Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
File:                     GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft (raw, json)
Hash identifier:          RmTyjgsjtyFkU8vmlectwD8zm7EC5AuMgAyGAdWWR+c=
Subject key identifier:   A1:6B:35:BC:E3:FF:86:12:25:5C:14:78:93:F2:4A:7C:E8:8D:B5:DF
Authority key identifier: 18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F
Certificate issuer:       /CN=A9126BDE/serialNumber=1899AA6415670533224938FAA6655296183E438F
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
Manifest number:          47
Signing time:             Fri 17 Apr 2026 08:05:42 +0000
Manifest this update:     Fri 17 Apr 2026 08:05:41 +0000
Manifest next update:     Fri 24 Apr 2026 08:05:41 +0000
Files and hashes:         1: GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl (hash: evFBde5ZIAx8FG3UVWobEhWf+mw+Ywgu/v3aA9pW79c=)
                          2: 5325F364D3FF11F09B7E5281C4F9AE02.roa (hash: 0DoVxQ7M0n3cZaqCMc5G8GkmP8gnmF47PhLipr8RTHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=1899AA6415670533224938FAA6655296183E438F
        Validity
            Not Before: Apr 17 08:05:41 2026 GMT
            Not After : Apr 24 08:05:41 2026 GMT
        Subject: CN=69e1e9d6-5548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:89:54:0f:28:14:0f:6e:6a:55:63:67:18:
                    c8:1e:e2:1c:83:50:86:89:20:a6:47:a8:fa:86:77:
                    3e:14:9a:d9:8a:5f:2e:c6:42:a0:47:f4:0c:b1:e4:
                    e1:cf:2d:08:1e:b5:3e:98:33:a8:2a:07:a1:8f:f9:
                    9d:99:31:bd:41:d3:db:1c:6c:26:45:a9:13:73:ba:
                    00:de:3f:e1:59:0c:82:fa:32:e2:69:42:ba:52:e8:
                    9e:76:8b:03:5d:eb:35:96:47:bc:94:14:1e:8b:32:
                    78:a5:56:09:5f:52:c6:13:57:56:41:aa:45:c2:1a:
                    82:5e:3c:ab:c5:ce:a0:5c:ba:9c:04:bd:41:fd:29:
                    bb:03:81:c4:4e:60:5d:f2:fe:8b:31:c4:a1:7a:f8:
                    aa:d0:28:74:c4:6a:25:ef:56:d3:17:79:b0:5d:99:
                    a4:7d:c0:90:93:46:ed:9d:5a:10:26:17:14:ce:8c:
                    02:ee:d5:59:1f:f5:ff:f0:39:1a:22:13:d5:0e:ae:
                    43:f3:de:06:40:55:e6:a5:30:08:48:6e:1a:52:d6:
                    df:05:79:08:e5:90:53:e9:74:15:3e:c9:74:57:e6:
                    5f:da:d0:f4:dc:4b:fe:b7:3c:42:e1:20:d9:26:a1:
                    6f:da:40:df:23:54:8f:4c:f6:76:1b:19:1a:a2:ca:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6B:35:BC:E3:FF:86:12:25:5C:14:78:93:F2:4A:7C:E8:8D:B5:DF
            X509v3 Authority Key Identifier:
                keyid:18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3e:8b:0f:5d:7d:e3:f7:72:a2:3c:63:14:26:f5:88:68:26:
         e7:3b:55:8d:87:41:a9:83:a2:3b:96:ec:54:81:52:4d:d0:cb:
         86:83:dd:e8:bf:69:89:f2:5d:3e:b3:3b:f3:37:69:21:bf:3c:
         ef:89:6c:6d:e1:19:49:94:bb:4b:45:c2:d4:88:d0:6d:15:76:
         70:cd:55:81:e0:d8:23:6b:4c:98:25:70:7d:46:79:1a:d4:74:
         8b:ac:17:f9:c9:97:2a:1f:b0:f7:03:42:1e:b7:d5:1a:26:ec:
         45:92:26:6f:72:46:42:1f:e4:b4:c2:02:c4:47:78:ed:a4:e3:
         b4:04:96:6d:e2:5c:b8:ee:16:81:8b:db:49:1a:f9:5e:01:81:
         80:2b:3c:fd:af:c4:78:d4:66:a2:84:6b:a8:c0:28:65:c7:dd:
         b9:5c:48:0d:d2:0a:0f:b2:4b:a0:cb:8b:1f:3f:9c:3c:ac:6c:
         25:53:96:09:bb:c8:f0:dc:f9:54:74:e1:26:43:b7:8e:c4:c4:
         2d:5f:7a:36:8d:7f:74:22:3f:76:18:5a:ac:fe:9a:da:8d:71:
         4a:3f:21:d9:00:ae:b8:19:e3:eb:15:da:6a:ea:57:a9:07:38:
         e8:02:c3:87:8e:45:a7:50:82:64:71:d3:6c:99:28:a9:13:d7:
         6d:a6:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:15 2026 by rpki-client