Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File:                     GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier:          J83Qg/FS5Ah9cxD5eO5gS7TNSXekgRQMZcill9tkJJY=
Subject key identifier:   38:EC:F6:D3:9F:16:45:B5:F0:21:BE:54:2A:9C:66:92:3E:F9:88:E9
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer:       /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial:       0C0D
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number:          0C0D
Signing time:             Sat 14 Nov 2026 15:31:47 +0000
Manifest this update:     Sat 14 Nov 2026 15:31:47 +0000
Manifest next update:     Sat 21 Nov 2026 15:31:47 +0000
Files and hashes:         1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: phF5gvsu0xZ3uDBb9fk9ZdJC+ExViah+ReH+gfmF7o8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 15:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3085 (0xc0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
        Validity
            Not Before: Nov 14 15:31:47 2026 GMT
            Not After : Nov 21 15:31:47 2026 GMT
        Subject: CN=6af87ee3-92f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:22:db:a1:5b:4f:a3:02:cb:53:a1:bf:54:
                    36:e0:c2:7f:a6:a5:8b:a6:7a:7a:c2:a9:f5:e5:e5:
                    dd:c8:a1:75:5e:ce:b2:b6:d7:fe:7e:dd:6d:fd:32:
                    51:76:5a:2a:f9:17:78:a3:57:cc:97:6a:bd:f8:a1:
                    8d:f0:4c:9e:af:08:b3:83:99:b2:34:24:37:9d:87:
                    34:83:54:d0:cc:05:13:39:aa:2e:48:8e:60:5e:a1:
                    40:93:a0:ef:ee:49:15:84:65:f1:8b:3f:2d:92:34:
                    a2:ec:d1:a3:5e:91:58:69:5d:81:81:b0:66:9a:e5:
                    76:3d:3d:f5:9a:38:45:22:c5:98:89:1b:d7:a8:36:
                    b1:22:56:f3:3f:12:6b:3d:a3:31:a4:a1:f0:2e:39:
                    e6:66:34:c0:05:cb:e8:20:4b:8c:eb:bb:de:fc:35:
                    85:94:d8:d6:9c:21:a8:16:ae:2f:db:1f:b3:f7:eb:
                    f5:a7:f2:e6:7d:71:4c:29:07:70:34:17:f1:6b:39:
                    f4:32:e3:bf:a7:78:1b:19:dd:ed:79:ab:ab:e8:ea:
                    b5:17:0f:85:3e:17:a9:d4:ec:6e:f5:ba:1f:44:1d:
                    95:91:bd:cf:a5:9f:5f:68:f3:15:35:25:9c:73:92:
                    f6:d3:1f:5b:3c:22:f2:55:f9:76:83:8a:c4:5f:42:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EC:F6:D3:9F:16:45:B5:F0:21:BE:54:2A:9C:66:92:3E:F9:88:E9
            X509v3 Authority Key Identifier:
                keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:2d:1c:25:f8:99:23:9b:21:96:65:41:a5:be:c1:8c:93:63:
         81:e0:fc:10:da:16:e3:15:f1:18:7d:9a:72:4d:ef:99:16:b5:
         02:55:45:0a:a7:fb:68:9f:ff:f9:fa:cf:63:58:2b:c3:34:f3:
         8e:b9:70:ec:8c:92:cd:b7:91:39:36:66:0f:50:48:d3:ee:c3:
         67:e6:31:05:4a:30:21:62:69:08:0e:27:3a:e1:60:a7:1f:0d:
         6f:8b:50:45:05:05:74:e4:85:83:4d:cd:41:e8:0d:e3:84:f3:
         bc:54:b1:11:ad:60:fa:ba:c0:06:e5:21:e0:43:99:71:d1:af:
         a0:67:c6:c5:a1:87:98:b8:c1:9b:11:f1:35:ed:6a:89:74:aa:
         44:21:5c:b4:83:45:0a:2a:57:a0:1d:5b:be:2d:fc:b8:29:df:
         c9:80:fd:38:95:39:e4:2a:75:cb:44:2f:d4:70:bc:b6:bc:14:
         5e:c0:2c:3a:b8:89:9e:1d:9c:98:6f:ef:bc:d6:6d:7b:60:be:
         c7:7b:13:47:f5:38:52:8c:b1:0e:3b:2f:f5:07:89:b9:49:78:
         da:1c:7c:5a:d7:df:97:75:7c:b1:f2:c7:c7:18:c9:f8:c1:1f:
         be:4c:10:9b:d6:f5:c2:5e:7b:ca:3f:9b:67:f3:b0:1a:69:2c:
         f1:dd:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:21:33 2026 by rpki-client