Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
File:                     GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json)
Hash identifier:          EyWwUGj2J5Aozq8TdRj5FAxiKuw6XkUqdMIGzM7mML0=
Subject key identifier:   D9:7A:3D:AF:BA:FD:BC:78:59:A0:50:B1:1D:53:00:3D:C6:E7:25:62
Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
Certificate issuer:       /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Certificate serial:       049D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
Manifest number:          0495
Signing time:             Wed 19 Aug 2026 00:20:16 +0000
Manifest this update:     Wed 19 Aug 2026 00:20:15 +0000
Manifest next update:     Wed 26 Aug 2026 00:20:15 +0000
Files and hashes:         1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: 0oqrMANw9yLsmwvl680KN7TB+8+YrDeRd7TVGn+ewTY=)
                          2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 3v0l+mNUK1QMbnnyeVFXpatXq2cbTwunHprjgz1Y/Vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
                          rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181 (0x49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
        Validity
            Not Before: Aug 19 00:20:15 2026 GMT
            Not After : Aug 26 00:20:15 2026 GMT
        Subject: CN=6a84f6c0-feb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:35:28:87:74:a2:ac:bf:5e:45:5d:20:c3:
                    25:e9:cf:27:ec:2f:ac:53:ef:1d:9a:23:ba:af:bd:
                    61:48:4a:27:59:04:72:ca:e2:3a:04:19:b5:fe:a9:
                    1b:3d:6d:63:e9:5b:c9:01:bf:cb:4e:9c:31:62:e0:
                    63:36:e5:0a:6f:0f:20:10:c0:90:05:8c:86:fa:ae:
                    10:17:9b:99:4c:2b:7f:9c:f3:ae:66:f1:8b:f3:48:
                    94:41:48:3d:ce:5f:b7:e1:f7:3e:09:f2:0a:57:b2:
                    a1:97:a2:c7:ce:f5:ca:ce:94:41:04:7b:7b:e1:51:
                    d4:ba:ef:85:31:63:49:c6:a6:b1:0a:6e:0e:54:d3:
                    2e:9d:82:04:65:84:03:57:d1:dd:a9:53:3a:ee:61:
                    01:9a:9a:dc:03:ce:7e:6d:20:1a:50:5b:f2:52:ae:
                    0a:3b:94:b7:ba:c9:1a:51:ae:a7:f3:4d:bf:05:2e:
                    55:6c:54:64:36:c2:ce:c5:c6:6c:13:53:14:33:96:
                    ce:86:07:97:0e:a2:f6:9b:b5:25:3e:e8:e6:11:47:
                    51:82:a9:ac:a9:0b:3e:d5:38:c4:1a:b9:8b:1a:83:
                    1f:6d:bb:f8:ea:87:0b:cb:3b:49:21:0e:d7:cf:97:
                    43:d9:d6:10:bd:8c:e8:55:f5:03:17:27:e4:97:aa:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7A:3D:AF:BA:FD:BC:78:59:A0:50:B1:1D:53:00:3D:C6:E7:25:62
            X509v3 Authority Key Identifier:
                keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:11:e5:be:02:d2:61:d2:2b:e1:57:8a:bd:b5:2b:b7:03:
         af:96:12:a9:d2:94:8a:0a:b4:2e:ea:af:e3:ee:e9:ac:c8:b8:
         0d:c0:7d:33:48:7b:61:d4:92:55:f4:c4:5f:97:01:3e:ff:44:
         40:6b:c5:36:0b:61:12:0a:2e:95:4a:03:f2:bf:1a:05:97:ba:
         8a:cc:16:cc:08:cd:b1:c9:64:7c:6a:62:01:b6:3a:6e:01:88:
         64:c4:6a:78:23:97:35:e5:ff:e5:30:fe:a1:e9:69:ce:aa:b3:
         70:83:4b:7a:87:77:77:cf:7f:56:6d:c5:99:d6:8a:ed:af:2f:
         4d:91:10:7a:3c:b3:40:f9:05:93:e9:38:f9:42:b4:cd:22:4c:
         90:c9:07:3e:2e:61:b6:93:c3:b5:6e:9f:4e:e5:ec:5c:84:f7:
         0d:ac:68:4c:0e:e3:ce:c4:29:45:a9:68:fd:30:06:7d:eb:35:
         e7:34:32:2d:9a:53:33:9e:92:59:da:38:48:72:61:6a:1a:1c:
         f4:7f:c5:26:be:1d:d0:5f:5c:15:f1:c8:08:ad:3e:83:97:68:
         35:6d:c7:4c:5c:ac:50:ac:e1:5a:81:bd:73:b8:4c:4d:31:eb:
         0a:52:f3:dc:d1:a5:f0:a7:73:1b:13:92:a4:d2:43:3d:54:98:
         26:76:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:17 2026 by rpki-client