Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
File:                     g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json)
Hash identifier:          X8SgAnaGOSsOwBkjFr10ZpACfwvt30b3mnErvlTf54w=
Subject key identifier:   F2:7D:E8:4B:13:46:F3:01:8A:FB:DA:76:C3:96:E5:0E:BD:55:29:F1
Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
Certificate issuer:       /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Certificate serial:       0DD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
Manifest number:          0DCC
Signing time:             Tue 12 May 2026 18:22:03 +0000
Manifest this update:     Tue 12 May 2026 18:22:02 +0000
Manifest next update:     Tue 19 May 2026 18:22:02 +0000
Files and hashes:         1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: gd4bI2zFxNGuu7q1Te4M93aRQaHCklnNiqClSIkY9lI=)
                          2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: az5Wu3rdmwem1fp3sJ1LkEbrXCOkEOGTGhmGNaaRozA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
                          rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3541 (0xdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
        Validity
            Not Before: May 12 18:22:02 2026 GMT
            Not After : May 19 18:22:02 2026 GMT
        Subject: CN=6a036fca-46cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:d6:9c:59:e5:ea:e3:45:2a:75:49:89:3b:
                    e8:bd:74:e5:15:0b:31:3c:01:c9:81:b0:15:93:4c:
                    66:00:20:11:90:73:d4:b8:07:73:9b:93:87:ea:d4:
                    c6:f6:39:a6:c5:e9:e4:c1:e6:5e:67:c6:ed:58:55:
                    94:3e:37:33:9a:02:ae:39:eb:30:ea:e8:92:22:dd:
                    b4:79:33:5d:ac:16:1b:62:25:bd:0e:99:65:4c:d1:
                    86:44:2d:37:02:1d:1d:0d:bc:6e:a2:85:05:9b:33:
                    2a:37:32:8e:ab:fa:be:27:9e:3e:25:5c:0a:78:f3:
                    a5:52:50:20:21:a4:ba:db:61:c6:7f:9c:33:f9:cf:
                    f1:c7:55:f8:de:93:42:9f:28:b9:04:5b:11:78:35:
                    df:96:47:f4:66:49:87:78:3e:f5:ad:9a:2d:80:3b:
                    18:db:16:f1:ef:10:f1:ef:f4:5e:65:41:56:05:23:
                    19:6a:42:ac:25:f8:d9:43:b5:fc:10:e0:6f:0e:b8:
                    e3:2d:f5:21:50:c8:de:cd:7c:25:b5:aa:38:ae:d2:
                    10:31:ec:d9:38:53:ed:9b:7e:aa:5c:7c:dc:29:c4:
                    dd:ef:ba:45:a1:66:27:ea:00:09:4e:bf:96:ec:67:
                    3d:e6:e6:a8:ab:e2:b1:9c:26:fa:96:26:77:a9:71:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7D:E8:4B:13:46:F3:01:8A:FB:DA:76:C3:96:E5:0E:BD:55:29:F1
            X509v3 Authority Key Identifier:
                keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:68:03:ec:3e:e0:4a:87:85:b7:c4:b1:20:d3:e9:2a:5e:
         0a:6a:82:80:21:95:32:73:bd:97:3d:ba:3c:bd:6a:8f:28:1c:
         38:99:32:0b:7a:b4:da:b6:72:a2:d8:80:7c:b1:8f:04:c0:5f:
         f8:80:a4:69:07:07:ad:c7:68:a9:e2:b3:7b:52:22:d6:f2:45:
         e1:98:67:4c:b9:ef:2c:6a:d1:8a:0e:49:c8:9f:f7:85:7a:cd:
         2a:66:3b:d5:29:10:16:57:25:42:17:a5:d5:2a:3b:da:b7:69:
         a0:b3:d6:71:3c:cc:c0:0b:4b:ad:f9:ee:01:2a:a3:13:69:b8:
         41:ad:83:bf:9c:be:03:6f:29:83:9c:df:4d:b3:0d:1f:30:42:
         f9:d3:f5:4d:81:61:b7:55:e9:3f:ba:8e:2c:e9:8a:99:4f:6b:
         03:47:83:f0:3d:5f:60:8c:74:bc:76:1e:70:b7:79:e3:13:59:
         d5:12:45:c1:58:56:4f:6e:2b:4d:5c:de:c0:08:89:eb:3a:c4:
         6e:f4:8b:3d:92:8c:63:02:27:f1:79:1e:8d:f9:a1:92:be:fa:
         3f:fb:b2:22:b4:e2:ac:97:96:ce:0e:61:53:41:13:cf:9e:15:
         2e:4a:06:b9:4d:a3:b4:c8:6f:1f:82:5b:7f:fe:f0:41:3a:a9:
         fd:96:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:37 2026 by rpki-client