Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
File:                     GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json)
Hash identifier:          xYRxH5c9S1Pb3A0AqYAq91z0Ig4eE4qxBQpMiHrCn6A=
Subject key identifier:   08:A3:B5:79:75:7B:6B:E2:89:D4:3E:C1:4D:B1:95:6C:50:D4:FF:CA
Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
Certificate issuer:       /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Certificate serial:       15AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
Manifest number:          15A1
Signing time:             Fri 12 Jun 2026 16:42:47 +0000
Manifest this update:     Fri 12 Jun 2026 16:42:47 +0000
Manifest next update:     Fri 19 Jun 2026 16:42:47 +0000
Files and hashes:         1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: y5gucC48IJaKhm3/hkcys8w1hMK+GeIHGdm7Rku9Qe8=)
                          2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: eG2+Dg5b/oCUqgZG7mXNqvSu0hsi4Mr+XueozIi6Lxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
                          rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5550 (0x15ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
        Validity
            Not Before: Jun 12 16:42:47 2026 GMT
            Not After : Jun 19 16:42:47 2026 GMT
        Subject: CN=6a2c3707-9e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:89:a4:bb:a8:dc:36:1c:9a:80:83:5a:f1:
                    0a:13:31:bf:be:31:53:63:1e:00:08:77:55:5e:8a:
                    63:34:82:a0:df:39:22:ad:f1:34:e3:e7:84:c7:47:
                    4b:e9:cc:30:b4:47:98:de:23:5e:43:c8:f9:1d:7f:
                    ee:32:4f:3b:22:e4:2e:1b:3b:e3:66:b4:72:5e:00:
                    46:dc:85:78:bc:34:5c:24:dc:56:7e:9e:f6:fc:db:
                    78:d5:0d:cb:0b:99:ba:8f:18:00:87:75:11:02:d8:
                    04:fa:a6:c6:24:a6:8a:a7:08:42:33:18:8d:74:30:
                    b8:3e:6b:7f:db:dc:a5:9b:59:77:6f:2f:67:a2:ea:
                    01:12:0b:53:de:cb:52:b6:c9:7c:95:17:39:81:42:
                    d0:60:52:c1:97:2f:e1:4f:c9:05:31:69:e0:8b:f8:
                    42:b5:01:b9:ce:dd:cd:1c:6c:26:02:d7:ad:a6:d6:
                    0b:06:cd:9f:6c:de:a5:76:48:d5:11:24:d1:39:f7:
                    79:20:c0:61:2a:0e:02:3d:0e:b7:9d:ff:0c:bc:09:
                    39:73:8f:54:53:5d:16:82:79:c6:e1:1d:c5:ef:fb:
                    d2:07:99:70:66:fd:b7:a0:97:79:c2:20:60:09:ea:
                    61:af:06:bc:d2:52:44:ff:8e:37:62:a0:bf:1b:e9:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A3:B5:79:75:7B:6B:E2:89:D4:3E:C1:4D:B1:95:6C:50:D4:FF:CA
            X509v3 Authority Key Identifier:
                keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ce:21:eb:f1:60:7f:f6:ef:56:dc:65:db:c5:95:8f:21:a9:
         36:78:72:36:73:2d:38:f0:ac:72:43:6a:b6:a3:a6:93:12:e0:
         98:22:39:be:57:6f:e4:fd:0c:1a:1f:11:62:35:fc:70:f0:40:
         23:ef:79:da:e4:7a:5b:70:9f:e0:ce:98:9c:e0:f0:4c:8c:3c:
         65:9a:21:25:42:99:15:9f:0c:01:9a:06:81:d2:9c:3f:61:d6:
         d3:fd:0a:86:59:21:25:9e:60:2e:34:1c:dd:22:7f:b1:78:ef:
         a0:16:8c:de:3d:bd:2c:88:e0:f5:89:04:ed:a9:9f:e7:d2:8e:
         fb:48:d7:63:2d:8a:41:c0:94:a6:2c:3d:b7:e6:1e:6c:f8:eb:
         0e:20:d4:15:b7:5b:df:a4:ec:60:ce:81:49:19:57:60:47:0b:
         39:e1:92:47:b0:50:be:fa:67:72:f4:d5:f6:b8:bf:39:ec:be:
         80:65:8a:49:33:12:09:9e:f1:0d:e6:57:de:8d:71:31:96:f6:
         7a:90:fc:fe:d3:fb:c1:61:67:ba:7e:f8:34:9b:d9:00:c4:7a:
         48:bd:2b:d8:95:d6:ea:86:a7:72:2c:1a:3f:76:1c:f8:51:72:
         4e:b9:4d:c5:ef:36:16:8f:78:f5:8a:44:82:18:b5:81:df:d6:
         95:76:28:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:49:00 2026 by rpki-client