Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
File:                     G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json)
Hash identifier:          Buz8Od265CD9unmqM9eBj1mEiyUhIm8s/jG9/Wz7USc=
Subject key identifier:   DF:19:93:8A:6D:44:96:3D:83:BE:FB:68:D8:2C:38:AF:D4:7F:0F:DE
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Certificate issuer:       /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial:       09F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
Manifest number:          1A8A
Signing time:             Fri 12 Jun 2026 17:18:23 +0000
Manifest this update:     Fri 12 Jun 2026 17:18:22 +0000
Manifest next update:     Fri 19 Jun 2026 17:18:22 +0000
Files and hashes:         1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: qsesrHOuZVnLPW1ma5eax2eJ1sETt2Ii1TF+qSDj0ug=)
                          2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: o3juqhlkzvoSTkKnkj2B9rqpg4vlEounEHggkPD3cB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
                          rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553 (0x9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
        Validity
            Not Before: Jun 12 17:18:22 2026 GMT
            Not After : Jun 19 17:18:22 2026 GMT
        Subject: CN=6a2c3f5f-e48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:77:94:43:e1:64:0a:73:67:00:b4:3c:c8:
                    04:83:67:fc:61:90:06:3f:40:ee:95:1a:e2:3d:49:
                    72:35:28:4f:44:48:9f:42:f6:20:19:bc:58:be:71:
                    51:32:f4:d8:06:d8:cb:98:53:00:b3:38:6b:13:5c:
                    75:43:e1:ff:33:29:52:df:c9:4b:b0:42:36:1a:9c:
                    3e:b2:5b:e5:a9:06:c5:b9:d0:9d:f3:c6:de:50:52:
                    1a:06:df:1a:47:b8:93:c8:c4:96:46:a1:5a:e0:b5:
                    8f:93:3a:52:8e:27:f8:61:92:c2:48:05:35:2c:d6:
                    16:df:fa:96:5f:f9:40:f1:a6:da:34:8c:97:b5:ff:
                    d0:95:de:e5:2c:50:dd:01:46:ce:ce:d2:cf:1f:3a:
                    0f:62:c9:ad:c2:49:ce:c8:99:e2:93:15:0c:b9:f5:
                    3f:07:5b:2d:49:44:ea:a2:59:cf:32:75:23:02:81:
                    af:e9:ec:88:fd:98:53:65:88:75:8d:dd:72:95:70:
                    74:9e:a0:b8:37:37:8d:65:53:78:2d:23:c7:ab:7d:
                    df:81:00:74:c0:96:18:27:44:6c:ca:71:1b:5d:84:
                    30:26:86:50:d9:6b:1b:a9:fa:32:03:6c:1f:af:e6:
                    57:d8:c9:55:95:a1:a7:c6:e6:b6:2b:52:62:45:7a:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:19:93:8A:6D:44:96:3D:83:BE:FB:68:D8:2C:38:AF:D4:7F:0F:DE
            X509v3 Authority Key Identifier:
                keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:79:cf:8f:72:dd:3b:d6:7e:f8:31:33:df:b4:b4:b7:4e:
         5e:a0:7f:24:c1:f5:cd:55:7e:eb:ac:98:2c:97:91:11:f0:48:
         5e:94:09:06:38:46:f9:87:52:6b:43:22:51:7d:da:cf:fb:1a:
         ed:36:82:81:b4:25:6c:7f:db:a0:c7:2c:57:b6:c8:1c:8a:c1:
         a3:bb:18:e8:88:b4:93:28:27:29:f7:6f:11:fc:80:bc:55:36:
         b2:4a:0e:e9:1f:ed:24:37:6b:2c:4b:35:27:aa:48:d5:ca:9f:
         f1:da:44:4d:ea:0c:4a:66:e8:60:d8:42:4a:46:93:a8:37:02:
         c4:3f:80:07:11:9e:55:85:f4:a7:85:18:0c:7e:87:81:5a:cd:
         98:d6:83:56:64:bc:40:8c:63:00:f2:2f:eb:49:78:5a:63:98:
         e4:7c:88:4f:6b:f0:84:d9:3d:8e:07:3f:ff:7d:f5:a6:fc:48:
         90:fc:26:82:75:7e:f7:c2:cf:b4:6c:1e:28:ac:76:45:b4:c9:
         68:71:bb:40:75:4b:e7:0d:54:61:94:ff:8a:c7:ef:cc:cf:11:
         33:2d:fb:79:1d:d1:32:b8:4c:8b:25:01:a2:af:cb:88:15:a6:
         87:82:d8:33:81:5e:c6:29:f2:3c:0c:d9:ea:af:eb:42:de:d6:
         13:05:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:41:39 2026 by rpki-client