Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
File:                     GxesPclsojRSUCPv02J-ks2IR0g.mft (raw, json)
Hash identifier:          +PMYukYbWJUt77hY3LjEvT/6yn6WIBJzx3b0rywzZ2M=
Subject key identifier:   05:E4:CF:E6:52:87:A4:F0:6D:6C:12:9E:92:29:D2:F8:C0:34:7A:44
Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
Certificate issuer:       /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Certificate serial:       1E13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
Manifest number:          1DBF
Signing time:             Fri 12 Jun 2026 16:05:02 +0000
Manifest this update:     Fri 12 Jun 2026 16:05:02 +0000
Manifest next update:     Fri 19 Jun 2026 16:05:02 +0000
Files and hashes:         1: GxesPclsojRSUCPv02J-ks2IR0g.crl (hash: C0V9evBKFjYOzY/KfljXpsx1tLa9HNbhI1PqksiBijI=)
                          2: 907B9B20E8AD11EBAA895D0AC4F9AE02.roa (hash: BRkeotXr+WaPofrhA/ccsuUEV0af6klyrqasow7IzzQ=)
                          3: 89654CDAB83B11EFAA80DD09C4F9AE02.roa (hash: Y2B9BXK6GgEUgrdOgkuvUr+OvwRamCav5yIYFYLKyOo=)
                          4: 4E2669F4FF3B11EB910E8847C4F9AE02.roa (hash: hsIMVES/RshZRMg/IYSKfaC8xNA1Vhhbh6ui/TW2WWo=)
                          5: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (hash: 3ijGtnKRZtAGtvocDeUrSBYus200G7y6Dr0KE05wtXM=)
                          6: 8A1AF86E94BC11EC9E49DB41C4F9AE02.roa (hash: YuvkBqlEeFCoXBaOZasT0zM29UlrwmymL5NE2blVSiE=)
                          7: 4D609E86FF3B11EB910E8847C4F9AE02.roa (hash: WhkLj0w45a5YtVE3jvzrZ8Dxr8O2vOWWoHPkacPIXzA=)
                          8: C154DA14E85C11EBA2171A25C4F9AE02.roa (hash: IPxwuDAs+rs/dWI7IwZQIjs7sZfbx/rQmmj734bJ2/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7699 (0x1e13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
        Validity
            Not Before: Jun 12 16:05:02 2026 GMT
            Not After : Jun 19 16:05:02 2026 GMT
        Subject: CN=6a2c2e2e-3352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:14:44:5a:a4:2b:34:bc:76:5b:59:80:b1:
                    46:89:f8:de:3f:a0:aa:a5:67:c6:25:c7:40:87:ec:
                    65:00:ae:21:c3:63:fb:32:72:e8:d3:c9:22:b5:4e:
                    55:a7:fb:4f:03:e2:51:55:5a:11:0c:cf:a1:7c:b8:
                    12:d7:a7:6e:72:7d:6f:30:48:ea:af:56:26:72:6b:
                    05:b5:60:db:66:74:68:eb:1a:67:53:27:8c:1c:ce:
                    50:ab:40:ef:28:23:06:e0:27:48:dc:38:5f:f2:a1:
                    fe:d5:b4:4e:31:cd:b8:a8:98:be:84:94:61:d1:ea:
                    fa:03:6c:ab:5f:8e:ce:16:b5:e0:c3:7d:49:b3:8f:
                    3c:70:9b:c9:3e:37:31:bd:c1:ec:22:56:e9:f9:43:
                    69:f6:7d:cc:b7:7e:8b:ed:30:e9:49:02:4d:21:e2:
                    27:4e:28:6a:1a:d7:a7:34:6a:bf:ea:fc:ce:91:96:
                    84:a5:38:a1:1e:de:c2:97:a2:a0:68:37:13:27:2c:
                    5d:7e:a9:8d:97:ff:14:13:72:20:7b:bd:43:b7:d5:
                    00:40:19:6f:dd:f5:16:18:4d:5f:c2:18:f7:94:a7:
                    07:2f:4e:c9:a3:31:1c:21:3b:7d:ba:82:fd:21:02:
                    4e:28:1b:a7:48:00:a4:b7:a7:ed:d2:0a:54:a2:28:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E4:CF:E6:52:87:A4:F0:6D:6C:12:9E:92:29:D2:F8:C0:34:7A:44
            X509v3 Authority Key Identifier:
                keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:07:c7:98:18:da:b4:a4:15:40:bf:ec:4d:61:c8:4d:05:
         62:5b:7b:ad:ff:31:30:d8:98:c7:e0:7e:fc:11:3f:ee:2c:d6:
         28:51:26:eb:0d:91:bd:7d:87:a2:54:1f:ca:cf:53:b4:9d:95:
         0b:27:1a:d3:16:75:4f:74:3a:9b:75:3a:94:8a:36:dd:a3:61:
         36:21:1d:b8:a6:e4:72:7d:8d:8b:1c:b7:0d:d0:79:53:45:b0:
         1f:07:70:4c:b7:fe:3c:15:f2:bd:e7:7a:c5:28:4c:0b:da:81:
         55:61:78:75:c7:78:a3:bb:b6:92:c7:49:38:78:33:39:d3:c4:
         fa:7f:dc:89:98:bb:3f:2f:cc:11:8f:e0:40:30:07:76:7c:66:
         c1:7a:04:e2:d6:30:0b:62:3f:05:dc:76:a4:53:d8:ad:86:7f:
         ae:20:3f:94:c0:16:e2:7d:a0:5a:a0:f1:ae:37:85:27:10:cb:
         93:b6:22:18:9f:37:64:1a:9e:60:79:56:77:e3:51:0b:81:9f:
         b8:ef:2e:05:8c:6e:ca:ce:7b:c0:0a:f6:d6:fa:2e:38:0b:8c:
         2d:a3:41:d0:ba:ed:1a:d6:cc:e4:6b:21:b9:6f:9e:c4:b8:ca:
         6a:3d:4a:4f:07:94:34:e8:dc:0d:3d:f0:62:8d:33:28:a0:bc:
         80:e1:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:46 2026 by rpki-client