Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
File:                     GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json)
Hash identifier:          wsaEg5d3rUuFy2rklo2DNqrDnTaWIzdBPtsWS8lZdIE=
Subject key identifier:   BD:03:0D:50:16:CF:86:B7:7E:1F:38:24:40:D1:15:7B:CB:49:41:70
Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7
Certificate issuer:       /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
Manifest number:          01D2
Signing time:             Fri 17 Jul 2026 04:43:09 +0000
Manifest this update:     Fri 17 Jul 2026 04:43:09 +0000
Manifest next update:     Fri 24 Jul 2026 04:43:09 +0000
Files and hashes:         1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: 2qJT43UJamUi6K2zsYxGq2YE5sDhhRsCZG6JQipt5vw=)
                          2: 4427FBD87D5911F1B1AC9F497AA30FBC.roa (hash: tVI6K7v8cHDUvZSho2rzwKTdWnfHve3mMbqzsymvnyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl
                          rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7
        Validity
            Not Before: Jul 17 04:43:09 2026 GMT
            Not After : Jul 24 04:43:09 2026 GMT
        Subject: CN=6a59b2dd-6cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:e1:3f:cb:13:ea:17:56:40:23:17:fe:f9:
                    01:ae:1f:cb:c1:15:1c:32:7b:d9:66:89:5c:34:01:
                    5e:23:7b:32:17:19:1a:23:a2:bc:a4:8d:32:53:de:
                    7f:8c:fb:1d:d7:ba:bd:98:93:d3:7d:43:59:ed:09:
                    c5:ab:41:6c:82:eb:ca:19:6e:ba:b9:df:02:a7:b8:
                    70:bb:b8:31:29:bc:53:91:3a:b9:bb:a7:e1:04:ff:
                    05:42:90:7b:7a:19:9e:20:09:d1:bf:59:31:19:a3:
                    6d:6e:eb:58:47:71:a6:b8:33:4b:63:1c:2f:51:64:
                    7f:7f:58:a5:0d:40:7e:af:49:e5:66:7f:07:dc:42:
                    cd:52:b1:66:06:70:1e:ab:cd:07:39:18:f0:69:3c:
                    41:31:6f:94:fd:0d:a9:e6:30:48:7a:0d:dc:27:7e:
                    de:d5:97:65:38:ae:db:39:90:47:ec:f2:ae:a7:6b:
                    c6:8c:f8:12:3c:6c:69:ce:34:7a:26:3b:0a:41:7b:
                    56:19:5e:04:33:00:66:1b:84:42:bc:4f:fd:cb:33:
                    5e:34:91:69:e9:a9:e3:d3:e1:b0:2a:32:9a:ae:2d:
                    37:83:da:e8:58:25:14:b4:f9:89:fd:e1:aa:e0:65:
                    05:9e:98:16:33:a9:a1:ab:80:da:2f:ba:8d:28:e4:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:03:0D:50:16:CF:86:B7:7E:1F:38:24:40:D1:15:7B:CB:49:41:70
            X509v3 Authority Key Identifier:
                keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:aa:ef:5d:4a:19:d5:ae:26:ff:96:aa:2b:e1:13:f0:99:cd:
         1b:10:1d:db:85:69:78:31:02:8c:f6:87:c0:41:68:8f:5e:25:
         48:76:a7:ad:35:3b:4a:c5:2f:56:3a:05:ab:a9:9a:e7:7c:13:
         34:07:d9:92:5b:7f:ac:78:c3:05:05:6b:e8:f0:48:a0:c1:5f:
         53:c3:51:f9:1d:ae:c4:1d:b4:d4:0f:a6:bc:8c:6a:74:19:69:
         a7:40:83:8d:4f:e5:64:90:1e:76:0a:c0:0e:fd:e0:1d:30:1c:
         06:eb:3c:bb:d1:9d:d8:87:ff:9b:5c:55:bf:f4:28:3f:1a:f5:
         63:76:c3:e3:bd:68:9f:10:68:15:5e:7a:af:97:fd:d0:74:01:
         de:30:eb:2f:4a:04:ca:64:a3:5a:c5:60:c6:2f:df:61:1f:9f:
         22:4a:e4:f7:74:07:93:e7:27:81:74:29:1f:56:39:96:05:09:
         29:91:f3:67:6a:be:ae:26:bf:20:a8:f7:2c:ea:dd:71:0a:87:
         4a:dc:c5:6d:7c:eb:49:a7:dc:2c:78:6c:15:bc:68:af:fc:1e:
         4a:b9:e3:82:a2:d9:1a:c4:3e:03:7c:48:09:c9:a7:c7:53:d4:
         9a:e0:35:d9:e6:2d:21:f7:d7:7f:5c:4a:d4:0e:3e:4a:9a:4f:
         04:bd:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:20:55 2026 by rpki-client