Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File:                     GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier:          5zh9En9G/onx+ruDBIa2wcQn4SioVx5u5Sd9/DkntSI=
Subject key identifier:   A5:86:17:3C:A9:15:8D:53:D8:4C:A4:6C:59:32:80:85:5B:E8:68:46
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer:       /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial:       0BAC
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number:          0BAC
Signing time:             Tue 12 May 2026 15:35:55 +0000
Manifest this update:     Tue 12 May 2026 15:35:55 +0000
Manifest next update:     Tue 19 May 2026 15:35:55 +0000
Files and hashes:         1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: V9A1nwSNoq8z2ackcveVO5rO6263RnJJitE/UVDLadM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2988 (0xbac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
        Validity
            Not Before: May 12 15:35:55 2026 GMT
            Not After : May 19 15:35:55 2026 GMT
        Subject: CN=6a0348db-4225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:1f:47:2c:70:e4:03:e8:f1:ae:d3:fb:68:
                    d6:a7:1d:9e:88:44:a4:5a:36:72:d6:0c:e4:d6:b9:
                    4f:6a:5d:4c:66:fc:bc:22:ba:ca:19:ef:77:a3:41:
                    5c:b6:00:d7:f2:98:de:25:fa:19:70:31:47:39:88:
                    28:e9:6a:ba:1d:aa:0a:59:f1:a6:9f:3b:99:99:bf:
                    14:96:9c:b9:ae:df:97:90:90:bd:bc:57:59:81:3f:
                    4c:e3:07:8d:89:9e:21:c9:ac:f3:24:a0:f1:17:b1:
                    ae:19:82:58:e7:da:53:f5:98:71:13:47:1f:ed:9a:
                    4a:0e:c8:a3:2b:99:b1:2a:51:60:67:21:ec:57:c9:
                    84:e0:ac:cd:93:3f:f4:0f:10:30:97:40:06:92:f4:
                    5c:35:6a:82:10:5f:98:ef:88:0f:cb:1d:8e:74:28:
                    4d:01:d9:05:4b:6a:2e:20:19:ad:c0:26:cf:d3:dd:
                    f3:38:71:8b:36:73:5b:06:a3:1f:6b:e5:3e:8a:26:
                    44:2a:45:0e:28:b7:52:dd:93:93:da:7f:a1:c5:7e:
                    86:a2:86:9c:76:b6:b9:24:6c:8a:19:7f:79:79:ee:
                    88:75:31:cb:ee:6d:fb:90:46:72:6f:b4:ed:7d:73:
                    4f:1b:30:4b:2b:9a:83:56:41:d5:29:c3:d4:a4:7c:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:86:17:3C:A9:15:8D:53:D8:4C:A4:6C:59:32:80:85:5B:E8:68:46
            X509v3 Authority Key Identifier:
                keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c6:34:e1:8e:8c:c2:f8:75:7a:7e:2d:9a:66:f0:1a:7a:54:
         e8:81:2d:6c:0c:57:63:78:de:fe:ce:c4:b9:df:9c:d2:c0:89:
         26:cd:df:e2:08:27:16:38:f7:08:d4:7a:ef:14:ca:12:49:86:
         6d:21:b1:1d:9d:e7:6b:c4:27:67:35:15:b7:40:fe:69:0f:9d:
         4a:99:29:39:16:2f:ae:5f:9f:12:59:a0:05:ea:b4:c1:9c:b0:
         dc:92:75:64:28:c7:2d:2f:f5:e2:03:8d:c6:4c:77:d2:e5:50:
         b4:76:f4:b5:ef:6b:e4:aa:b2:26:f4:72:1b:75:a9:64:c8:e0:
         e8:dc:1d:0a:2a:a7:a2:af:0f:05:28:33:f5:fb:d0:ff:a2:b2:
         99:b0:66:32:b5:79:33:85:3f:fb:17:2f:c1:84:8c:d8:a5:31:
         28:1d:8e:8c:27:f9:d6:c3:88:be:bb:ac:e0:88:21:e9:7f:88:
         83:43:85:97:34:66:6a:a6:c7:44:de:bc:46:22:e1:db:24:f6:
         a0:94:57:9c:14:f4:5f:d0:c9:38:9f:4b:fa:92:52:70:b9:46:
         ea:ea:03:1d:1c:2b:6f:b3:a1:c0:bf:03:9f:8a:c6:53:73:84:
         1c:8d:74:60:13:dd:1b:36:40:52:d5:d0:f6:28:70:16:f2:c0:
         ca:2b:93:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2
RTQ5RDE0QjAwHhcNMjYwNTEyMTUzNTU1WhcNMjYwNTE5MTUzNTU1WjAYMRYwFAYD
VQQDEw02YTAzNDhkYi00MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsvsfRyxw5APo8a7T+2jWpx2eiESkWjZy1gzk1rlPal1MZvy8IrrKGe93o0Fc
tgDX8pjeJfoZcDFHOYgo6Wq6HaoKWfGmnzuZmb8Ulpy5rt+XkJC9vFdZgT9M4weN
iZ4hyazzJKDxF7GuGYJY59pT9ZhxE0cf7ZpKDsijK5mxKlFgZyHsV8mE4KzNkz/0
DxAwl0AGkvRcNWqCEF+Y74gPyx2OdChNAdkFS2ouIBmtwCbP093zOHGLNnNbBqMf
a+U+iiZEKkUOKLdS3ZOT2n+hxX6Gooacdra5JGyKGX95ee6IdTHL7m37kEZyb7Tt
fXNPGzBLK5qDVkHVKcPUpHxTTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWGFzyp
FY1T2EykbFkygIVb6GhGMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2
NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz
ZzNtU04tVlUyOHh1U2RGTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK8Y04Y6Mwvh1en4tmmbwGnpU6IEtbAxXY3je/s7Eud+c0sCJJs3f4ggnFjj3
CNR67xTKEkmGbSGxHZ3na8QnZzUVt0D+aQ+dSpkpORYvrl+fElmgBeq0wZyw3JJ1
ZCjHLS/14gONxkx30uVQtHb0te9r5KqyJvRyG3WpZMjg6NwdCiqnoq8PBSgz9fvQ
/6KymbBmMrV5M4U/+xcvwYSM2KUxKB2OjCf51sOIvrus4Igh6X+Ig0OFlzRmaqbH
RN68RiLh2yT2oJRXnBT0X9DJOJ9L+pJScLlG6uoDHRwrb7OhwL8Dn4rGU3OEHI10
YBPdGzZAUtXQ9ihwFvLAyiuTgQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:09 2026 by rpki-client