Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
File:                     gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft (raw, json)
Hash identifier:          yUM9jzAIUppAAEbO2Sp147konOW4U3TrgRkl/c4WUtQ=
Subject key identifier:   88:70:7E:47:B5:D4:91:9D:62:1E:77:D7:76:FD:A5:9D:F8:AF:30:76
Authority key identifier: 83:19:42:29:1E:5F:45:72:2B:56:FC:4A:9B:6C:08:15:FD:A8:B9:93
Certificate issuer:       /CN=A915FA57/serialNumber=831942291E5F45722B56FC4A9B6C0815FDA8B993
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
Manifest number:          0C
Signing time:             Mon 11 May 2026 09:16:39 +0000
Manifest this update:     Mon 11 May 2026 09:16:39 +0000
Manifest next update:     Mon 18 May 2026 09:16:39 +0000
Files and hashes:         1: gxlCKR5fRXIrVvxKm2wIFf2ouZM.crl (hash: 0blr5oCfqviTqyvccE4n+yKbF7KIAIH+Ja+9PmqrAzU=)
                          2: 5A303E7A3D4611F1994807ACA2833773.roa (hash: 75E46ZIZqwC0x2k0YHhHlFPjqIaUQxrI06tnum4Jygk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.crl
                          rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FA57, serialNumber=831942291E5F45722B56FC4A9B6C0815FDA8B993
        Validity
            Not Before: May 11 09:16:39 2026 GMT
            Not After : May 18 09:16:39 2026 GMT
        Subject: CN=6a019e77-8676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:22:9f:82:26:e4:70:d1:ba:d7:b7:78:34:
                    bf:be:d2:87:f8:c7:ad:a9:b1:b4:d3:20:97:56:c8:
                    1a:29:39:68:ad:4d:1b:c3:70:b6:cc:7c:2f:6e:68:
                    76:30:ef:e0:38:b5:46:fc:4f:49:1b:6d:50:91:09:
                    1a:67:1f:7d:cf:b5:a5:ff:70:2b:42:6f:30:89:fc:
                    28:aa:e8:f7:c0:fa:87:d7:6a:ea:8a:b0:96:dc:42:
                    e1:d4:8a:46:6b:a9:4a:8d:f2:83:65:99:d2:d9:e9:
                    b3:b1:77:8b:25:4f:6a:8b:e1:7c:4e:e2:7d:52:fe:
                    f4:f4:52:e8:b6:3c:56:e5:6b:66:6c:2a:59:09:25:
                    d0:55:cf:0e:fd:6c:d4:9b:d6:4e:13:1e:37:9a:0e:
                    ba:0b:3c:ff:cf:9e:7e:59:aa:9e:22:88:b7:70:32:
                    f8:0b:ce:99:b8:a9:c3:08:a8:ac:fc:cc:a1:cc:1e:
                    ff:6e:90:fd:0f:3c:c1:fd:1e:2a:a8:42:bc:d3:bd:
                    a9:6d:4f:e2:c4:5b:07:9c:3b:bc:9e:57:b8:3f:ff:
                    a3:87:91:2c:3c:1a:d7:7c:30:96:2e:a1:03:9a:a5:
                    2f:5a:89:1d:56:38:e7:0a:30:ee:71:89:c1:c5:90:
                    a3:98:2f:15:5c:3a:3c:60:bd:d9:95:f2:58:06:c7:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:7E:47:B5:D4:91:9D:62:1E:77:D7:76:FD:A5:9D:F8:AF:30:76
            X509v3 Authority Key Identifier:
                keyid:83:19:42:29:1E:5F:45:72:2B:56:FC:4A:9B:6C:08:15:FD:A8:B9:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:7a:fd:b9:eb:d9:59:49:a1:30:42:88:47:9f:ec:0b:d7:
         b9:8f:46:b2:1b:92:b4:3d:c5:f6:b6:a4:b0:32:44:6e:ff:f7:
         07:28:2b:58:81:17:83:9b:36:cd:2b:d0:47:a2:5b:d5:c9:b7:
         8d:03:a8:14:58:8d:7c:4b:6e:84:5b:05:a1:14:61:94:16:5c:
         21:29:d3:67:60:d7:05:d2:50:65:b8:47:93:a3:b3:c4:af:63:
         a7:3a:5c:df:20:a6:79:88:43:b6:bc:25:c3:46:bc:c1:35:cb:
         99:48:99:8e:2a:98:cd:3f:2c:5a:d8:bf:17:7b:46:dc:76:97:
         8b:1f:95:ea:49:11:c5:dc:ff:95:a6:91:ba:2c:f2:17:42:2c:
         4d:b6:82:15:47:ae:c9:84:8d:a5:e7:eb:af:4c:04:c7:40:19:
         a3:06:cf:cd:a9:c5:a9:a1:fd:f2:a9:e2:73:76:c8:d5:4c:d4:
         50:4f:e8:09:c2:ac:33:f9:c2:25:a8:16:ad:22:2b:0c:fb:70:
         8c:04:29:4d:cf:05:36:d7:a3:55:f3:b4:23:6c:f5:8c:62:1f:
         92:15:dd:32:dd:6a:08:cb:6c:5f:72:47:b0:d1:55:ac:33:02:
         e4:4b:7d:3e:13:3c:60:8a:81:39:25:2d:09:38:0a:9c:5b:73:
         8a:90:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:35 2026 by rpki-client