Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
File:                     GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json)
Hash identifier:          nSREoOWuh2gWiD6RPUgKte5lYANzakmJaWIZKlsD9s4=
Subject key identifier:   42:33:77:9D:93:A9:5E:92:E4:8E:7E:27:83:82:2F:56:36:FC:99:AB
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Certificate issuer:       /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial:       048B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
Manifest number:          0479
Signing time:             Thu 21 May 2026 00:12:50 +0000
Manifest this update:     Thu 21 May 2026 00:12:50 +0000
Manifest next update:     Thu 28 May 2026 00:12:50 +0000
Files and hashes:         1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: a+KwregWM+q5E+t1JO86xFWPAIQlQztEYKuiYxwofYs=)
                          2: 6DB9F0B0491911F1BE7DCD8A9C833773.roa (hash: g70kqKcQRF45XZyZmEG2xqQR/Ut/QH4FJUMA3s0GCEE=)
                          3: F1F4D35A43AF11F1A5D478AA97833773.roa (hash: VI3eeJQdt+jfEigHcau2uDPGNXCcOfzwKNM66WXgDf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
                          rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
        Validity
            Not Before: May 21 00:12:50 2026 GMT
            Not After : May 28 00:12:50 2026 GMT
        Subject: CN=6a0e4e02-f98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:ba:2e:4f:30:9d:7c:69:95:3c:6f:e6:65:
                    5d:b6:c0:35:bc:94:ca:52:90:33:23:df:51:5b:07:
                    61:dd:9d:b8:29:29:f9:08:b6:2a:a0:87:bc:70:01:
                    a1:27:80:b0:98:88:0c:e1:fe:54:6e:63:b8:6d:fa:
                    c2:a2:81:f2:9b:75:66:15:c7:e3:24:b8:11:ba:68:
                    2d:84:7f:c4:21:52:da:d3:7d:85:25:b8:24:2f:47:
                    b8:2c:c2:99:2f:a3:fe:5d:3f:43:51:2a:88:f7:f1:
                    57:0a:ea:93:84:26:dc:ac:84:b4:49:16:d6:7d:5f:
                    82:e6:61:17:0e:53:e4:d0:af:4c:41:ff:22:d1:6d:
                    f7:f5:78:fc:30:8d:0b:d3:0f:61:1d:30:2a:4e:8b:
                    58:1e:3d:ce:e8:ae:a8:ea:28:9d:cd:f3:da:3e:4b:
                    90:ce:00:30:e3:93:97:33:d4:80:ef:d3:00:ed:66:
                    3c:41:69:a7:a7:0e:58:33:7d:a5:7e:5c:77:1d:b8:
                    b5:31:16:cf:d6:6d:32:e2:83:c3:fe:b8:ed:f7:f6:
                    3a:a8:e0:4f:ae:a3:f6:17:af:db:15:12:28:78:31:
                    90:e6:83:26:46:b3:7c:0a:e1:07:6e:83:a0:13:8c:
                    aa:6a:d8:cf:80:ba:8d:6c:da:6e:4e:90:52:ee:d7:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:77:9D:93:A9:5E:92:E4:8E:7E:27:83:82:2F:56:36:FC:99:AB
            X509v3 Authority Key Identifier:
                keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f9:7d:ef:be:06:ba:e7:9a:e0:f0:f3:3a:d1:87:7f:83:ce:
         0f:39:e6:21:e8:2c:27:02:7d:0b:5d:e5:6a:ac:0f:b7:f3:4d:
         5e:cb:70:b2:fe:51:b7:3e:4b:01:52:49:1f:59:00:d6:d8:31:
         6e:b3:50:7a:c1:ab:be:3d:b0:88:8d:9f:ad:4e:0e:e0:83:19:
         5b:03:01:13:5e:0b:9b:75:f0:2c:df:a5:85:04:1e:dd:f3:d1:
         0d:2c:ff:f7:03:b0:f8:77:ef:6b:95:de:ee:7a:80:a8:59:fa:
         73:88:39:f9:32:45:f9:3a:6f:51:54:71:0d:87:d7:47:72:d7:
         38:57:81:05:26:ab:4c:36:ab:80:9d:97:5d:31:f6:45:96:30:
         31:45:f2:01:84:af:62:91:ea:67:b9:14:b0:c0:4c:f1:1e:24:
         2c:9b:9d:e3:1b:03:ee:18:5d:b5:5d:59:62:c5:98:50:03:22:
         8b:e2:46:72:2c:f4:2c:50:b9:9e:75:ed:c8:25:7f:de:84:36:
         24:31:ab:31:42:14:9e:67:27:e7:88:e8:9a:19:06:c7:02:19:
         2a:73:5d:ee:67:aa:19:d0:06:3c:39:63:41:4e:78:7c:97:e1:
         ad:23:ab:d6:91:6f:c6:28:5b:fe:56:da:d0:0c:68:1b:78:ce:
         3a:17:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:04 2026 by rpki-client