Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
File:                     GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json)
Hash identifier:          AQeYEeC9PEpssxrKsCAJwB65RkS+0KnR/DREVsIEuOY=
Subject key identifier:   B8:8F:37:AB:E3:29:B0:2F:8F:D3:98:4E:E1:7E:4E:95:3D:4E:1D:66
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Certificate issuer:       /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial:       157C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
Manifest number:          1571
Signing time:             Wed 20 May 2026 16:46:30 +0000
Manifest this update:     Wed 20 May 2026 16:46:29 +0000
Manifest next update:     Wed 27 May 2026 16:46:29 +0000
Files and hashes:         1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: gaxTGXkEVVlBc6ReWesXOzg4CQjCRpPL31uvIB22/8M=)
                          2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: x7YXjzD8EFzf7N4rbQoqJB4eYFt5aSsAHJp7OOa/HsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
                          rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5500 (0x157c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
        Validity
            Not Before: May 20 16:46:29 2026 GMT
            Not After : May 27 16:46:29 2026 GMT
        Subject: CN=6a0de566-0378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:da:ac:66:7e:63:20:a8:12:a6:6c:84:40:94:
                    65:01:b5:f2:3f:ac:dc:fc:85:e4:e6:d4:f7:d4:5f:
                    e3:78:ee:96:14:b8:48:b3:f8:bb:6b:45:f0:57:1b:
                    f9:07:13:6c:a1:53:7f:2f:53:b7:e5:82:c7:d3:4a:
                    85:5f:30:ee:f1:50:ff:ca:98:33:29:7f:8a:10:34:
                    46:be:4c:05:ab:f9:e5:48:2c:ac:f8:f4:69:84:32:
                    73:c5:8f:a6:b8:eb:c6:8a:8e:6b:15:8c:c2:56:30:
                    f7:25:33:f6:a5:b8:cf:50:f9:c8:fd:94:25:0f:a7:
                    86:d7:aa:36:ce:87:20:02:6f:b8:68:12:f8:7f:f6:
                    03:47:fb:9b:bc:2e:96:4a:87:9e:9c:5a:f7:aa:9f:
                    77:fd:8a:7c:06:35:5f:bb:8b:ee:88:15:54:c4:00:
                    6c:6d:3d:3b:bf:0b:c3:f0:c0:3d:35:e0:24:02:8d:
                    76:18:5f:35:97:32:0b:18:ca:ca:4e:94:1f:54:ba:
                    2c:e9:62:d7:29:eb:cd:b4:7d:58:9e:c9:ca:ca:e0:
                    93:27:a5:89:a2:c4:ae:c9:6f:80:e6:13:e0:68:98:
                    7a:fd:a1:6c:3a:13:ff:40:b2:06:38:84:91:e2:27:
                    7e:fd:c2:2d:6a:4d:b6:bf:14:05:ed:2e:fa:2f:29:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8F:37:AB:E3:29:B0:2F:8F:D3:98:4E:E1:7E:4E:95:3D:4E:1D:66
            X509v3 Authority Key Identifier:
                keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:a5:bf:5b:46:ec:05:cd:27:19:15:52:e1:08:c5:78:cf:
         d2:d3:a1:a4:c6:64:28:54:87:a4:e2:15:26:ce:28:77:65:ae:
         fa:b1:84:4d:44:8f:75:5c:9a:a0:0f:c2:93:dd:87:a8:d9:be:
         90:61:10:61:bc:c7:c0:6d:bb:de:f8:e8:5e:d3:c9:c6:09:04:
         14:54:03:6b:78:59:73:85:ab:af:fd:f3:31:f0:f7:8a:b5:39:
         3e:39:cc:7b:ea:ae:f6:4d:88:50:ab:38:4f:0f:c7:b8:1f:89:
         e9:9d:64:44:bf:18:57:6e:07:ea:81:33:44:9d:78:6f:2f:80:
         76:98:b4:8e:21:86:78:58:1a:b5:55:3f:cc:84:e1:66:7d:17:
         a1:d4:8d:de:e3:8f:f0:6a:ef:bf:ce:9b:0c:a4:f2:a8:39:c8:
         98:c5:3d:5c:56:5b:5f:2f:04:7f:15:97:94:ad:ca:e4:74:3b:
         4c:2e:f0:99:9d:da:b8:42:48:fd:26:9b:59:5d:6b:ee:4f:d9:
         c1:9a:fb:c8:48:ef:20:ad:71:39:6d:00:b3:f0:26:31:bb:1f:
         71:7c:97:a8:d7:51:4c:d2:fb:e4:04:7e:7f:8e:99:9c:a1:5f:
         3f:0d:50:b9:21:f6:3d:3e:df:be:31:80:9f:50:84:72:51:9e:
         e9:d0:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:05 2026 by rpki-client