Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
File:                     G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json)
Hash identifier:          AW9yyBI/DdOqcTGUKqTETQn8sDlzsxebcxJUM/aTW+w=
Subject key identifier:   C9:31:3D:4D:AC:F1:78:23:E3:6E:AB:B0:F5:B6:A1:36:C2:66:6B:F2
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Certificate issuer:       /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial:       09ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
Manifest number:          1A72
Signing time:             Wed 20 May 2026 17:21:09 +0000
Manifest this update:     Wed 20 May 2026 17:21:08 +0000
Manifest next update:     Wed 27 May 2026 17:21:08 +0000
Files and hashes:         1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: eXnDXxSiAWSXoQJhwJNih1Vz6l95TjYbSF3Jr5b29Dk=)
                          2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: o3juqhlkzvoSTkKnkj2B9rqpg4vlEounEHggkPD3cB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
                          rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2541 (0x9ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
        Validity
            Not Before: May 20 17:21:08 2026 GMT
            Not After : May 27 17:21:08 2026 GMT
        Subject: CN=6a0ded85-a291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:0a:50:cc:aa:f2:bc:2a:17:e6:28:66:f7:
                    31:a8:36:84:f0:64:8c:27:a2:0c:7e:05:88:04:fe:
                    d7:bd:1d:4b:0d:51:6d:59:0c:ee:5b:4b:b0:a7:05:
                    e9:03:8b:cb:5f:c9:c2:7f:bb:ad:4b:ec:58:57:30:
                    83:96:ff:a0:53:30:cc:05:d2:5d:bd:3e:5d:bb:41:
                    91:c1:dd:5a:91:18:97:0e:23:94:3e:f1:27:a4:67:
                    d6:fb:cf:2f:d0:fa:c3:ce:42:59:6e:ca:ce:5c:5f:
                    72:85:e4:bf:fe:4f:ff:f9:ce:3e:b2:5c:a5:71:9b:
                    f5:69:1c:a0:cf:08:8c:6d:ea:16:02:3f:c8:8d:11:
                    22:b7:7d:c6:c3:ee:91:48:f2:de:5d:f4:75:19:32:
                    a0:51:a6:9e:30:77:34:00:ec:7c:e1:ff:b4:3d:07:
                    37:d0:67:ef:71:48:74:5d:56:fa:3f:10:30:79:96:
                    c6:15:26:21:92:63:37:5f:65:40:96:6b:8a:02:49:
                    02:66:b0:0f:7b:46:96:0d:2f:d2:2a:42:4f:4e:f8:
                    c1:1c:e2:68:0d:02:23:91:54:74:0f:91:1e:b9:68:
                    a8:a3:05:8f:7a:9f:aa:3f:50:ea:28:ed:1d:19:00:
                    22:a8:9c:00:5b:3e:7b:a6:78:33:c7:28:a8:b8:85:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:31:3D:4D:AC:F1:78:23:E3:6E:AB:B0:F5:B6:A1:36:C2:66:6B:F2
            X509v3 Authority Key Identifier:
                keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:05:41:83:70:de:6f:f9:60:8b:b2:5a:61:8f:b0:71:4c:41:
         5c:0b:6d:01:58:de:96:d4:f8:de:33:b8:27:6b:78:63:c1:e0:
         3b:cf:fc:7d:56:62:50:16:71:13:84:67:67:70:57:c7:de:40:
         86:27:95:f1:44:39:00:24:61:42:98:66:34:16:fe:2b:38:97:
         b5:f2:8b:08:58:23:5e:6a:2c:5e:cf:69:a9:39:20:b9:f1:38:
         12:0c:3e:01:b3:6b:d1:00:86:b2:f9:71:ea:49:42:b8:b3:29:
         27:16:86:13:dc:a5:69:95:90:76:de:36:d5:7c:e2:0b:c8:6f:
         e7:67:a3:e1:6e:68:b5:68:93:44:8f:d6:f6:5e:86:08:89:f2:
         68:c8:64:ac:e4:6d:6a:2c:8f:5f:79:71:d3:04:11:65:a8:12:
         e9:63:d9:5d:1b:0e:d9:a4:08:bf:7b:40:13:4a:4f:04:ba:42:
         f7:b7:42:4c:22:91:03:bc:d6:b1:5b:16:ae:9f:63:24:50:73:
         8d:00:ef:9e:d9:14:02:88:dd:ba:1f:83:3c:84:aa:45:62:01:
         50:03:9f:1e:bb:45:a9:d9:7f:e0:42:63:92:17:a3:14:f3:71:
         25:e2:5a:17:57:e7:8a:21:e0:f4:bc:c4:07:e4:2e:29:6a:97:
         55:e6:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:58 2026 by rpki-client