Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
File:                     GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json)
Hash identifier:          +r9cqBgHdLHzoIVnbgj2/C5pUG1yUhSrPLR4a0ucGvc=
Subject key identifier:   A9:6E:BE:B3:82:61:B1:85:C5:62:53:27:DC:A3:3F:B1:12:8A:E2:BD
Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60
Certificate issuer:       /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
Certificate serial:       05AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
Manifest number:          05A2
Signing time:             Sun 10 May 2026 23:14:50 +0000
Manifest this update:     Sun 10 May 2026 23:14:50 +0000
Manifest next update:     Sun 17 May 2026 23:14:50 +0000
Files and hashes:         1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: 5nXV7PXuTzmOll37PExLh7vQ4FivhJZmid+9XTsPY/I=)
                          2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: pnyxT9fzqZ2JZTKKceDF98fPU2nq8VujgoO8G+Dnb0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl
                          rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
        Validity
            Not Before: May 10 23:14:50 2026 GMT
            Not After : May 17 23:14:50 2026 GMT
        Subject: CN=6a01116a-6dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2d:c1:ee:92:36:79:d0:3d:f5:a0:51:29:c6:
                    7b:af:6c:6b:84:c7:bd:c0:0e:54:ac:60:77:1c:4e:
                    40:61:c2:ed:c3:5d:11:81:3b:18:76:c5:96:1a:c4:
                    42:fa:f5:0e:2c:b5:6f:bc:33:c9:4a:25:40:93:f1:
                    cb:53:81:c3:1f:4d:52:f0:c5:74:e3:5b:d1:51:b9:
                    82:a7:42:47:f7:70:85:a7:96:f2:e0:1b:27:c8:e9:
                    c2:e1:e9:c6:c2:ff:b5:b0:d8:e0:1c:cd:6f:dc:06:
                    99:5e:22:63:a0:20:07:28:65:38:fb:07:02:93:82:
                    fe:b9:44:b7:73:0f:61:9e:0e:92:7f:d9:97:1d:64:
                    5c:eb:bf:b8:c4:f9:42:8b:6b:81:64:01:d6:78:f8:
                    1d:a9:2f:29:e4:f1:15:fe:11:ef:24:c7:04:d3:7f:
                    56:79:d8:07:20:e0:0c:50:21:34:4a:19:27:ba:35:
                    4c:17:92:1d:92:86:78:1d:cb:53:4a:d5:56:9c:3b:
                    69:b9:3d:a5:86:72:55:ed:85:7f:af:ff:46:84:be:
                    a2:e0:88:74:4a:36:1e:65:e8:c3:9d:24:1c:8d:81:
                    0c:68:43:bc:e5:56:36:ae:fa:a2:12:2e:f4:ce:34:
                    36:18:64:3b:52:ed:d0:c9:46:5d:2a:a1:9c:e2:30:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6E:BE:B3:82:61:B1:85:C5:62:53:27:DC:A3:3F:B1:12:8A:E2:BD
            X509v3 Authority Key Identifier:
                keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a9:72:d1:20:a5:fc:f7:8b:67:3e:55:34:66:99:b4:e4:58:
         e6:47:48:40:fd:0e:83:53:27:98:ba:00:61:35:3d:a1:40:63:
         be:d8:a4:73:d2:99:50:81:dd:99:00:02:2e:df:84:48:69:00:
         2c:1b:8c:48:27:62:c5:b8:fc:20:6e:2b:4b:b3:fc:7f:f1:81:
         4e:92:92:d6:d7:56:43:21:2c:10:5e:7a:d7:af:c3:9d:e2:21:
         8d:64:33:8a:ae:36:70:a5:7f:04:ad:10:8c:0f:54:3b:1a:99:
         20:89:b5:2f:20:fd:bf:77:4c:4c:ba:f1:f6:0f:fa:87:f4:3b:
         8b:c0:ec:31:8c:e0:5c:d3:f2:b8:b5:7b:f3:02:c0:d1:cf:a6:
         7f:e1:98:5c:4b:f7:a1:ed:c7:34:5f:c2:bc:0f:36:32:77:bf:
         a2:d2:4e:97:3f:26:9c:01:43:f8:d0:fe:93:b4:8f:6f:c8:52:
         1e:95:8a:a6:0d:53:38:d9:63:ca:bd:dd:9b:5a:f5:f8:19:88:
         ca:0a:2c:1f:55:9e:c1:5c:55:5a:c5:42:dd:fa:0a:24:91:1c:
         a8:c5:b4:07:19:43:49:b8:f2:52:47:e7:20:64:6a:3a:44:2a:
         6e:bb:c3:8d:63:32:ef:8a:1f:59:fe:96:86:4b:51:05:ce:88:
         87:58:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:40:31 2026 by rpki-client