Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
File:                     goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json)
Hash identifier:          b1qW86KB/Tjxs/BThhSV67e95bm0xDYDO1Y/mzOIX5Y=
Subject key identifier:   20:4C:7F:40:81:BD:51:71:9E:70:C5:6E:21:A3:FC:F1:8F:A4:FC:15
Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49
Certificate issuer:       /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
Manifest number:          06A6
Signing time:             Fri 22 Aug 2025 22:19:35 +0000
Manifest this update:     Fri 22 Aug 2025 22:19:35 +0000
Manifest next update:     Fri 29 Aug 2025 22:19:35 +0000
Files and hashes:         1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: 5Uku+vVZyIlQQ11O6IKr50J3LToexG811WocMNUDg74=)
                          2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: ElM40kRXls4915TJFeuEiV6vcriAHquSzfVrwEFHIlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl
                          rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
        Validity
            Not Before: Aug 22 22:19:35 2025 GMT
            Not After : Aug 29 22:19:35 2025 GMT
        Subject: CN=68a8ecf7-246c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:96:e4:6c:8f:9b:53:24:4a:02:a9:b6:62:c3:
                    3d:62:96:a0:ae:7b:46:7c:84:95:0f:48:c3:cc:3b:
                    f9:37:04:3e:3e:c1:76:1e:26:20:02:bd:cb:f2:8a:
                    f0:a6:95:f9:49:5c:cf:af:0e:94:d3:e4:3c:4b:0a:
                    94:b3:a9:2a:0b:9f:d1:99:e0:55:f1:d0:db:bc:05:
                    c4:fd:52:fc:34:6c:0e:4b:b0:b4:f0:95:65:10:6e:
                    81:04:2e:0c:dc:f9:c3:d7:b9:07:a9:8a:99:e8:ad:
                    3e:17:f2:61:a3:fd:5d:44:7d:7b:02:c2:b9:f1:54:
                    6e:c0:2d:aa:85:38:cc:44:13:97:0e:f5:21:61:e8:
                    ba:00:e2:f3:4a:82:2c:8d:c1:58:97:03:7d:4c:94:
                    25:58:85:c2:58:bd:cc:71:58:d6:f4:8a:37:34:79:
                    68:1f:4b:5a:11:a2:4a:38:dc:03:3b:f3:cd:27:ca:
                    08:1c:d3:46:a2:41:dd:df:d3:7a:31:3d:4d:a8:75:
                    4f:f7:e9:3a:da:2f:c5:af:d8:65:2b:4a:37:eb:61:
                    eb:f9:a4:1f:e5:ac:bf:a4:0e:f4:cf:39:56:59:2d:
                    c7:f5:b0:a7:a6:d0:d0:a7:9c:30:0b:b5:1c:af:52:
                    65:dc:bc:ca:c6:bb:47:0f:d9:9f:a1:70:45:6b:6f:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4C:7F:40:81:BD:51:71:9E:70:C5:6E:21:A3:FC:F1:8F:A4:FC:15
            X509v3 Authority Key Identifier:
                keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:15:18:fb:3d:ac:24:07:73:3f:f7:6a:f9:79:33:a7:f8:3f:
         41:93:aa:0d:ca:cc:69:22:d9:64:46:39:eb:3a:ba:51:81:e6:
         0c:e4:e0:17:8f:14:3d:77:05:e4:22:6f:25:f1:a6:6d:5f:f6:
         60:3d:cd:46:1c:25:b7:da:d1:f7:5a:da:5f:f5:28:a2:2f:27:
         4e:39:10:e5:61:02:c8:a3:b3:08:e5:94:e9:6c:21:4e:31:aa:
         e8:0b:b3:f9:8a:02:f7:4d:94:ab:5b:23:2c:00:33:cc:ba:ce:
         28:1e:30:23:4d:30:cf:6e:09:35:db:dd:43:78:d8:3b:b8:62:
         ea:ec:6c:4c:63:66:42:91:a5:a6:2c:11:52:01:81:eb:3d:78:
         41:a2:98:90:0c:70:60:ae:cd:1a:fb:8b:24:75:03:86:bb:5b:
         e4:2f:00:2a:ba:01:3f:98:38:60:6c:ed:2c:65:c1:89:5e:4a:
         c2:9e:fb:3b:78:39:38:8a:6c:9c:59:7b:49:e8:8f:b3:8f:76:
         be:3e:79:79:ee:d9:cc:32:32:f8:29:a0:91:2c:83:7f:51:ac:
         37:e0:1d:e8:16:92:d1:a3:09:e9:a5:b5:e8:6e:e0:b2:d5:25:
         46:46:21:f3:65:87:65:f9:62:90:9d:26:50:ea:50:48:d8:92:
         77:f9:cf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:52 2025 by rpki-client