Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
File:                     GEMtUeYt2nKdH_G-G4H79VvYs0c.mft (raw, json)
Hash identifier:          rQlrQ+7a8EO+s6nIFiMGOl31IXAWoYFucMugDE6NYtU=
Subject key identifier:   42:72:A0:EE:0A:9B:CB:00:F6:13:50:F8:59:49:55:62:95:33:AD:20
Authority key identifier: 18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47
Certificate issuer:       /CN=A91AB1C2/serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
Manifest number:          50
Signing time:             Mon 11 May 2026 08:29:22 +0000
Manifest this update:     Mon 11 May 2026 08:29:22 +0000
Manifest next update:     Mon 18 May 2026 08:29:22 +0000
Files and hashes:         1: GEMtUeYt2nKdH_G-G4H79VvYs0c.crl (hash: lWucHaJS34rKEG/BI1FpAQMLdl2UDlOImDSCZDM8o40=)
                          2: D4578CBCE0F811F0841404A85E6F56BC.roa (hash: kVIQF28+VXWQvXZxpxDtZOt5V7kSBnZhEpXWdQv6LfU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=18432D51E62DDA729D1FF1BE1B81FBF55BD8B347
        Validity
            Not Before: May 11 08:29:22 2026 GMT
            Not After : May 18 08:29:22 2026 GMT
        Subject: CN=6a019362-7cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:d9:32:f2:8b:cb:0c:d7:d1:2f:0b:e5:a6:
                    a2:8b:3c:20:68:4f:07:68:27:ef:e6:7d:d1:16:b4:
                    7d:14:3e:d0:33:86:ff:e0:94:77:f0:08:ff:b3:e3:
                    27:81:c1:db:86:6c:89:9c:54:66:06:39:e1:e9:54:
                    ac:80:f0:d7:71:f6:63:2f:93:2a:3f:a7:83:cd:65:
                    65:98:a0:1b:b2:3f:e4:e4:47:0d:07:db:74:fe:8a:
                    7e:91:58:11:77:38:a6:66:df:9f:7b:7f:eb:5e:25:
                    df:d9:48:db:38:68:e6:da:32:4b:2a:de:50:8f:79:
                    3c:90:72:c1:00:bb:c2:5c:93:74:0b:46:ea:9d:5f:
                    8e:e6:d0:35:03:33:93:08:90:f1:82:ef:20:d8:df:
                    91:2c:00:d8:a0:39:07:d3:90:65:cd:ba:9d:95:5d:
                    82:49:1a:30:db:42:1b:15:cf:a7:f0:fc:94:82:50:
                    1a:4d:4f:64:5c:c7:e4:66:78:48:e3:43:f4:70:92:
                    5c:d5:ff:23:d0:66:03:61:dc:55:0d:23:4d:29:7b:
                    d8:73:96:8d:60:76:f7:a9:e5:01:3a:a0:6a:69:8d:
                    fd:7c:66:a7:9e:4c:06:53:29:45:c2:71:ed:c1:bc:
                    9d:75:f7:a4:b8:27:3f:a9:2c:8f:7e:b4:97:0a:1f:
                    07:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:72:A0:EE:0A:9B:CB:00:F6:13:50:F8:59:49:55:62:95:33:AD:20
            X509v3 Authority Key Identifier:
                keyid:18:43:2D:51:E6:2D:DA:72:9D:1F:F1:BE:1B:81:FB:F5:5B:D8:B3:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GEMtUeYt2nKdH_G-G4H79VvYs0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/059F7CBCDCA311F085D6F15B436F56BC/GEMtUeYt2nKdH_G-G4H79VvYs0c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:b9:f4:db:cb:1b:36:23:80:57:ac:79:b9:c7:f9:ca:70:
         76:5a:43:bb:8b:f5:a1:b3:2a:a3:9d:39:8f:44:94:9f:c9:15:
         39:c2:07:75:16:3c:fa:73:1e:33:d3:6f:d0:b2:dd:ab:96:d2:
         e7:7d:de:87:62:e0:f4:11:99:5e:a7:c7:08:59:51:01:a9:91:
         43:af:20:e1:ce:a6:bc:8d:0d:b2:64:fe:d1:fb:5f:f6:cd:02:
         77:2e:3b:76:94:50:32:37:72:90:c5:40:90:46:7b:2c:73:a1:
         0a:92:be:fb:5e:f4:5a:0b:28:7e:04:a2:c9:b1:db:01:ec:58:
         e7:b9:0c:53:57:68:b2:0b:08:a6:0e:40:68:41:e2:c6:4a:31:
         9e:25:9a:a2:04:78:e1:7b:83:94:7c:f0:19:b5:30:36:1f:2c:
         ac:b8:43:5a:68:2f:c4:f5:b4:28:6b:ef:52:31:3e:cf:82:9c:
         a4:b3:81:42:19:06:0a:9c:15:5b:12:d7:a0:bb:bf:aa:b9:97:
         0a:2d:f9:3a:e7:df:e1:11:a7:4a:d3:8f:53:8a:fa:37:0e:ab:
         1d:e9:11:e6:60:01:f5:a8:e0:ac:fe:0b:15:c2:8e:94:6a:02:
         5e:52:ee:20:fa:1e:d7:51:32:4e:97:f8:88:8c:32:94:46:ec:
         87:a2:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:03 2026 by rpki-client