Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
File:                     GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json)
Hash identifier:          w3avEISUWaZw5aGSXLS/jS5KlFv8a4QecIrXDicSvBk=
Subject key identifier:   D4:2F:29:1A:96:69:73:F8:8A:0E:92:6F:CF:81:C9:40:DB:66:2E:2C
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Certificate issuer:       /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
Manifest number:          01F7
Signing time:             Fri 15 May 2026 03:14:13 +0000
Manifest this update:     Fri 15 May 2026 03:14:12 +0000
Manifest next update:     Fri 22 May 2026 03:14:12 +0000
Files and hashes:         1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: 2eQckH69M144nPd89BG+ouJW0aI/Dc8Sdmrw3hryEX4=)
                          2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: A4DYwCMJtHqL8FOrLyHdgaT304qseoK7Vf9HSfcF82c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
                          rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 03:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
        Validity
            Not Before: May 15 03:14:12 2026 GMT
            Not After : May 22 03:14:12 2026 GMT
        Subject: CN=6a068f84-2633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:af:5b:c3:b7:4d:c4:21:0c:ab:7b:a2:58:
                    85:e7:56:a1:8b:5e:96:a9:72:17:66:92:1c:02:c0:
                    3c:da:63:a9:42:6b:73:b7:ac:13:0e:f1:43:58:fe:
                    ee:2b:9f:00:c9:ba:0d:a4:69:02:4f:36:8d:31:1e:
                    60:39:a8:40:60:bc:d4:ea:53:4e:e5:7e:c5:34:0b:
                    8b:82:fc:21:77:21:83:93:04:0e:dd:c8:91:60:a3:
                    93:39:a1:93:21:57:b7:0c:9d:73:33:3e:d6:f0:f6:
                    36:f4:b9:d2:27:5f:a7:da:e3:b9:36:a5:35:fb:28:
                    ba:83:25:86:39:1b:20:f3:e6:b8:7d:6d:70:8e:70:
                    64:3f:ff:39:cf:3b:e3:10:4f:8c:d0:f3:dc:6c:c9:
                    53:f3:5e:a0:21:d6:7c:ba:83:7a:3d:48:ca:73:20:
                    d0:17:90:a4:a9:db:34:4f:fb:d8:37:91:cc:d1:9c:
                    76:3f:1d:88:ec:9f:81:1b:37:c2:37:76:75:11:25:
                    cf:31:ec:73:c0:c8:82:42:10:c6:9c:3e:38:a2:fd:
                    3a:a5:1d:3c:4a:f9:ec:2f:7c:1c:65:38:2b:bf:79:
                    85:87:f5:be:cb:73:a3:23:f5:c6:fe:31:4a:20:cd:
                    e7:ed:89:b5:bf:ff:48:79:95:c1:89:ee:ef:dd:f4:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2F:29:1A:96:69:73:F8:8A:0E:92:6F:CF:81:C9:40:DB:66:2E:2C
            X509v3 Authority Key Identifier:
                keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:77:c6:9f:8f:a0:34:89:df:43:c1:d9:96:b6:4f:44:2a:e6:
         06:86:40:29:3b:1f:1a:63:d7:65:80:2d:c0:09:bf:d3:6d:a7:
         83:9c:a4:8a:0e:59:e9:0b:b6:52:b6:7d:de:9e:c0:49:32:ee:
         f5:39:b4:55:79:d8:3e:31:cc:9b:49:01:fe:3d:df:80:57:18:
         88:3c:a5:58:6d:9d:23:5a:92:03:84:d4:10:bd:e1:01:15:fb:
         80:4e:33:cf:40:23:dd:4a:80:e3:c6:de:b8:ca:93:f9:60:7f:
         7a:fb:38:65:07:37:cd:74:5a:c0:73:fd:2e:5b:81:ea:63:18:
         17:91:27:90:6f:84:18:04:c2:36:23:f2:ba:8d:72:af:bc:d5:
         d8:96:24:4f:6f:b3:e3:ed:8b:7f:06:7f:9b:ec:f0:43:ee:be:
         62:18:15:3f:c4:69:aa:97:6f:8c:83:39:0c:42:e3:0d:cf:66:
         90:ed:6b:b6:75:ef:63:3c:1d:0f:24:66:f8:f3:ab:2d:7a:52:
         dd:bc:5b:26:31:ba:ae:65:49:89:01:fb:b1:ee:97:b8:39:2a:
         b5:5f:ad:b0:95:54:c3:5a:13:91:e6:90:a7:1e:44:4e:67:2c:
         8b:78:52:2d:ab:a8:60:be:b6:60:7b:e2:c8:53:03:1f:9f:13:
         b9:23:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 05:11:18 2026 by rpki-client