Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
File:                     1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json)
Hash identifier:          nshnVm3ark8UGiwPMlLde4MtQYAmVFLmz1SllvcDwA8=
Subject key identifier:   4C:29:3C:DE:48:11:7E:19:AC:D7:4C:1E:F1:A8:5B:95:B7:D2:B0:C2
Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
Certificate issuer:       /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
Manifest number:          0121
Signing time:             Wed 13 May 2026 05:52:03 +0000
Manifest this update:     Wed 13 May 2026 05:52:03 +0000
Manifest next update:     Wed 20 May 2026 05:52:03 +0000
Files and hashes:         1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: KPMoFPYEfNlwMxV2K3afL++5AgBZkumXdNRToaFnosc=)
                          2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: V6hcLW3DIWJr5GsqXhQQoqs6tXkMxQGHQdAMhmhtdMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
                          rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
        Validity
            Not Before: May 13 05:52:03 2026 GMT
            Not After : May 20 05:52:03 2026 GMT
        Subject: CN=6a041183-ef88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:f6:a3:79:86:14:59:c7:2e:d0:61:f4:ba:
                    d5:3d:9e:2c:47:9b:6d:15:2a:14:69:0f:9e:30:11:
                    b5:29:f3:c6:19:9f:70:0a:e0:9f:93:36:5a:7b:b1:
                    94:08:b9:9c:72:1c:8e:4e:b8:e5:2b:59:3b:e7:e9:
                    5c:03:60:ca:a0:f3:f8:5c:92:00:11:11:0e:d0:67:
                    e0:0c:5f:0f:9d:5a:4f:03:c1:f6:27:d7:f5:11:63:
                    06:5e:e2:b1:9e:d1:47:c5:f6:6d:d9:cc:8a:99:d1:
                    8f:1b:1d:93:e0:9d:8f:d0:10:ca:16:d6:97:7f:a3:
                    5e:30:6a:bb:ae:2d:df:1b:53:f8:aa:32:c5:fa:3b:
                    fa:34:47:73:25:20:ab:27:d8:cd:d9:a7:a1:85:4d:
                    ee:65:c4:af:61:c8:16:47:f7:05:ef:f5:e2:96:5b:
                    b8:bc:5f:ea:a8:3f:0b:9d:e0:ab:65:1f:40:84:3c:
                    1b:cb:a9:8a:02:33:98:d1:d1:69:a3:e1:29:ea:7f:
                    de:a7:29:69:30:ec:f4:77:b2:40:47:c4:f7:fa:4d:
                    e7:87:33:ce:d4:6b:3d:2d:5e:e8:0e:66:5b:94:0b:
                    ce:09:10:ef:a5:55:d5:85:81:5e:89:74:a4:88:fa:
                    ee:9e:b3:c5:3f:89:fa:a4:92:6e:e9:d9:5c:46:c8:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:3C:DE:48:11:7E:19:AC:D7:4C:1E:F1:A8:5B:95:B7:D2:B0:C2
            X509v3 Authority Key Identifier:
                keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f1:84:f4:cb:a6:dc:08:05:db:a3:75:e3:57:bb:e9:f4:3d:
         2a:d1:8e:08:68:77:bc:29:f7:aa:a1:ce:18:33:a8:77:1e:14:
         65:eb:02:b0:37:f8:ce:11:19:ec:55:ab:ee:a8:01:66:3b:34:
         85:a1:5e:ed:6c:c4:5e:6d:8a:d4:05:6a:d6:c6:52:3c:37:8f:
         6a:85:e4:6b:db:e3:2c:21:aa:3c:41:10:0a:2f:27:85:9f:cf:
         5f:ae:35:ed:c2:ed:9d:81:74:53:06:f3:5b:4d:cf:9d:e5:2d:
         bb:23:dc:eb:7f:24:b9:94:fa:a2:4f:a3:ec:f1:c4:bb:8f:15:
         cf:74:7d:2a:69:98:4e:4d:7b:40:c7:a8:de:35:7e:43:b9:8b:
         9a:ac:00:ea:18:77:12:9d:df:0b:e2:87:f9:8e:76:60:db:84:
         c5:5d:2d:f0:e7:67:2b:3a:f2:f1:7c:65:16:c9:91:ce:53:73:
         aa:96:dc:ae:1c:8b:6b:2f:e7:90:1f:87:62:41:2b:39:7a:3a:
         9e:2f:50:7b:ea:6a:5a:7e:dd:51:64:53:5a:70:96:ee:e9:fd:
         db:8e:84:2c:db:2b:54:a3:29:dc:f7:44:93:11:b7:c1:e4:19:
         31:ef:d6:62:c3:c2:cf:71:98:52:64:f8:45:c7:96:e4:15:b9:
         bd:b2:86:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:29:27 2026 by rpki-client