Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File:                     GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier:          nIILDZd3z9DWWn16kf+tGKgmX/8EF0Roi2V9K0cTnhE=
Subject key identifier:   03:B1:89:D9:DB:55:9D:8D:57:84:10:00:D6:CB:35:6E:21:CA:DE:D5
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer:       /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number:          4A
Signing time:             Tue 19 May 2026 08:14:19 +0000
Manifest this update:     Tue 19 May 2026 08:14:19 +0000
Manifest next update:     Tue 26 May 2026 08:14:19 +0000
Files and hashes:         1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: +r9b5Ydb9BtYSBk3FY0tLgr0BhvyQEsRtDBpV/+aCE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
                          rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
        Validity
            Not Before: May 19 08:14:19 2026 GMT
            Not After : May 26 08:14:19 2026 GMT
        Subject: CN=6a0c1bdb-54fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:19:40:70:75:3f:07:c3:80:54:f4:fe:15:
                    01:ec:b8:72:bb:19:3e:1b:c5:2d:82:3c:91:f5:35:
                    a6:51:1d:6e:72:a3:ce:53:e3:17:de:c3:5f:49:02:
                    b8:bd:70:f5:d7:47:e3:64:08:e7:a5:a0:d3:72:ce:
                    13:75:ae:95:b7:9f:0e:bb:31:ba:df:79:14:de:68:
                    eb:ec:bd:cf:75:a2:44:d3:46:b7:14:aa:d7:6b:c0:
                    8d:8f:69:3a:7a:1b:cf:25:15:a1:2e:5b:ff:30:28:
                    7e:1a:82:8e:5d:8f:96:c2:55:37:1c:cc:82:aa:96:
                    7c:92:df:95:f9:6f:d1:06:53:30:6d:7f:3d:51:1a:
                    93:94:f5:5d:1d:6e:57:6e:b0:e3:1b:8b:ce:7f:6f:
                    d1:54:a3:10:38:a4:99:e7:dd:ae:af:15:6f:06:25:
                    90:af:e7:ea:2c:e6:87:a3:c9:c7:23:d8:fb:d0:8a:
                    87:f2:a1:97:1f:8a:b5:e4:84:1f:9a:c0:00:6d:e8:
                    9f:67:b9:00:a8:03:21:f7:c8:83:8e:70:e8:6b:60:
                    8e:37:d7:1d:32:5d:d4:cb:51:93:fe:53:9d:87:79:
                    98:1f:18:96:7f:ab:13:32:a3:3b:08:2a:88:69:4c:
                    81:0f:b8:6d:8e:e4:b1:74:2a:f5:38:3f:8e:e0:2f:
                    fd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B1:89:D9:DB:55:9D:8D:57:84:10:00:D6:CB:35:6E:21:CA:DE:D5
            X509v3 Authority Key Identifier:
                keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:0c:58:f3:ce:a8:72:e4:bc:fe:26:5e:59:63:e9:06:65:
         fb:98:26:30:eb:ed:d4:ba:96:ea:0b:4d:4e:d8:50:70:87:66:
         b5:4b:a6:63:4b:d7:f8:8b:b4:da:10:ea:e3:ec:05:26:a9:56:
         97:17:63:9e:68:8d:71:d1:dd:8c:db:63:b9:16:eb:f8:0c:10:
         ed:95:48:c6:1a:51:89:3d:5d:f8:4a:f0:54:d2:1c:89:c6:0f:
         85:6a:12:d7:33:dc:ac:33:59:84:c1:17:97:aa:18:22:3b:3f:
         64:7c:4d:ea:5a:85:cd:e5:f7:06:f4:34:7d:87:1c:71:09:b6:
         b7:09:57:63:89:a9:90:78:f0:8c:dd:50:4c:dc:e2:65:e0:a4:
         4e:26:5f:0b:44:92:89:6c:b5:ed:3a:e0:87:42:df:e6:7b:a6:
         27:32:b5:21:19:b6:36:fc:b5:50:d3:48:b8:ce:f6:a1:49:0a:
         e4:67:48:e8:68:25:71:96:54:61:a6:c3:19:a5:c0:01:c8:9d:
         b6:94:f4:57:32:4b:e1:ce:59:ff:dd:81:cf:23:12:67:4e:ab:
         2b:c6:18:3e:2b:14:3d:79:a9:09:b4:4e:5d:cb:6c:39:cc:be:
         49:b7:4a:d0:b4:dd:95:ba:ae:7f:25:f5:87:80:40:ae:1e:63:
         db:4c:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:58 2026 by rpki-client