Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File:                     GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier:          KTf3Kk5kKJBFpkZLJ5M8THGC+iL0NoCnKIEp2xo37xQ=
Subject key identifier:   C6:D3:73:90:58:AA:82:ED:9F:2B:EF:8A:5E:5D:33:4D:F1:51:D1:41
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer:       /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial:       0BBF
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number:          0BBF
Signing time:             Thu 18 Jun 2026 15:33:27 +0000
Manifest this update:     Thu 18 Jun 2026 15:33:27 +0000
Manifest next update:     Thu 25 Jun 2026 15:33:27 +0000
Files and hashes:         1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: YigxfLkK1DYGGWH3avvnCjX3c8LooIc8aIfJvpmp6Hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Jun 2026 15:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
        Validity
            Not Before: Jun 18 15:33:27 2026 GMT
            Not After : Jun 25 15:33:27 2026 GMT
        Subject: CN=6a340fc7-d482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:f6:16:c3:da:d9:63:c4:a5:96:eb:37:8b:
                    35:a8:86:e2:4d:51:db:03:db:83:04:3d:10:12:5c:
                    e9:60:15:41:3e:13:4a:dc:12:c0:46:da:e4:0b:ff:
                    53:3b:44:0f:36:df:86:54:43:67:71:95:a5:a4:a8:
                    d6:1c:00:c5:36:ec:60:19:e4:e2:25:c6:f4:4b:3b:
                    3a:ab:4c:d5:75:85:03:8c:ad:6b:b4:7c:8d:bd:17:
                    94:e1:65:99:82:04:fa:b1:61:88:a9:f6:b7:cb:73:
                    12:a4:ae:75:9a:d1:95:48:86:a8:58:d3:13:44:2e:
                    ed:d4:0b:c9:5e:52:7e:31:e5:25:4b:c0:bd:8e:35:
                    70:b9:e9:49:ec:46:a2:6c:07:67:9c:02:5b:98:46:
                    51:bb:2a:5c:8f:82:3e:96:d5:cc:2d:75:21:3b:72:
                    e4:a8:f1:d4:72:b5:78:23:89:39:36:36:9b:3c:a0:
                    d6:d8:08:03:e0:00:68:e5:79:7f:c5:51:2e:4d:e4:
                    17:79:85:75:ce:54:7f:e8:39:07:cf:d0:26:b9:7e:
                    ae:4c:1d:4c:f1:bd:75:0f:01:65:fa:53:4a:89:a8:
                    48:45:1c:a5:83:60:bc:dd:08:2d:f9:cb:41:06:5a:
                    6b:68:5a:0d:8a:a9:ea:48:43:2f:4b:e5:4e:30:ca:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D3:73:90:58:AA:82:ED:9F:2B:EF:8A:5E:5D:33:4D:F1:51:D1:41
            X509v3 Authority Key Identifier:
                keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:05:ed:46:71:86:7f:16:a4:76:43:d7:3f:12:47:45:27:62:
         13:3b:cb:97:46:de:1e:07:28:3d:16:1a:fa:48:58:20:92:94:
         1d:c4:98:1a:01:d3:41:05:37:d0:58:8f:62:84:a3:e0:be:d7:
         20:6a:38:22:c0:c5:f4:f9:d6:33:74:d7:8a:27:19:71:21:43:
         73:cb:28:ab:34:db:bc:1f:e8:91:d3:88:69:39:99:c6:f2:1c:
         6b:6d:c0:54:67:bc:6e:ec:72:3e:ac:3f:6a:ac:4c:64:ce:b0:
         f3:4c:26:89:6f:a1:40:ee:e8:3b:4f:a1:d3:9f:67:ae:e1:2e:
         4c:3c:53:0d:22:ff:68:e1:c8:5c:0f:49:93:54:cf:a4:c5:17:
         42:58:22:9a:38:df:ee:05:a8:6f:b7:13:42:5a:80:c0:4c:0f:
         7c:c0:39:ed:72:9f:71:6e:a1:20:77:7d:d1:7e:2a:13:df:72:
         87:e7:a5:4f:8b:3b:9b:58:79:0e:73:97:d6:07:57:b2:4d:86:
         d7:cf:9a:f4:ca:0e:71:a5:e5:ce:66:73:b7:0a:cb:9c:45:81:
         3d:90:69:e6:98:15:51:7e:46:bd:a3:75:6b:31:9d:74:62:20:
         b7:97:ee:03:11:38:2b:72:9d:e2:c2:77:ca:15:5b:ff:c8:22:
         2a:d3:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:37:10 2026 by rpki-client