Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
File:                     GNJBabAlTqfymUPFBeK1kxr6uSY.mft (raw, json)
Hash identifier:          iXn77GnUzQiiHR8JKbomYg/bngPzRzc1R8AmdkBn+uM=
Subject key identifier:   24:C9:61:B5:21:6D:8D:4E:37:8E:BF:59:64:72:18:71:69:0D:F0:4F
Authority key identifier: 18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26
Certificate issuer:       /CN=A917C44C/serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
Certificate serial:       045B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
Manifest number:          0454
Signing time:             Fri 17 Apr 2026 00:05:18 +0000
Manifest this update:     Fri 17 Apr 2026 00:05:17 +0000
Manifest next update:     Fri 24 Apr 2026 00:05:17 +0000
Files and hashes:         1: GNJBabAlTqfymUPFBeK1kxr6uSY.crl (hash: eKBI+X72jjDqKh/9ETqfslGyC/jxXhcIFIPQACzKDys=)
                          2: DAF4B31C983E11ECA0050128C4F9AE02.roa (hash: MYKVh0eWzR2V3iXTSn4h6WjjCDRp1L/sgZ79mBnbQVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl
                          rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C44C, serialNumber=18D24169B0254EA7F29943C505E2B5931AFAB926
        Validity
            Not Before: Apr 17 00:05:17 2026 GMT
            Not After : Apr 24 00:05:17 2026 GMT
        Subject: CN=69e1793d-506e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:48:f1:0e:c5:31:0c:8a:fd:88:da:ad:31:
                    e6:bc:af:e4:a6:4d:41:ff:15:ba:b2:c8:27:ca:ea:
                    0b:88:12:45:89:d0:08:f8:7f:a5:60:5f:7d:63:9a:
                    c6:14:23:1e:71:cd:68:d4:86:13:e9:e6:cd:f7:fd:
                    2d:ad:b5:44:07:36:be:fd:bd:62:b7:12:cd:29:e4:
                    bb:ab:c0:6d:1b:d0:97:70:64:76:67:3e:61:e4:c3:
                    19:c1:c6:db:ed:6e:75:cd:8c:5a:c5:d2:91:67:55:
                    27:48:0e:47:e5:14:81:17:6c:23:70:5a:5b:7c:39:
                    c5:5b:a1:e6:18:3c:e5:34:cc:24:30:30:22:be:ef:
                    ae:fa:9e:1f:fe:95:58:11:ad:65:a1:b5:1e:6d:ad:
                    aa:bc:42:d8:b5:4f:c5:be:4e:a5:e1:e3:c4:36:e1:
                    ac:e8:b5:c1:ce:fe:a1:2b:c2:2b:14:0a:01:ea:c5:
                    3f:62:aa:11:23:64:0b:8a:d8:d5:75:70:bf:10:64:
                    a7:90:10:da:6a:d4:54:ab:c4:07:bc:79:7f:b9:45:
                    76:02:c5:28:65:53:1a:87:7d:7e:3c:7a:c4:c3:ee:
                    7d:ed:42:5d:98:db:17:90:0d:65:dd:61:4e:69:44:
                    85:3e:c0:14:d8:1f:ed:f6:80:a8:44:4b:14:16:7b:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:61:B5:21:6D:8D:4E:37:8E:BF:59:64:72:18:71:69:0D:F0:4F
            X509v3 Authority Key Identifier:
                keyid:18:D2:41:69:B0:25:4E:A7:F2:99:43:C5:05:E2:B5:93:1A:FA:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNJBabAlTqfymUPFBeK1kxr6uSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C44C/4B5B29AA945811EC99057A3AC4F9AE02/GNJBabAlTqfymUPFBeK1kxr6uSY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cb:bc:84:84:34:61:ad:0d:79:ac:a9:06:39:72:b5:12:01:
         b8:52:e3:9a:74:0e:63:b9:8f:ed:ce:0c:c9:a8:17:4c:6c:12:
         62:72:14:34:44:d6:5f:cc:36:6f:6e:80:ff:17:7b:78:16:a8:
         1d:39:22:e9:1a:81:9d:5a:9c:52:7b:81:08:cb:3a:ce:de:5d:
         70:2c:53:a0:5b:77:b3:b1:da:c1:d1:df:58:30:05:a2:4b:25:
         30:7b:52:c3:44:38:83:8b:4e:db:90:bc:0b:ca:90:af:c2:5a:
         0e:a2:c8:87:02:ee:23:6d:f3:66:7d:04:3b:3d:37:c6:92:de:
         a6:3f:8b:13:ab:32:c9:3c:49:ab:26:ba:8f:4a:c0:48:c4:d6:
         5f:5f:4e:4b:82:f0:0b:71:24:49:c7:d4:96:3f:bb:8e:05:dc:
         45:fc:63:10:dd:67:d8:39:71:4c:f9:df:1d:6c:e0:7e:e6:03:
         77:2b:72:6d:ab:ad:73:fc:a0:5d:f6:f4:34:c7:9c:65:fa:8b:
         f3:bf:1e:72:bb:9c:81:73:52:30:93:f5:26:63:2e:46:d3:f7:
         f0:64:60:67:74:52:18:f0:c6:49:6e:55:c3:bd:0a:58:5c:d9:
         09:bc:b5:87:5c:c5:7f:e8:f1:18:20:76:3a:9b:14:ac:fb:97:
         d3:04:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:15 2026 by rpki-client