Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
File:                     GLReQdo59jAuMWmWMNMihds9kxw.mft (raw, json)
Hash identifier:          mclI7B/rqcL8H1SyuSUCLdugAAbN8el1A/zrzfHLuhA=
Subject key identifier:   39:1F:4A:D6:AE:E6:40:9E:84:C0:77:04:3D:D0:36:F9:84:DE:7D:BE
Authority key identifier: 18:B4:5E:41:DA:39:F6:30:2E:31:69:96:30:D3:22:85:DB:3D:93:1C
Certificate issuer:       /CN=A918F525/serialNumber=18B45E41DA39F6302E31699630D32285DB3D931C
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
Manifest number:          0257
Signing time:             Wed 25 Mar 2026 01:40:49 +0000
Manifest this update:     Wed 25 Mar 2026 01:40:49 +0000
Manifest next update:     Wed 01 Apr 2026 01:40:49 +0000
Files and hashes:         1: GLReQdo59jAuMWmWMNMihds9kxw.crl (hash: GI7Qu5DLA2CxnFLrRst2pQI5IWkQPWIH3aKxEGgpsIk=)
                          2: 3062089A94CE11ED806CD364C4F9AE02.roa (hash: HnZjgeCCdHZdjI9ntb5P4JSX433n8nZayq7LPtxaZ/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.crl
                          rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F525, serialNumber=18B45E41DA39F6302E31699630D32285DB3D931C
        Validity
            Not Before: Mar 25 01:40:49 2026 GMT
            Not After : Apr  1 01:40:49 2026 GMT
        Subject: CN=69c33d21-aa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:a0:38:c6:fc:f1:a1:0a:b9:3e:57:df:3a:
                    d8:9e:7f:65:16:cd:74:04:b9:2f:22:94:16:2b:4f:
                    b2:15:fd:01:15:a1:47:b9:19:8f:c6:cb:ea:a7:dd:
                    fb:f4:c8:51:c5:19:59:8e:86:a5:75:69:ce:e2:a0:
                    59:7d:37:fc:65:48:ad:1e:24:1f:b0:23:45:e5:06:
                    ab:5d:9b:e6:55:fd:06:f5:ea:b4:a8:b2:0e:a8:9b:
                    55:ac:ad:4d:24:ac:e5:53:2c:f0:6c:74:50:41:aa:
                    74:a2:de:5f:d8:86:06:91:e3:bd:b6:95:a3:a2:2a:
                    68:f1:58:01:be:45:3a:68:2a:05:af:85:6b:20:f6:
                    97:3b:56:33:7f:23:07:52:a4:96:39:b5:e4:6f:8c:
                    b4:73:ba:5b:bf:a3:16:03:2a:38:8a:df:76:4d:98:
                    b4:c1:ae:de:55:08:dc:09:af:90:86:bb:6f:c7:e5:
                    47:00:eb:b0:15:85:aa:53:77:6a:e0:11:2e:7a:81:
                    2b:3d:6a:e7:46:e1:49:06:33:34:f3:5c:19:30:14:
                    91:27:00:9d:ab:d0:d9:e2:41:c1:91:a3:bd:57:69:
                    82:2f:7c:db:26:ee:13:80:39:f5:82:0e:fa:47:1a:
                    de:ab:7b:a9:75:76:8b:7d:01:ec:0a:a1:32:6f:d8:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1F:4A:D6:AE:E6:40:9E:84:C0:77:04:3D:D0:36:F9:84:DE:7D:BE
            X509v3 Authority Key Identifier:
                keyid:18:B4:5E:41:DA:39:F6:30:2E:31:69:96:30:D3:22:85:DB:3D:93:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:28:f7:d3:33:f9:00:a4:e5:b7:d1:5c:19:7f:32:2b:f2:e2:
         4b:ed:e0:f4:ff:1d:77:72:e5:3b:a6:c4:4a:63:1f:f5:ad:2d:
         54:d6:2e:34:34:c3:6a:3b:b0:9b:0a:cd:f7:f5:fb:68:c5:d9:
         55:e2:7a:7d:04:1f:22:16:ee:b4:b7:da:24:65:d6:b9:7f:be:
         c0:07:96:8c:03:de:23:d1:d9:56:8b:cc:3c:cd:2c:c2:d4:86:
         c4:fb:6d:e6:81:18:5b:e1:83:e2:54:b8:95:0e:5f:45:0d:e3:
         08:e8:69:f2:f5:bc:71:7c:8e:b6:19:1c:75:78:a4:8f:1b:d5:
         44:ee:b0:05:ed:ac:b3:c3:8f:3c:ab:8c:ad:38:16:26:ed:30:
         5d:51:cc:3f:93:51:2b:c4:8b:a0:76:32:9a:d7:05:02:26:5e:
         2d:4e:32:a2:a4:8c:21:c7:88:93:39:67:2c:04:6a:0c:7a:7e:
         4a:9b:80:ab:24:4b:f2:58:c0:df:d7:f2:c0:a1:0d:e1:5e:c9:
         bc:c8:df:67:08:a7:4a:2e:db:bc:b7:56:01:07:a5:2d:c3:2f:
         87:62:8e:e0:2b:f8:cd:b9:1f:ec:fe:e2:49:66:1d:e3:4c:44:
         74:f5:5a:68:fe:f3:da:df:89:43:26:49:a8:45:26:f1:54:5d:
         99:78:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:07 2026 by rpki-client