Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          GEC9WUKBpz1n3IR4kJklPMAvhkNsU5VgHSwk60SxCVo=
Subject key identifier:   D4:99:FB:B2:D3:EB:96:BC:3B:0B:3E:62:2D:91:69:AA:F7:2D:6B:AE
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       113B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          1119
Signing time:             Fri 22 May 2026 17:17:03 +0000
Manifest this update:     Fri 22 May 2026 17:17:02 +0000
Manifest next update:     Fri 29 May 2026 17:17:02 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: 6esu7lAAFhHAu0Ye1+4GkH50BX3xfGYJY0CfFw7r/Lk=)
                          2: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: zF6U2ehdoF8Lg9asPnRlMeYeqV16C4gI7kUBzdtRdNU=)
                          3: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: 0/3h8qrF1hoUC7tmh4rWpKK0V8YfkgxImbH6h+ZlRSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4411 (0x113b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: May 22 17:17:02 2026 GMT
            Not After : May 29 17:17:02 2026 GMT
        Subject: CN=6a108f8e-c27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ed:b7:91:78:db:95:b5:61:c5:bc:31:af:17:
                    27:c4:87:2f:79:b6:89:da:3e:e6:f7:d2:69:ef:c5:
                    f0:9c:37:03:f4:68:f4:0d:5b:88:fc:03:19:92:d7:
                    99:a0:9e:89:3b:14:ec:0c:e4:a0:d3:33:2c:c9:92:
                    7a:f3:6d:52:69:2a:5c:09:c8:6d:00:8d:8d:90:b8:
                    36:48:5b:74:8e:08:ca:9b:e7:c3:51:c9:5d:6a:e2:
                    35:82:d4:98:be:af:57:51:28:c5:56:7e:fe:94:69:
                    10:f4:d9:9b:ac:fb:cb:1c:cc:d3:5e:95:05:cf:9e:
                    3c:42:88:40:d5:53:ab:b1:cb:e5:ef:2a:fb:e7:ea:
                    ac:36:71:af:67:d3:a0:fd:2c:d6:9a:d5:0b:19:18:
                    96:6d:ff:33:a4:0c:a2:98:63:0f:25:a3:75:48:2f:
                    61:e1:81:b3:e3:87:a3:05:06:a8:e0:39:fb:3b:bc:
                    2e:7e:a3:62:9c:80:ae:12:66:8c:93:6e:b3:06:3b:
                    30:f4:6f:12:15:e4:5a:31:87:fd:97:54:cd:ca:ba:
                    b5:4b:31:ec:06:6e:15:8f:1b:e4:ee:06:bd:05:3d:
                    3e:88:a5:26:3f:08:c3:89:20:03:2a:16:10:49:b8:
                    a4:a5:ab:98:4e:6e:c1:7d:00:cc:f1:d4:1c:bc:c7:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:FB:B2:D3:EB:96:BC:3B:0B:3E:62:2D:91:69:AA:F7:2D:6B:AE
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d9:3e:eb:98:fe:a9:0b:8d:02:39:e6:f7:ef:cd:f0:77:d2:
         30:04:98:19:97:98:7c:4e:69:de:7b:67:f1:90:07:b3:3e:dc:
         7e:6a:17:9f:a0:e9:9c:9c:41:53:d1:07:12:6f:e1:7b:80:12:
         fa:11:0b:61:ec:4b:bd:f5:31:2e:b6:14:d8:38:9c:12:02:49:
         58:85:83:f4:70:b7:0f:5e:c1:9b:7a:b5:4d:15:b6:62:2f:31:
         86:20:68:08:1c:93:98:5f:c8:b0:3b:8a:64:65:e9:04:d0:f4:
         33:28:b4:5a:14:c4:19:8c:8d:2f:ad:d2:0b:a2:7f:fe:19:5c:
         df:c9:3f:2c:59:c7:a2:9e:5a:fc:d5:50:9f:c4:f2:3d:ad:52:
         f7:d6:1f:47:80:5a:1b:2e:0d:55:55:7b:de:51:9c:3b:d4:60:
         8e:57:c5:48:8c:e2:7b:e5:ac:c8:b1:a3:0a:ca:fb:6b:31:0d:
         4c:f8:35:c7:69:6d:8f:ad:ea:0e:41:88:9b:0d:23:70:72:dd:
         51:e9:30:05:1a:b4:ce:76:92:76:56:16:cd:89:df:fa:02:03:
         1f:69:53:56:15:43:e5:dc:54:81:f3:82:e9:31:18:3f:49:7b:
         c9:af:c6:6d:9b:19:99:2a:9f:fd:73:47:74:c7:a9:f2:d4:15:
         4d:b0:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:47:34 2026 by rpki-client