Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
File:                     g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json)
Hash identifier:          4lqbH2MR0YDzGtrdVT8JOVTu7C9vd3T11xqv9HKwOIQ=
Subject key identifier:   5D:15:EE:85:12:DA:97:16:41:BD:E4:93:1A:39:62:2A:77:C3:AF:9B
Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72
Certificate issuer:       /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
Certificate serial:       0DC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
Manifest number:          0DBD
Signing time:             Thu 16 Apr 2026 17:49:11 +0000
Manifest this update:     Thu 16 Apr 2026 17:49:10 +0000
Manifest next update:     Thu 23 Apr 2026 17:49:10 +0000
Files and hashes:         1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: BUGP1BDz7pyzaGqjjz78Amn4AMoYWrrcLL/AF3EQkKc=)
                          2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: iRh85DKNgJv3AbDIde7UD24KtZKvMF6kuxGkkUfsSeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl
                          rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3525 (0xdc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572
        Validity
            Not Before: Apr 16 17:49:10 2026 GMT
            Not After : Apr 23 17:49:10 2026 GMT
        Subject: CN=69e12117-b682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:2a:d4:75:f5:0f:a8:53:43:01:ff:4c:61:
                    53:61:54:31:35:2b:52:80:f2:e7:56:eb:1a:e9:38:
                    1c:76:25:de:a9:c0:ff:04:32:8d:a8:ba:46:07:2b:
                    9f:c0:ba:2c:08:d8:55:cf:ca:d1:15:10:9f:a9:1b:
                    65:4b:d1:7d:2a:b1:7b:9d:7e:d6:2d:d3:94:2c:59:
                    41:02:c5:fb:a9:39:d5:90:29:55:d3:88:be:fc:12:
                    fa:1a:4c:2a:a0:82:c6:ef:8c:05:e8:75:53:e7:04:
                    8a:70:6f:69:2f:2d:57:0b:fa:ed:71:43:27:6a:cb:
                    c2:52:97:b7:1d:18:ae:6c:4a:34:d6:a2:b7:b5:48:
                    f7:cb:67:4a:64:d6:a4:12:d1:b7:7e:c3:a8:a6:b7:
                    af:a7:e1:06:2b:3e:9e:f9:0a:b2:17:15:91:5e:f0:
                    c1:09:07:75:57:fc:56:97:e5:84:1d:a0:33:c7:fb:
                    74:c1:cb:1d:87:a9:c1:19:f7:cd:e6:8a:63:64:cd:
                    c1:b9:49:33:eb:66:26:ae:01:bf:0b:cb:7d:05:11:
                    0e:88:8b:15:43:3c:f4:10:8a:f3:ec:ca:96:bb:be:
                    3b:75:28:6a:b9:b7:0f:1c:94:d8:b4:df:87:ea:22:
                    46:ca:5f:1c:1f:2a:cc:00:d3:b1:b2:15:60:e3:e8:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:15:EE:85:12:DA:97:16:41:BD:E4:93:1A:39:62:2A:77:C3:AF:9B
            X509v3 Authority Key Identifier:
                keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:41:6f:57:9c:fd:2d:e6:cd:2d:d8:c4:66:cf:c2:00:20:9a:
         30:06:b6:70:f9:86:11:ff:ab:f3:61:7c:52:84:56:7c:85:aa:
         12:76:2d:e2:9f:83:2c:45:20:94:9a:f4:a6:3f:3e:10:ed:a0:
         83:c5:ad:91:c7:92:dd:7f:ad:b9:30:94:9e:b2:69:d8:54:f1:
         96:0c:05:3b:ea:d9:32:02:1a:87:00:27:dd:28:b8:59:5b:60:
         95:d5:ee:6c:a3:d9:79:7a:9e:ce:a4:95:a5:89:69:18:4e:0c:
         09:2f:ca:67:a2:16:10:58:1e:cd:fd:63:87:59:3b:8e:f3:b3:
         f1:ce:9a:e4:27:54:15:24:8c:28:b9:23:4c:69:e0:ee:80:30:
         05:2c:13:37:6c:83:4a:a4:cf:4a:cc:f8:5c:42:ea:8a:b5:a4:
         f9:b5:8c:3e:da:74:bc:3c:b5:ff:f7:7d:88:a7:36:b9:c3:f0:
         94:cd:c9:f7:9e:8d:4d:41:e5:ab:59:b6:20:49:f5:46:73:78:
         2b:9e:24:c5:b5:6d:93:ce:9f:fd:de:81:a1:4e:b5:e5:77:73:
         92:9b:18:ff:9f:62:7a:4b:45:32:74:22:4d:d3:95:83:08:61:
         ce:8e:e3:76:ff:7c:d3:b1:71:23:3e:6f:e5:91:35:2f:da:c6:
         20:98:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:14 2026 by rpki-client