Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
File:                     GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json)
Hash identifier:          LqHxq27HlkcnSMSp839LE5XyXEZbV0p3i855P0V1wV4=
Subject key identifier:   82:8B:30:95:D3:ED:3A:B0:4E:E5:3B:78:68:62:06:C3:08:BB:02:C8
Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Certificate issuer:       /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
Certificate serial:       0B85
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
Manifest number:          0B85
Signing time:             Mon 02 Mar 2026 01:45:40 +0000
Manifest this update:     Mon 02 Mar 2026 01:45:37 +0000
Manifest next update:     Mon 09 Mar 2026 01:45:37 +0000
Files and hashes:         1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: Q0wYlJyPJKeB+M1QfS3Io9MvbQjvfiJR/n4rsh96qU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2949 (0xb85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0
        Validity
            Not Before: Mar  2 01:45:37 2026 GMT
            Not After : Mar  9 01:45:37 2026 GMT
        Subject: CN=69a4ebc3-2c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:6d:c3:83:0f:7a:b7:1c:51:45:07:33:0c:
                    e0:19:d4:7b:56:07:e0:92:03:65:a3:5d:1d:9e:db:
                    3f:63:9b:02:0d:77:9a:52:69:90:17:3f:e6:f6:b4:
                    eb:9c:b0:40:5f:a0:35:ec:91:82:9a:f4:15:ec:30:
                    81:23:ec:a7:63:89:ca:80:f8:fd:51:76:b7:d2:db:
                    51:c1:ed:58:14:2e:3f:82:34:9c:6e:57:3d:84:17:
                    b0:09:a5:46:3d:21:67:e0:8c:86:59:62:f8:50:bb:
                    19:fd:da:08:28:e4:10:19:9f:c6:9e:41:05:62:37:
                    b6:ed:98:e5:3e:38:22:9f:27:69:ce:73:e9:93:ec:
                    7b:3f:09:c5:24:5e:8d:30:6e:6a:a7:9f:75:93:f1:
                    3d:e7:7f:45:83:0c:03:0f:04:75:8a:5d:db:f8:2c:
                    be:b0:07:28:31:d2:75:77:ef:3a:27:aa:7b:89:b5:
                    3e:24:da:1d:2d:66:23:1e:e0:ca:94:fa:83:81:c7:
                    96:90:8c:ee:72:a2:20:cc:2a:99:19:6a:03:73:ed:
                    6e:a3:0f:6b:a9:a1:03:c6:a9:9e:0d:2b:e0:35:20:
                    cb:94:5e:6b:ce:27:bb:6a:49:44:03:b1:b4:91:bb:
                    76:4e:3a:57:41:ef:16:6c:87:38:6d:ce:84:11:76:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8B:30:95:D3:ED:3A:B0:4E:E5:3B:78:68:62:06:C3:08:BB:02:C8
            X509v3 Authority Key Identifier:
                keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:54:5a:af:d9:51:62:eb:34:8a:c1:ef:ca:c0:fc:d0:69:80:
         49:df:90:3e:53:f3:d7:31:0d:df:d1:97:a8:f7:2b:df:0f:2c:
         77:96:16:e7:70:f6:f0:98:53:2b:79:82:1f:8c:ca:f8:6b:13:
         04:a6:51:80:20:70:07:27:65:fd:37:7c:a5:e3:4c:16:fa:0e:
         7b:eb:65:3b:e3:f0:13:f9:0a:6a:53:88:c6:a9:f4:77:bd:84:
         7f:fe:36:cb:be:7a:08:8d:b2:f4:1a:77:53:8c:1c:03:8c:9e:
         3a:51:44:1e:bf:68:fe:89:5f:df:45:e3:a1:35:28:31:d6:cc:
         3e:ec:6f:e9:66:b9:a1:ea:7b:63:44:59:1c:24:94:36:c1:d3:
         1e:75:46:bf:06:b3:dc:f9:ee:bd:e4:9b:eb:5a:ae:fd:9b:cb:
         d4:b6:9e:57:db:b0:76:ae:a8:55:69:12:f7:b5:18:87:9c:57:
         0f:1a:de:89:40:bb:ea:67:43:0f:92:12:0b:e7:fd:de:3d:2c:
         f9:53:4b:bf:8f:d5:ed:a2:cb:85:c9:d8:ed:f1:e8:38:b8:42:
         42:69:99:c4:60:1e:65:b6:dc:0c:97:dc:31:63:14:f7:75:0d:
         6d:da:12:ce:d2:80:d8:6b:34:6c:b6:ff:1d:d5:ac:9d:42:1f:
         36:b5:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:42 2026 by rpki-client