Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
File:                     GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft (raw, json)
Hash identifier:          iAJ+YHZjQmRNREZgQbpIMnHzrXP+6RygGyYf+Ra04ns=
Subject key identifier:   2B:07:54:2C:A5:01:13:49:82:0D:50:51:3E:D8:59:7D:6A:6D:BA:24
Authority key identifier: 18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F
Certificate issuer:       /CN=A9126BDE/serialNumber=1899AA6415670533224938FAA6655296183E438F
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
Manifest number:          5E
Signing time:             Mon 01 Jun 2026 08:54:10 +0000
Manifest this update:     Mon 01 Jun 2026 08:54:10 +0000
Manifest next update:     Mon 08 Jun 2026 08:54:10 +0000
Files and hashes:         1: GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl (hash: Fj8y7LCt3ogna5DeidKFKaCfjRv8UzjRfnWypdQO6cI=)
                          2: 5325F364D3FF11F09B7E5281C4F9AE02.roa (hash: 0DoVxQ7M0n3cZaqCMc5G8GkmP8gnmF47PhLipr8RTHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=1899AA6415670533224938FAA6655296183E438F
        Validity
            Not Before: Jun  1 08:54:10 2026 GMT
            Not After : Jun  8 08:54:10 2026 GMT
        Subject: CN=6a1d48b2-5846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:00:05:29:37:95:27:14:c1:47:69:2d:fe:
                    91:cc:c6:1a:5c:9c:5b:8c:00:53:28:ce:88:cb:9c:
                    2c:12:94:1d:29:bc:cd:c8:40:8e:c9:6b:e4:e5:ab:
                    79:cc:01:a4:5d:d4:a8:c7:8a:67:09:80:58:5e:80:
                    18:85:bf:24:49:e3:1d:a7:6c:47:09:67:28:1d:e8:
                    ae:21:ff:99:b3:f6:5d:e1:7b:a7:30:63:86:e3:9b:
                    68:72:b5:13:80:1d:8a:45:a9:e2:59:6b:92:8e:79:
                    e5:a7:63:4a:07:90:da:2c:1c:8c:7e:b9:1a:b3:34:
                    21:38:2f:88:70:c2:99:ad:6b:ee:10:ad:03:55:38:
                    b2:d9:c3:7c:79:69:f7:0f:a7:44:9c:33:59:85:d0:
                    ce:f1:2b:d4:c4:0d:f0:84:73:c3:37:00:e6:91:3d:
                    35:a5:97:a0:61:98:95:2d:76:a7:6a:f8:34:4a:f8:
                    47:52:ff:e3:26:05:03:cd:58:45:7d:36:2c:a6:93:
                    00:d3:8e:02:8e:0c:21:e7:2e:fa:fe:fb:dd:45:0c:
                    25:d5:e6:3c:94:85:dc:88:66:3e:7c:89:b7:58:b8:
                    d3:ca:07:22:e0:93:03:48:45:8d:cd:bc:b3:23:c2:
                    44:74:3e:a6:66:07:24:60:d6:4d:04:d6:5e:a2:91:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:07:54:2C:A5:01:13:49:82:0D:50:51:3E:D8:59:7D:6A:6D:BA:24
            X509v3 Authority Key Identifier:
                keyid:18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:70:b3:ae:ce:97:0b:bb:00:88:44:10:c0:bd:d7:ab:06:69:
         3c:4c:cf:cb:08:1d:1a:d3:33:b9:bb:c8:ce:55:cf:22:cc:ea:
         f2:a7:76:ea:f7:c0:14:80:7d:28:7d:86:aa:ca:ea:f3:e0:70:
         a9:db:43:5b:bc:dd:ea:c9:1b:a7:e7:fc:da:23:e7:d3:27:d5:
         9b:6a:46:b6:2d:24:57:98:95:7a:20:8e:8d:6f:5f:f4:81:a3:
         fa:a2:4b:a8:fc:01:1d:dd:d1:42:d6:4d:4f:54:55:0c:85:a2:
         5e:19:68:6a:a1:c7:15:86:b1:89:d2:34:f7:4c:fd:24:5e:0f:
         0d:32:b5:42:02:85:35:47:b8:17:6f:37:52:4f:72:b4:31:5e:
         f1:a0:97:e5:a7:00:1d:78:db:f5:9a:f4:87:26:23:ba:4b:d7:
         b1:4c:5c:61:54:56:68:25:a1:fb:c9:2c:3f:89:49:f6:c2:7c:
         44:1a:4d:0d:d7:51:45:b5:a6:29:d0:2b:42:ea:11:6b:8c:87:
         e1:eb:b5:26:15:a3:9b:aa:37:64:46:e3:c5:66:d6:b6:d2:c2:
         71:9d:58:dc:f0:22:6a:e1:31:fd:58:85:f1:4f:48:59:ea:16:
         7e:87:f8:5a:a5:81:ba:db:2e:ed:2f:76:62:ac:ab:f1:fd:61:
         13:1e:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:10 2026 by rpki-client