Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft
File:                     GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft (raw, json)
Hash identifier:          SdGWDSq1mQxK1ka1/o/6SZM070I2qi3N2AjH5SxQ5TI=
Subject key identifier:   9B:C7:83:90:5F:18:56:D8:D9:AA:DC:15:4B:DB:41:F3:28:61:E3:D6
Authority key identifier: 19:00:39:C5:7B:0A:9F:91:EE:0B:70:75:B8:B3:D3:D9:A4:38:8D:4F
Certificate issuer:       /CN=A9174218/serialNumber=190039C57B0A9F91EE0B7075B8B3D3D9A4388D4F
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft
Manifest number:          0F
Signing time:             Fri 17 Apr 2026 08:49:48 +0000
Manifest this update:     Fri 17 Apr 2026 08:49:48 +0000
Manifest next update:     Fri 24 Apr 2026 08:49:48 +0000
Files and hashes:         1: GQA5xXsKn5HuC3B1uLPT2aQ4jU8.crl (hash: X+yj7O1ghEr/PSvzQILB+sUYE/4KzLHWGVhdBXaXGKg=)
                          2: 455BA02A29EB11F1BB259C92A0833773.roa (hash: g8eJOb8gA81Xqc3gaCShCxO43ZQLUzbdvL42NS1ZeQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.crl
                          rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174218, serialNumber=190039C57B0A9F91EE0B7075B8B3D3D9A4388D4F
        Validity
            Not Before: Apr 17 08:49:48 2026 GMT
            Not After : Apr 24 08:49:48 2026 GMT
        Subject: CN=69e1f42c-a384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:51:2d:cc:f0:0f:5e:69:40:46:87:b7:c9:
                    6b:1f:12:04:3e:9a:52:22:a5:33:1c:62:17:2f:9c:
                    df:32:62:19:90:22:24:6d:e1:a4:2f:91:fc:1f:07:
                    8d:cf:25:ff:fe:b3:ee:6c:e6:99:c1:fc:3f:62:17:
                    b4:38:a1:a1:b0:76:4c:73:83:e1:3b:9b:ce:cf:e6:
                    64:7b:54:9a:6d:ca:33:e6:c7:1d:a6:60:ca:eb:5f:
                    f4:16:a5:04:33:cc:34:2a:5b:a5:99:69:b8:f5:ce:
                    a5:26:09:e9:10:27:d8:5f:5d:2d:3e:ae:a5:db:20:
                    0d:4b:11:56:65:2b:11:4c:92:cb:5b:f9:26:e1:e0:
                    8a:2b:8f:ba:2e:cc:f1:64:e1:4b:10:a3:a2:13:e6:
                    f6:70:b5:58:3c:32:2f:bb:6b:70:e8:d0:72:1a:32:
                    92:25:27:6e:e5:f1:73:4b:e8:6d:fa:95:d0:64:4d:
                    af:ef:12:2e:b6:bd:26:16:11:85:b2:e1:05:4c:de:
                    79:1a:c9:76:30:75:08:57:70:df:5e:da:cf:d4:23:
                    d8:55:8b:cb:bf:85:2f:05:f3:8d:51:8c:1c:96:20:
                    f7:c0:a9:b2:2d:58:5e:8d:61:c1:e1:c6:12:54:77:
                    01:1b:b0:61:78:f2:f2:11:43:b5:80:7a:12:d9:e6:
                    a6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:83:90:5F:18:56:D8:D9:AA:DC:15:4B:DB:41:F3:28:61:E3:D6
            X509v3 Authority Key Identifier:
                keyid:19:00:39:C5:7B:0A:9F:91:EE:0B:70:75:B8:B3:D3:D9:A4:38:8D:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:fd:1f:21:8f:41:43:36:80:15:ff:6b:9d:3e:a2:62:f2:
         4a:53:9c:94:83:13:e3:c0:04:d1:76:ee:6c:4a:11:02:42:7c:
         7f:59:ad:7e:91:82:17:b7:33:02:3d:42:e0:84:ba:12:b2:d8:
         cb:69:89:bb:9e:25:8f:67:00:35:f3:90:5c:c6:1a:d0:be:b0:
         a1:81:f5:f2:51:0c:04:cd:a8:2c:fe:22:c7:d2:0e:6e:53:13:
         4e:d8:f8:48:c8:63:2f:45:b7:55:2f:90:a9:41:fc:05:44:2c:
         38:b2:99:ef:d1:9b:e3:57:26:68:64:87:bc:5d:61:2f:e9:59:
         2e:b1:d1:98:e9:e2:f4:a6:ba:a6:a8:cc:ac:8e:b8:cd:76:14:
         6e:c4:0e:08:50:69:ed:74:a3:d3:13:be:9d:38:f0:4d:be:aa:
         36:53:b7:9d:ec:57:9f:35:45:e0:52:29:34:be:3a:0f:c5:76:
         32:19:12:f1:7e:fd:8e:b3:72:b0:80:9c:c6:74:42:7a:04:f3:
         ef:16:3f:0f:ba:d6:ec:5b:c7:6f:71:ee:f7:d9:69:ad:23:5d:
         0e:2e:ed:b7:77:9c:37:b1:4a:3c:f8:60:27:27:90:b2:9e:ca:
         96:9a:c2:10:cd:10:29:69:7a:df:40:88:cb:40:cc:67:3c:b4:
         51:38:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:21 2026 by rpki-client