Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
File:                     GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json)
Hash identifier:          4BLZWvxDiqmJvROOI1VGBlPP5I92MQHr94BIwuatws0=
Subject key identifier:   81:86:A6:B5:CD:6A:20:23:58:6D:78:02:88:C1:D7:1B:EA:A0:B6:5F
Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
Certificate issuer:       /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Certificate serial:       0441
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
Manifest number:          043B
Signing time:             Mon 02 Mar 2026 02:08:54 +0000
Manifest this update:     Mon 02 Mar 2026 02:08:53 +0000
Manifest next update:     Mon 09 Mar 2026 02:08:53 +0000
Files and hashes:         1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: k7Ge+coaOeXLpC0wqWBSNBaudKRtanyRisOvuCv4W1s=)
                          2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: 4RoaW2Y7MrH0o0r3MnJLXpqeqGt1wKbknWzh8clZN9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
                          rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089 (0x441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
        Validity
            Not Before: Mar  2 02:08:53 2026 GMT
            Not After : Mar  9 02:08:53 2026 GMT
        Subject: CN=69a4f136-58a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:fd:12:80:2d:53:da:c4:3b:1a:07:9f:d1:
                    77:4b:24:da:8b:9d:df:8e:83:b1:f4:ba:50:d5:bf:
                    25:db:92:ab:5a:0b:91:10:93:06:e5:84:d1:bc:f8:
                    30:b6:04:4d:c4:8f:f0:ec:fd:32:b9:08:46:05:32:
                    63:e3:21:1e:48:67:43:0f:9f:27:68:cc:bc:ec:36:
                    a0:3e:2d:ab:63:ca:6d:e1:3a:9f:30:b4:be:99:70:
                    40:0f:15:73:30:ae:91:95:02:4c:e4:03:51:74:38:
                    ef:5f:9d:e1:0e:57:de:4a:c4:6a:47:8f:b7:68:1a:
                    a8:df:36:d0:6d:c9:85:20:86:19:84:8d:15:72:dc:
                    3c:a9:77:0b:fc:7e:c1:cf:89:0b:bc:2a:4a:d7:b2:
                    32:7e:dc:2b:9b:fc:49:4a:ba:ff:43:6c:54:13:fa:
                    68:1a:e1:e7:2d:8b:07:d9:36:5c:92:5f:54:36:11:
                    e6:da:16:b7:1c:d3:7b:24:b9:58:0b:14:75:c3:c0:
                    70:0c:df:39:22:74:a3:07:7d:7b:1b:49:cb:03:20:
                    68:9d:41:fc:c1:2a:3d:42:7b:f2:fb:4a:5b:47:bc:
                    20:ce:22:53:b7:50:84:37:e7:df:41:41:14:4d:a9:
                    35:7e:fc:e4:d3:19:66:da:b6:23:aa:56:3c:33:a6:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:86:A6:B5:CD:6A:20:23:58:6D:78:02:88:C1:D7:1B:EA:A0:B6:5F
            X509v3 Authority Key Identifier:
                keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:db:b0:a8:6d:ae:46:47:eb:99:8b:f2:81:94:47:b4:f9:30:
         d9:2f:cd:7e:02:82:b3:3a:3b:f6:2a:d1:f3:6e:cf:6d:48:10:
         9f:1a:b2:0b:3e:35:c4:44:6e:27:77:2b:bc:eb:39:7c:20:cd:
         8a:73:4b:32:29:2d:90:bb:d6:53:32:f8:cf:a4:7c:cc:c2:92:
         5b:91:6f:00:8e:8b:bb:4d:7b:bb:50:1c:8f:e2:17:53:ac:83:
         6f:82:b0:1e:27:86:d7:56:ae:bb:41:b6:4a:cc:a8:c9:b6:6a:
         00:55:b6:30:1d:7f:c0:66:8d:fd:40:ae:09:25:b4:14:fd:d7:
         c0:e3:2a:00:2a:32:fd:f9:f0:53:23:c9:cf:d0:12:ef:67:33:
         09:27:d1:b2:c2:81:91:52:de:54:26:5d:95:82:c9:61:43:68:
         a5:88:8e:b5:db:d7:fe:86:8f:08:7c:7c:c6:21:f1:19:0d:a7:
         2a:cf:1f:95:44:76:b9:d5:e6:76:aa:17:5e:34:82:1a:ad:86:
         4e:71:9a:59:1e:f8:4b:98:9b:c5:92:9e:76:1b:fc:8f:c9:d3:
         d8:54:d6:e6:b8:8e:ee:b7:0b:f5:77:ba:ac:04:48:21:f1:7b:
         94:d1:a7:8d:05:bd:cd:3a:6f:5b:97:83:28:1e:88:b9:2c:1b:
         10:91:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:39 2026 by rpki-client