Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft
File:                     GwdUmyUM_APdrXtURD2oOIkYEco.mft (raw, json)
Hash identifier:          qS0eoLYZpC0J1V1pskI2sbkzT7YBInMtX2rAVHmir8E=
Subject key identifier:   C3:3F:AA:FE:59:18:C5:6D:1B:7A:68:AC:DF:02:56:68:D8:91:21:2F
Authority key identifier: 1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA
Certificate issuer:       /CN=A91D18AC/serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft
Manifest number:          0124
Signing time:             Mon 11 May 2026 05:42:44 +0000
Manifest this update:     Mon 11 May 2026 05:42:43 +0000
Manifest next update:     Mon 18 May 2026 05:42:43 +0000
Files and hashes:         1: GwdUmyUM_APdrXtURD2oOIkYEco.crl (hash: PGiG1vkMNJ6OmKjqndrNYmFnAGqXfSjC60MRs+c4Bbo=)
                          2: 34BA37F6976E11EFAEB6A258C4F9AE02.roa (hash: GuBhGybCWeyGqqI+tDy//PPqxlsEHSc9ReRR3T+GKIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl
                          rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D18AC, serialNumber=1B07549B250CFC03DDAD7B54443DA838891811CA
        Validity
            Not Before: May 11 05:42:43 2026 GMT
            Not After : May 18 05:42:43 2026 GMT
        Subject: CN=6a016c54-704e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:01:6a:69:75:41:84:ce:02:6f:29:d3:47:
                    1c:37:7f:de:0f:ea:2d:8e:4c:ce:98:c2:6d:82:df:
                    ba:de:cd:7e:61:b7:2b:1b:2c:6a:60:ce:5a:03:34:
                    ad:54:44:f7:29:bf:99:cd:bb:43:14:12:7f:5a:76:
                    a9:cd:17:f6:c0:5d:e8:97:d9:53:7a:68:14:6b:9a:
                    4c:c0:c0:d6:fd:6d:85:82:f6:6d:09:3f:e0:5e:09:
                    98:7a:e3:24:f5:79:4a:36:a1:77:2b:87:49:06:7f:
                    67:03:4b:63:9a:a4:c6:e4:cb:71:62:6f:33:10:c3:
                    94:dd:14:e6:ac:cf:17:30:e2:06:5d:bb:22:25:14:
                    62:fb:c7:37:e5:b9:9b:41:3e:ed:eb:45:b8:81:d6:
                    77:cf:56:a5:72:e2:e2:ab:2a:ad:dd:4f:d1:7f:9c:
                    6c:2c:d1:60:0f:d9:3e:15:96:36:a0:dc:a9:1f:54:
                    31:e5:16:aa:bd:0b:99:0e:19:6a:7b:a3:a9:c6:fa:
                    1f:c3:6a:6d:d8:a1:de:b9:1b:54:de:05:ae:0c:ce:
                    b5:fa:b2:57:07:b9:38:1c:3b:1d:5a:e4:3d:43:37:
                    3d:11:f6:63:61:0d:95:76:91:b1:04:65:6b:55:e2:
                    13:a4:08:de:84:9e:0e:54:4a:c7:25:50:8d:e7:5c:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3F:AA:FE:59:18:C5:6D:1B:7A:68:AC:DF:02:56:68:D8:91:21:2F
            X509v3 Authority Key Identifier:
                keyid:1B:07:54:9B:25:0C:FC:03:DD:AD:7B:54:44:3D:A8:38:89:18:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwdUmyUM_APdrXtURD2oOIkYEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18AC/D4BA3D9896CC11EF8EFCB849C4F9AE02/GwdUmyUM_APdrXtURD2oOIkYEco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:37:79:b1:1d:f2:fe:7d:4d:59:91:06:18:42:7f:e5:39:82:
         dd:5f:aa:c0:e3:13:b9:1c:98:47:ee:50:2e:a8:b5:cb:5e:82:
         a7:03:94:37:ef:4d:82:8f:e9:4d:aa:f3:d6:8d:a6:37:6e:c0:
         4f:9c:d1:12:ba:74:93:a7:df:8f:ab:f2:02:d3:4c:1f:02:b5:
         a0:54:b5:29:cb:dc:86:c8:32:a6:e4:05:63:60:53:63:17:dd:
         0a:20:94:7b:fd:44:82:79:f1:f1:ae:68:6f:06:33:44:57:3d:
         5a:be:24:28:03:0e:66:bc:f6:a2:8f:6d:6e:a3:08:be:29:54:
         2d:17:1b:4c:58:0d:0e:11:38:19:63:a8:22:4e:bb:e8:b0:59:
         37:77:8d:a2:23:73:43:75:94:77:87:78:a8:ae:0a:6a:3a:c9:
         f9:89:45:f9:40:35:6d:a0:72:1b:23:d4:3c:eb:69:f0:39:f9:
         b1:2b:0f:79:6b:a6:8c:12:67:e4:57:ec:de:31:4e:b9:d1:81:
         3e:4f:c1:9d:67:77:bb:bf:e1:71:7e:4e:e0:b3:ce:0b:6d:a1:
         c5:72:73:0d:e5:d0:e6:57:15:cd:c2:85:78:0a:0f:72:12:af:
         81:b0:6c:2e:05:84:06:fd:4f:46:e5:79:f8:42:eb:33:9e:e8:
         12:fa:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:40:36 2026 by rpki-client