Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
File:                     gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json)
Hash identifier:          x7XmbatR4+jt+L+DpH/Jb9s6zBJuahW+Bm/NUePj88c=
Subject key identifier:   4F:21:81:4F:D3:D7:DC:87:97:A2:25:7E:76:0E:68:23:33:00:25:AE
Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80
Certificate issuer:       /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80
Certificate serial:       0C22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
Manifest number:          0C18
Signing time:             Tue 22 Sep 2026 18:41:44 +0000
Manifest this update:     Tue 22 Sep 2026 18:41:43 +0000
Manifest next update:     Tue 29 Sep 2026 18:41:43 +0000
Files and hashes:         1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: Y3NBfKAAZgoUcRdwbPHZIv5BfW5eTegNDnezqjZxkBg=)
                          2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: 4X3ObrBg443mSci6E+V0UQd/b/zW7MQqNF6LiZpBnXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl
                          rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3106 (0xc22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80
        Validity
            Not Before: Sep 22 18:41:43 2026 GMT
            Not After : Sep 29 18:41:43 2026 GMT
        Subject: CN=6ab2cbe7-8b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:dc:6b:ec:cc:c8:ec:48:38:fc:49:da:28:
                    32:aa:fd:f3:92:3d:3a:e3:73:5f:62:ba:70:0d:99:
                    8b:ed:88:3a:fc:b7:c6:ce:0b:ae:c6:c1:ca:b3:82:
                    a7:89:c1:57:a3:db:0a:c7:9c:08:84:a4:c3:f1:56:
                    70:61:8d:c3:cc:11:bd:bb:9d:1c:ca:5a:a9:59:1a:
                    3d:b0:b7:21:8b:9f:b5:47:72:91:b9:cf:6c:2a:d7:
                    f5:de:56:2b:a7:ce:7e:4f:89:41:48:91:83:dc:47:
                    5b:c9:5a:5d:37:31:81:9c:ea:e4:fc:e1:58:27:8d:
                    4b:7d:e6:ca:28:d6:be:dc:bf:96:23:7c:ff:91:1f:
                    21:c6:9c:cd:64:dc:1f:05:64:7d:9c:fd:d7:bd:46:
                    e9:33:1a:a7:2f:bf:bb:5c:ed:eb:e9:8e:b6:a3:9c:
                    08:ec:c4:f3:57:55:cc:96:69:f2:61:ac:d9:d4:51:
                    85:1e:83:93:86:27:29:b1:ed:b8:9c:53:60:e2:18:
                    f0:72:89:f3:96:53:d4:7e:17:23:46:1a:91:33:00:
                    d0:4a:6c:96:19:16:58:ee:2f:97:47:41:97:d4:a0:
                    ad:46:68:7d:78:f4:e4:59:c3:69:7b:cc:db:ab:bd:
                    46:28:11:ec:6a:d9:3e:dd:81:c3:8e:c6:c9:9b:31:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:21:81:4F:D3:D7:DC:87:97:A2:25:7E:76:0E:68:23:33:00:25:AE
            X509v3 Authority Key Identifier:
                keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1d:8a:ea:30:2c:dd:60:e4:99:d6:81:2e:7d:de:99:d6:72:
         f8:d0:4d:b4:b2:d7:73:da:21:9e:e0:ae:b6:4b:d9:8d:db:71:
         6e:dc:86:f1:14:64:da:62:14:81:7c:c0:b7:d8:2e:44:04:11:
         c8:07:81:72:96:ce:de:e5:42:df:28:5b:14:cf:9f:3d:bf:05:
         a4:3d:07:3b:be:93:76:77:76:80:e5:cd:17:75:5d:d2:2f:ed:
         89:3c:df:18:5c:af:a6:53:0c:00:f7:0e:1d:02:f8:7b:cc:8f:
         fb:99:b1:38:1e:56:c7:70:0d:45:28:79:71:7a:91:39:ab:40:
         fa:03:1d:15:ce:64:66:4f:76:9f:70:8c:04:3a:e7:8d:76:0f:
         c7:48:de:92:b4:db:c9:50:ac:ad:5e:52:ba:fe:47:ea:23:0f:
         62:b2:0b:6b:86:3f:e2:84:0b:1d:de:a4:bc:dd:53:11:da:06:
         64:4d:d9:23:8b:bd:46:60:f7:87:83:9f:f9:4f:ef:62:0b:bd:
         d6:cc:4a:f9:c4:a3:c2:c9:f3:3b:2c:a6:b9:5a:99:4a:52:83:
         44:e0:54:d6:73:68:db:2e:5e:0b:46:ec:db:62:b6:9c:4e:c9:
         b2:b4:f9:61:3d:38:cd:97:58:4a:28:9d:87:a5:6f:df:37:b4:
         79:9d:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:06:16 2026 by rpki-client