Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
File:                     GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json)
Hash identifier:          0Dp5NqYq/Izh88MJ3DPbmR7mEYD9jdoHgFyKOR7kmm8=
Subject key identifier:   D8:D4:3D:64:A5:D5:4D:86:7F:35:2C:D0:60:B4:00:FC:27:1B:A5:2E
Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
Certificate issuer:       /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
Manifest number:          0108
Signing time:             Mon 15 Jun 2026 06:11:01 +0000
Manifest this update:     Mon 15 Jun 2026 06:11:00 +0000
Manifest next update:     Mon 22 Jun 2026 06:11:00 +0000
Files and hashes:         1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: 4y1/ZoV/NCaSkDalqy3qhWrpmaPAMVQSrkN3kW9hN6o=)
                          2: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: vmkU+Wc2xpDQMgPam/mAe6kA8brCuJz9cHHqu3MmaNY=)
                          3: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: n/hyIjFqCJzOht5Ju7CI7zedjM3U4KBE15I93wtTvdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl
                          rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
        Validity
            Not Before: Jun 15 06:11:00 2026 GMT
            Not After : Jun 22 06:11:00 2026 GMT
        Subject: CN=6a2f9775-dae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:3b:cc:9e:9b:48:9e:4c:d2:89:3d:56:17:
                    9a:45:e5:c5:75:95:75:25:5e:14:b7:55:b0:f5:12:
                    12:82:60:2d:8e:80:78:04:96:f2:5f:cb:a0:0f:b6:
                    4d:88:9d:be:a0:ef:e3:ef:60:32:7f:ee:74:61:38:
                    71:f4:1b:b2:03:86:95:d8:46:d6:2c:36:bd:6e:90:
                    3b:ab:37:60:8f:37:5c:24:c4:a7:ae:5b:7b:07:4d:
                    b3:2a:28:76:0f:e4:03:e7:35:22:f5:06:f0:2c:7f:
                    8b:ea:fd:fa:d1:cd:8a:6a:e4:51:e1:37:30:07:e6:
                    ea:0c:66:02:92:2b:70:f6:f6:c8:af:cd:43:12:28:
                    fd:91:31:1c:1e:1d:41:70:0f:6f:78:99:8e:04:0e:
                    a6:11:e4:ca:47:51:aa:3b:02:de:3c:db:32:cf:7f:
                    c4:1d:ff:bd:61:ea:cb:e7:a2:8c:9c:4f:fe:e7:89:
                    20:7e:96:f7:33:84:a0:66:aa:5e:ed:00:c7:c3:86:
                    37:9e:0a:cb:98:5d:55:1c:b0:9a:20:ef:e8:25:18:
                    c4:a4:6a:cd:22:71:8e:59:87:59:29:33:c8:cc:89:
                    76:d8:7c:5b:54:46:24:56:c8:11:2f:9a:3c:a0:34:
                    35:b4:56:e3:4b:fe:33:04:01:2e:e4:85:d8:fb:da:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D4:3D:64:A5:D5:4D:86:7F:35:2C:D0:60:B4:00:FC:27:1B:A5:2E
            X509v3 Authority Key Identifier:
                keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b0:09:4d:98:11:9f:20:09:3d:2f:67:4e:12:b3:ca:5d:26:
         e1:3c:81:67:3e:60:d2:ce:47:16:d0:c8:14:e3:31:b0:f2:1c:
         1f:05:21:0e:8b:10:01:06:82:cd:8a:ae:72:38:34:84:9b:83:
         6e:aa:5e:b6:79:55:2c:69:7d:f0:ba:a4:f5:b5:15:7b:d4:4f:
         4f:1e:5f:00:58:ac:c6:0f:f0:8e:04:0c:fe:25:7a:bd:6b:02:
         6a:1f:61:0d:de:fb:48:66:66:d5:0b:d9:98:59:2c:b6:c5:4d:
         da:d9:01:36:6b:22:ad:40:e5:a1:2a:db:ec:0c:02:01:4e:fc:
         bc:58:ee:c4:b1:32:94:8d:f9:bc:8b:28:ae:5f:39:02:bf:2d:
         db:be:41:7a:11:a2:16:32:b0:eb:b7:5f:13:e9:fc:61:d3:a3:
         73:ca:a3:63:c0:d0:0b:d1:cb:6c:10:fc:79:dd:b9:1b:0c:dc:
         44:25:ca:ab:e0:6b:32:bc:fb:6f:6b:d4:1c:0d:90:f9:12:c8:
         d7:6d:ab:2c:87:49:da:08:a7:18:76:58:9b:c3:86:3d:0d:06:
         fc:59:59:cb:e9:b6:a4:a2:e6:25:ba:79:98:ba:70:67:c9:ed:
         6e:4d:53:0c:f9:e1:b4:5e:98:57:f0:df:ff:a8:64:3e:5d:29:
         9e:41:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:44:58 2026 by rpki-client