Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File:                     GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier:          8X5U1+qQTll3jojDZUyaB1lP47CMvPPwAz+cNtqOXnU=
Subject key identifier:   D3:22:E4:F1:24:47:67:20:84:0C:5B:F9:0B:FD:37:4B:82:D2:00:D8
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer:       /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial:       0C08
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number:          0C08
Signing time:             Wed 04 Nov 2026 15:37:02 +0000
Manifest this update:     Wed 04 Nov 2026 15:37:01 +0000
Manifest next update:     Wed 11 Nov 2026 15:37:01 +0000
Files and hashes:         1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: BgWKgrIvvzUor2Il4y6ym262GfFoUNdpIBex2vN/Yy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3080 (0xc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
        Validity
            Not Before: Nov  4 15:37:01 2026 GMT
            Not After : Nov 11 15:37:01 2026 GMT
        Subject: CN=6aeb511e-7c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:99:58:06:01:f8:b9:6c:88:0f:ae:74:c6:7a:
                    31:ad:eb:7c:a8:15:dd:c5:e7:e4:57:44:73:1a:e6:
                    38:d4:e2:97:20:9b:8a:67:cf:52:a3:2a:b9:48:4d:
                    ee:7d:d9:11:78:75:94:1d:75:ec:c5:4c:d6:fd:e8:
                    9f:43:d1:e8:e4:a5:22:b7:24:01:13:dc:95:26:0d:
                    61:a9:5e:be:98:48:c6:5b:5a:9b:f4:a2:a2:10:4c:
                    54:5d:66:ea:9e:e1:01:b9:97:91:f2:1c:de:0c:03:
                    62:58:e9:f3:5c:b7:e0:b3:2f:61:d3:4d:ce:d2:bf:
                    6b:55:dc:e1:fc:20:6c:1c:20:fb:7f:92:47:18:f2:
                    f3:91:66:0d:5e:d0:de:06:9b:35:d0:08:07:cd:8a:
                    10:b0:24:5d:97:c3:29:21:17:d1:65:2e:ff:71:e1:
                    03:0a:8d:fe:b4:a8:68:0f:f7:63:a6:48:2d:a1:f4:
                    d1:c2:51:b5:9a:92:e0:04:34:b7:db:d9:8a:7c:6a:
                    9e:cd:61:d9:27:0d:f5:76:d2:bf:41:29:bf:57:93:
                    96:b4:c5:38:38:72:7b:44:c1:e1:2b:57:59:67:61:
                    52:52:f2:cd:8d:1d:12:7d:55:8f:37:18:61:2d:a1:
                    ce:21:07:1d:16:5b:48:0a:16:cf:cf:25:4d:68:29:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:E4:F1:24:47:67:20:84:0C:5B:F9:0B:FD:37:4B:82:D2:00:D8
            X509v3 Authority Key Identifier:
                keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d2:1e:38:e8:26:73:48:d7:e7:34:ac:d6:c8:22:ff:79:80:
         e0:cb:13:f5:8d:d8:f2:39:da:2e:b1:4e:0e:fe:78:24:7c:60:
         e0:1d:f3:2e:d2:bf:12:b2:66:cc:00:3d:2c:5e:ed:71:73:f1:
         e0:cf:37:d2:6b:55:15:26:3a:93:c8:56:30:11:01:0d:a8:fe:
         40:7e:a2:eb:fb:ad:14:0c:fc:91:41:b9:3a:34:0e:a3:73:98:
         47:2b:41:69:cf:6b:46:7c:00:9d:f1:d6:c4:f7:fd:4b:c8:4e:
         f2:ef:b3:f1:6f:96:81:11:1b:d3:d9:f9:8d:46:d5:9f:9c:97:
         cb:35:79:be:bf:54:58:0d:a1:b6:72:c9:8b:2a:71:f4:41:ea:
         02:a2:cb:08:b7:9f:d8:76:56:d5:1e:bc:93:c9:da:30:14:f5:
         d8:54:a1:12:58:80:b8:9d:6e:42:6b:ef:0b:b4:63:70:c4:41:
         73:ab:43:17:1c:17:2d:d1:24:5a:27:71:86:fe:1a:1b:28:dd:
         41:92:76:68:31:96:f9:26:4b:34:24:52:ea:e7:46:31:27:69:
         16:e0:e0:f9:3d:bb:92:7f:e0:ea:d9:9f:1e:e0:2c:ee:2e:ac:
         6c:d0:37:fe:ba:65:03:a1:a1:e4:c2:5a:10:3d:29:14:e6:48:
         a7:52:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:40:33 2026 by rpki-client