Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
File:                     G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json)
Hash identifier:          IsUKgFmVl4HtBAFfoxZsY0b4cFyGC32gjtlwDjv8sp0=
Subject key identifier:   C1:A2:53:E5:4F:8A:CF:2E:4B:5F:09:8B:26:C9:6C:CA:01:AB:99:73
Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Certificate issuer:       /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
Certificate serial:       0CE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
Manifest number:          15A9
Signing time:             Tue 12 May 2026 18:26:05 +0000
Manifest this update:     Tue 12 May 2026 18:26:04 +0000
Manifest next update:     Tue 19 May 2026 18:26:04 +0000
Files and hashes:         1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: MQcWIEcEUJYQtYKE5RCiLZso8zbIh5vsope/1fvQclQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Validity
            Not Before: May 12 18:26:04 2026 GMT
            Not After : May 19 18:26:04 2026 GMT
        Subject: CN=6a0370bc-5ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:6c:48:c2:7e:51:07:5e:58:ca:c7:19:11:
                    75:29:51:89:9c:e7:c7:a3:b5:a1:52:56:d1:bf:76:
                    a5:62:8c:08:13:04:ea:07:88:f4:ec:f6:4e:29:1a:
                    55:d8:c7:fc:24:0d:56:c3:04:9f:0a:55:15:e2:3c:
                    ff:e2:48:a2:e0:eb:cb:59:12:12:3e:47:82:ef:a6:
                    b4:de:47:4a:2e:c8:bd:2f:a3:a5:65:ba:2d:63:a1:
                    be:31:74:ad:96:9a:cc:11:65:b3:a5:99:80:82:88:
                    3c:aa:3b:93:3f:97:85:6f:5a:eb:9b:9b:be:98:ed:
                    dc:fe:15:89:d3:01:46:82:8b:49:34:5a:af:6b:4f:
                    c8:37:bf:8c:67:b6:3a:cc:ec:e0:4e:e4:00:37:b9:
                    08:5e:c5:1c:1e:db:e2:f6:7f:5c:8a:d7:21:f8:49:
                    26:6e:9b:00:6b:aa:02:71:67:d0:f2:4e:ed:78:26:
                    c5:7f:5c:c6:6a:ef:20:5f:1a:e3:34:26:9e:9f:a1:
                    7a:5f:19:da:c0:32:ef:5e:5a:68:65:9b:15:34:03:
                    24:d3:a5:e1:0f:8c:77:b6:5e:6b:29:0e:03:1b:2b:
                    22:29:22:11:ee:58:04:40:ab:20:46:a9:b7:65:e7:
                    ff:9f:cd:9f:d4:4a:81:93:bf:98:98:e0:20:59:29:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A2:53:E5:4F:8A:CF:2E:4B:5F:09:8B:26:C9:6C:CA:01:AB:99:73
            X509v3 Authority Key Identifier:
                keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3a:22:bd:e3:9c:6d:9d:ae:24:10:06:34:e8:56:2e:c0:c1:
         b1:de:9d:54:3b:a1:f0:8b:ea:a3:42:25:57:7a:8e:06:40:a6:
         73:07:a0:37:50:36:ad:81:11:8a:22:e6:09:cc:9c:be:a0:96:
         3f:01:ed:a6:06:71:d2:f0:55:2a:e5:3a:5a:f2:84:df:47:79:
         bd:f9:c3:a6:0e:10:fe:8a:c8:c4:72:fa:13:c5:4f:12:e5:b1:
         02:ef:3e:7f:a0:a4:4c:ca:3f:e8:2b:03:58:16:00:cb:fa:8e:
         2f:19:24:a3:7a:ac:18:fe:6a:03:3b:77:2e:cd:9d:52:33:c2:
         00:1a:ff:fd:2e:31:c2:a9:dc:91:cf:51:d0:99:cb:79:72:45:
         81:de:fd:75:81:bd:c3:d5:d0:b3:c8:db:28:ee:99:da:38:21:
         d7:a2:f0:4c:3c:80:bd:c8:6b:bf:54:56:75:64:56:4e:cc:bd:
         97:00:18:29:d8:84:03:d1:5d:c1:c9:17:15:6c:a9:6a:66:ed:
         68:42:8b:67:70:e5:df:e5:80:1f:65:65:17:9c:e7:3b:cd:8e:
         54:3d:ef:50:b2:fd:1c:aa:36:2d:f7:97:d3:45:87:08:18:bf:
         c0:d7:04:d7:15:74:0c:44:82:1d:89:f6:56:9e:c9:df:e0:0e:
         c5:8a:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:07:45 2026 by rpki-client