Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File:                     goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier:          cUlfowAuXH1gDi8dPG2QjK451t8nZFPscjrda7vSgiI=
Subject key identifier:   60:23:75:88:FF:64:EE:8F:4A:9D:33:A7:29:62:A3:D3:77:BE:04:AC
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer:       /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial:       063B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number:          0631
Signing time:             Thu 26 Mar 2026 22:36:11 +0000
Manifest this update:     Thu 26 Mar 2026 22:36:10 +0000
Manifest next update:     Thu 02 Apr 2026 22:36:10 +0000
Files and hashes:         1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: NngC+HvZeHqiZ0aK3WBWKOqEK7L8FRZ2uF5yxflK068=)
                          2: 2BE5310AF27E11F082456479676F56BC.roa (hash: A74oNh1ceC9qOKcui3vBhsxESPini5a/hTsdz/DLy4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
                          rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
        Validity
            Not Before: Mar 26 22:36:10 2026 GMT
            Not After : Apr  2 22:36:10 2026 GMT
        Subject: CN=69c5b4db-ad0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:6e:d1:cf:65:29:e4:ea:d9:0d:67:2d:bc:
                    f8:d1:c9:40:4b:4b:69:16:40:ea:1f:1c:ad:5e:1e:
                    63:0a:d5:c7:76:cb:0e:3e:87:4f:64:e1:a0:9f:02:
                    c0:02:1f:91:4d:19:f8:cd:18:1a:bd:28:c0:d6:b6:
                    89:f5:6b:b4:eb:58:23:de:13:24:68:e0:9c:22:28:
                    d0:26:32:c5:f4:d5:90:e1:31:85:53:22:69:2e:ca:
                    88:e1:8e:25:01:02:4a:87:ed:8d:87:1d:99:9d:13:
                    e8:e9:7e:31:4f:62:a0:0b:3c:cf:93:91:eb:3d:c7:
                    e3:44:b6:9b:3d:18:b7:1b:9b:52:84:43:80:d0:8e:
                    7b:8e:74:0c:56:2c:74:85:ad:86:3a:d4:3f:2b:58:
                    f9:1b:84:3a:3d:bd:42:df:f1:5a:cb:fb:6e:ff:40:
                    a6:76:84:84:8a:ea:22:20:08:c9:df:94:3b:be:41:
                    51:03:9c:4d:c5:e5:15:87:36:7a:ad:a2:76:b9:30:
                    a7:f8:51:4c:4f:d2:54:0b:bb:2f:eb:98:ff:fb:36:
                    a6:c3:27:0f:e1:b1:ba:66:19:34:1b:9e:55:42:e1:
                    1a:ec:9b:00:48:35:2e:bd:e4:0b:99:18:cb:b3:85:
                    d8:3a:39:75:f7:7b:64:0d:49:3c:3d:d4:d8:d6:45:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:23:75:88:FF:64:EE:8F:4A:9D:33:A7:29:62:A3:D3:77:BE:04:AC
            X509v3 Authority Key Identifier:
                keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:95:ee:51:52:5b:e0:75:7f:f4:91:b5:e8:7f:21:b4:c0:e2:
         9d:19:05:8d:e0:d4:32:e5:b6:f9:9a:54:df:e8:36:df:df:19:
         45:32:09:6d:e4:f5:4d:d0:18:3b:17:57:d3:cb:54:fc:db:f2:
         57:93:c2:76:39:90:21:51:61:7a:bb:a4:c0:d6:28:cd:a6:3b:
         f4:3a:09:f8:6e:04:e2:fb:83:01:32:59:de:51:8a:04:99:2b:
         de:a5:bf:86:50:88:0b:b0:3b:9a:f8:4d:51:f8:37:5e:e2:4e:
         4a:19:27:cf:48:ac:b0:c6:0d:bd:ee:e5:84:ad:5b:86:f6:97:
         0f:1c:14:02:45:ad:b3:d8:36:5e:53:e8:61:09:c3:38:64:33:
         1a:7e:78:70:82:bf:57:d5:9f:a0:de:bb:67:f2:0d:e7:f2:d2:
         3e:90:d8:94:93:20:da:7a:45:c4:59:39:a4:1a:70:70:5f:0d:
         22:1f:5d:da:c1:ab:24:65:56:3f:f2:90:8b:ea:d0:36:8c:bc:
         94:a7:3e:23:79:9c:54:f7:db:54:54:b9:3b:28:c0:a4:f8:74:
         d6:62:c2:a6:91:4c:fa:8b:ec:09:b9:4f:fc:87:40:ef:d9:28:
         c2:03:31:b2:74:bf:59:40:f6:1f:9a:cd:c9:02:22:1a:8a:5c:
         d7:fd:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:35 2026 by rpki-client