:30:d2:3c:8d:34:08:b6:62:ec:31:24:3a:24:
         8f:d2:62:1f:bc:b3:ac:4f:a3:10:11:5b:32:8f:fc:99:b2:15:
         0b:76:2b:c8:03:b2:dc:78:81:ac:38:7a:7b:34:73:f3:ea:12:
         a5:9f:80:26:93:fe:6b:bc:20:75:23:50:7d:0c:16:09:ca:9b:
         0e:f8:63:72:fa:67:3d:e1:4d:63:cb:ba:97:e2:46:6d:24:2e:
         d2:b0:04:10:a0:6b:40:7c:e5:83:87:15:66:a9:08:f0:f6:5b:
         06:cd:83:c0:d8:de:c6:64:7b:0c:09:a4:2f:fa:01:33:ab:82:
         9d:46:39:dc:bd:de:a7:2c:66:47:c8:75:0f:49:ab:74:02:b8:
         da:82:3c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:18 2026 by rpki-client