Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
File:                     rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json)
Hash identifier:          ETVDVl5D8wIXOGQEtfaLCtDhwUpQ4nWaUgWwXfFxQkQ=
Subject key identifier:   F2:9E:48:35:76:CB:01:1A:53:AB:D1:A6:F9:9B:AF:35:A4:7D:3E:4A
Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Certificate issuer:       /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
Manifest number:          B2
Signing time:             Thu 23 Jul 2026 09:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 09:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:21 +0000
Files and hashes:         1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: iZCcC7RqAJQupJZTF3bYyX42AsH7t1pm0//J+MDkVnI=)
                          2: 802EA36AE88B11F09D8DF0484F6F56BC.roa (hash: CjISRCjOn0m+5030aubSSBLk5SCQO1cBM9gnCnW5SlI=)
                          3: B752BBF0EF0811F098A4972A416F56BC.roa (hash: rSx6SG/CH+Eqp7hGNaOrkPucM6ELj4c471xwycPS5Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
                          rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
        Validity
            Not Before: Jul 23 09:00:21 2026 GMT
            Not After : Jul 30 09:00:21 2026 GMT
        Subject: CN=6a61d825-cdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:76:b2:17:0f:9a:5b:2c:5a:93:48:48:e7:
                    f9:07:e3:b8:50:04:d0:40:b1:60:c9:15:df:18:10:
                    61:e8:6d:b5:f0:ae:03:39:2b:d7:5c:a7:88:91:35:
                    67:a0:63:22:65:c0:d5:7c:47:ca:93:dd:dc:aa:06:
                    e8:0c:12:16:c1:d9:01:77:c3:2f:10:07:59:b2:99:
                    c7:9d:75:7e:03:04:71:50:73:5b:72:fe:80:c5:1c:
                    fc:86:1c:d2:8d:4a:d6:ff:dd:b4:32:68:fa:5f:5f:
                    81:c0:69:40:50:13:33:63:fa:f3:13:d2:d1:92:3f:
                    a8:0e:c7:06:3e:94:b3:53:f1:9c:39:2e:75:44:16:
                    ca:9c:d2:40:95:72:40:aa:f4:9b:5a:54:ec:bd:4d:
                    a5:df:05:1c:99:39:a5:65:56:a8:4f:dd:7e:fe:52:
                    48:85:d7:ed:70:09:75:59:03:cf:99:15:d8:3d:8e:
                    d2:b4:70:d1:5b:d4:fa:dc:fb:9f:02:80:30:59:55:
                    66:83:56:c8:20:9c:8a:f4:2c:03:41:b7:bd:0d:26:
                    3f:b7:0b:3d:cc:e9:e1:e8:cc:08:fd:c9:57:71:cf:
                    60:97:62:cc:87:4a:38:3a:a6:f8:15:28:c4:b2:90:
                    f5:33:53:27:c6:24:22:f7:8d:41:a4:e1:77:a5:cc:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9E:48:35:76:CB:01:1A:53:AB:D1:A6:F9:9B:AF:35:A4:7D:3E:4A
            X509v3 Authority Key Identifier:
                keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:0d:03:f3:76:7e:71:88:df:6f:92:34:c5:11:4e:bc:73:
         d4:06:d2:68:f7:89:84:46:c4:c7:52:0f:b6:4c:9a:4a:4a:c6:
         49:bf:86:75:db:78:48:79:63:e8:a3:10:fd:f3:e4:b7:a9:fe:
         fa:99:df:38:cb:ee:06:97:e2:46:57:be:fa:67:92:13:1f:db:
         de:cd:ff:82:32:5c:3b:9a:4d:c3:95:9c:9e:34:58:a7:73:14:
         3e:41:31:e7:c7:b9:8b:07:46:10:04:49:a3:07:89:34:50:4c:
         f5:dd:64:56:94:9c:50:70:b7:60:82:5f:72:d1:a2:d1:f4:8f:
         8d:b5:85:0d:7a:07:57:03:98:ac:4d:b6:02:cd:69:46:2f:63:
         de:67:7a:dc:5d:f8:ec:95:86:7a:a2:ea:07:d0:bf:26:2d:2f:
         39:8d:5f:d8:db:96:76:4f:c6:d1:c4:19:24:73:0c:ae:fe:14:
         5a:36:bd:3f:45:34:94:9b:46:ce:0f:7e:ba:a5:47:4d:49:25:
         e2:1a:1f:18:19:9b:15:02:70:04:00:6f:23:f3:15:62:cd:e0:
         1e:a2:63:a1:49:db:22:41:e1:d5:82:4f:41:e1:83:3f:26:e5:
         a9:d2:80:2e:29:3d:47:44:7a:ac:48:f5:e7:75:04:e0:9a:d0:
         11:e7:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:32 2026 by rpki-client