Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
File:                     1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json)
Hash identifier:          Km8Kz3x35HNFNYqcXX7XATC4hTwt6rLLbeyNRDU+njI=
Subject key identifier:   62:67:5F:D4:62:47:DA:FF:DD:B8:DD:C8:9E:47:94:A1:3F:65:57:9C
Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
Certificate issuer:       /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
Manifest number:          0114
Signing time:             Fri 17 Apr 2026 05:36:59 +0000
Manifest this update:     Fri 17 Apr 2026 05:36:58 +0000
Manifest next update:     Fri 24 Apr 2026 05:36:58 +0000
Files and hashes:         1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: pC4t9H4X4+Yfk96yziLloQbyqtwrePpOjgRvKYLEgFw=)
                          2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: V6hcLW3DIWJr5GsqXhQQoqs6tXkMxQGHQdAMhmhtdMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
                          rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
        Validity
            Not Before: Apr 17 05:36:58 2026 GMT
            Not After : Apr 24 05:36:58 2026 GMT
        Subject: CN=69e1c6fa-cdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:1c:c1:7b:c0:7e:98:43:55:75:4d:9a:b3:
                    dd:bb:86:54:9b:f7:a5:60:26:c5:a1:dc:ec:e0:22:
                    3b:67:a8:3b:78:3a:ef:f0:e8:f9:4a:ff:57:5e:fc:
                    51:98:d0:18:18:c4:be:62:84:41:b9:01:5a:66:fa:
                    6c:a6:a3:4a:f8:42:09:05:99:ed:ea:dd:d7:f0:4f:
                    77:82:40:c3:68:74:ee:c5:1d:70:65:c3:2b:9a:24:
                    ce:60:43:ea:27:2e:61:5d:7f:80:fb:af:12:8f:07:
                    6d:d6:55:d7:51:4a:11:6e:89:b4:36:39:93:6b:88:
                    f0:67:9b:a0:bc:7a:28:2f:85:c4:2e:3d:40:b2:63:
                    09:5c:7d:b5:6e:f6:1a:a9:3f:3b:eb:37:d4:a8:c8:
                    cd:73:4b:10:e8:31:14:94:45:fe:c2:95:44:a8:cf:
                    52:88:4b:8a:60:b9:17:94:65:59:90:2f:22:5f:a7:
                    64:a5:02:bf:6a:4e:92:ca:19:e7:39:5f:b7:d0:a9:
                    74:ad:26:7a:61:58:29:9e:1a:e0:75:da:ac:8d:d0:
                    2d:be:4d:4b:3c:6e:b0:74:6b:30:94:55:6f:bf:d9:
                    75:12:6b:1b:fa:80:c3:f3:f9:00:39:9d:f8:be:65:
                    dc:4f:6e:ce:77:70:e5:a3:42:6e:59:4f:e5:8b:2c:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:5F:D4:62:47:DA:FF:DD:B8:DD:C8:9E:47:94:A1:3F:65:57:9C
            X509v3 Authority Key Identifier:
                keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:f7:53:32:1e:53:a4:79:ab:24:c6:44:2e:a2:e9:b8:be:
         9d:b2:65:9b:9f:c1:b9:aa:41:d2:c4:80:8c:c4:0e:19:2c:80:
         f9:0f:73:7d:de:ed:06:54:6f:c8:f0:6f:bd:71:9d:47:7d:85:
         e5:d2:fb:9f:ed:f8:d6:41:5b:1a:04:41:97:ff:9d:fa:97:4e:
         af:74:ab:ec:5f:84:23:17:e7:ed:ce:44:8d:5a:06:f3:2b:4f:
         de:c3:30:89:ee:eb:4c:4f:0e:0d:e4:92:db:c7:26:07:0c:bd:
         25:74:a3:de:48:fa:5d:80:ac:c1:a6:ba:67:70:ca:a1:58:f4:
         27:89:98:da:13:ee:b0:7a:62:6f:d2:7e:75:8c:6f:9f:cc:1c:
         4a:a0:06:3a:55:3f:70:8e:c9:45:01:e3:96:13:79:bf:d4:e2:
         05:30:65:6d:3d:01:35:fd:09:8d:0c:0a:6c:5a:04:b6:ec:7c:
         81:f6:88:2e:53:72:89:b5:02:1c:13:08:c7:8d:4b:57:f7:df:
         be:69:38:2f:59:05:65:54:00:be:63:91:fa:8e:b9:63:bd:7a:
         e3:77:3d:4a:5f:9f:ab:99:15:25:28:5e:ea:f0:45:78:76:d4:
         da:69:ed:73:cf:e6:eb:8d:9f:ed:52:87:11:c9:e3:75:13:fd:
         e1:f7:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:13:36 2026 by rpki-client