Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File:                     GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier:          q7aNmm5MfYSxycfjXJAdib7Uiuj2291BQu0sKPHafcc=
Subject key identifier:   FE:22:95:5C:49:D3:74:92:4F:A1:9F:CB:52:0B:34:9F:64:EA:9F:93
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer:       /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial:       0BA8
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number:          0BA8
Signing time:             Mon 04 May 2026 15:35:38 +0000
Manifest this update:     Mon 04 May 2026 15:35:37 +0000
Manifest next update:     Mon 11 May 2026 15:35:37 +0000
Files and hashes:         1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: fqrW1ZkppBmGCDn3lFUy6wNLeAeP4ibBzOwwazGLt/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2984 (0xba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
        Validity
            Not Before: May  4 15:35:37 2026 GMT
            Not After : May 11 15:35:37 2026 GMT
        Subject: CN=69f8bcc9-1d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:b6:f3:dc:fa:2d:d8:6b:3e:fd:4f:d7:45:
                    ab:95:d9:bf:58:a1:9d:0b:b3:14:5a:b5:fa:15:a4:
                    42:08:71:07:75:32:c6:08:90:77:0f:a8:71:c7:a2:
                    88:c4:e1:46:6b:39:8e:a7:08:0c:0e:15:b2:9f:d9:
                    c6:03:d8:3a:6c:e2:67:bd:5c:0a:be:cd:8c:ee:6a:
                    94:c8:64:3e:a1:49:ed:c2:28:20:56:94:3d:89:e1:
                    68:19:e5:3d:9f:33:07:58:30:16:0a:28:61:62:cd:
                    ee:89:26:83:32:22:41:f5:c3:3d:19:67:5e:00:3a:
                    05:0d:f6:4c:3e:03:68:cd:d4:43:4c:68:37:16:29:
                    d9:ab:d7:d5:c1:49:36:a6:1d:62:cc:4f:09:76:46:
                    01:74:55:86:d4:e6:b6:a5:6d:c8:27:5d:ed:dc:0e:
                    45:f8:f4:c1:60:e5:a0:b3:ec:2f:28:03:5f:95:45:
                    72:71:64:9e:dd:54:ce:d8:09:15:cc:46:98:e0:fa:
                    5a:c3:e2:59:ac:49:a3:b7:76:6c:26:6e:0d:8f:ef:
                    a0:29:71:de:45:4e:d0:a3:5e:44:be:b7:2d:df:72:
                    04:62:25:a2:a9:ed:68:40:dc:94:0c:d4:9b:fc:49:
                    0d:f3:51:c1:90:b1:c4:dc:f0:8a:5d:6f:ba:9c:79:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:95:5C:49:D3:74:92:4F:A1:9F:CB:52:0B:34:9F:64:EA:9F:93
            X509v3 Authority Key Identifier:
                keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:b9:df:a3:06:49:2c:4d:0e:41:3d:79:29:e3:3e:7a:74:
         b1:36:96:46:4a:ed:56:64:46:f0:df:b8:1c:ea:06:31:d3:05:
         0b:e7:3b:46:68:b7:06:7c:82:38:a6:ba:20:6f:4c:b1:14:a6:
         ec:54:fc:ec:d2:eb:1d:7b:3a:78:6b:11:38:98:cf:df:cf:22:
         b9:97:9c:b6:ea:fb:21:a5:9a:83:e9:f4:cd:9d:1c:4d:ab:c3:
         d0:3b:af:66:6c:b6:ce:5f:98:5a:d2:ba:ac:41:32:1e:66:a6:
         fb:f2:f3:08:78:7e:9d:4c:22:9b:34:68:e6:42:a2:52:dc:47:
         3c:1c:6c:ff:ea:c4:93:6f:ba:ea:9f:fd:72:21:76:31:99:5d:
         1b:16:77:25:17:b8:42:8b:45:ba:3d:9e:e1:07:e7:45:1e:01:
         84:b6:e6:94:a1:66:83:85:3b:9d:1d:f1:7d:5c:cb:6e:a3:70:
         31:1d:92:dd:70:c9:d4:8d:21:66:02:2e:4b:4f:cf:61:50:e2:
         fd:79:47:44:ae:37:90:90:f6:a1:86:8a:0d:3d:5a:c4:0f:4d:
         06:e7:07:ee:ea:9d:1a:28:ae:8e:65:27:dd:d2:ec:6e:c1:04:
         55:9f:eb:61:53:eb:af:a6:72:59:62:58:c3:ef:be:b2:da:5e:
         78:6d:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 05:13:40 2026 by rpki-client