Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File:                     GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier:          pSlfnYtUFac6N0SGyKTJ3QQs504d0rxqL86eARgUsPI=
Subject key identifier:   CA:02:AB:6A:D8:AF:85:00:35:38:E2:D4:75:92:65:69:E7:03:14:E5
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number:          02A8
Signing time:             Fri 25 Sep 2026 01:35:42 +0000
Manifest this update:     Fri 25 Sep 2026 01:35:41 +0000
Manifest next update:     Fri 02 Oct 2026 01:35:41 +0000
Files and hashes:         1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: 5/Al6/uz09o4iENhlBsrtH3d1a2gzQUjvtd+aASHZOQ=)
                          2: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg=)
                          3: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=)
                          4: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: GCoUxXSsVbAe0WY7DuUx66j+ly/pwEQTvzaDkQp3iFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Sep 25 01:35:41 2026 GMT
            Not After : Oct  2 01:35:41 2026 GMT
        Subject: CN=6ab5cfee-33e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3e:01:cc:02:fc:5b:e3:b3:2b:29:96:de:b6:
                    d3:a1:1d:93:38:b1:54:7b:e4:1b:b8:9a:23:1e:10:
                    25:f8:f3:65:12:78:3a:32:c3:8c:87:b8:13:ab:64:
                    4e:b0:26:0e:e6:e1:49:76:f4:f2:b8:7d:16:40:c6:
                    f2:68:6a:a2:90:ed:19:52:a3:d7:bf:a7:47:5a:1c:
                    f0:26:8e:79:18:07:c4:2c:d3:62:15:52:a8:11:d8:
                    c5:62:e2:be:bc:4a:6c:cb:47:cf:31:9c:01:9e:15:
                    3e:cf:80:40:b4:4a:aa:12:e0:5c:1f:92:86:d9:3a:
                    38:6b:f3:9b:b1:01:13:79:17:83:a1:3e:98:09:5b:
                    ed:cb:79:88:83:49:91:6b:40:8b:25:91:d4:ff:db:
                    98:48:d3:de:c8:51:cb:14:d2:fd:2b:83:c2:95:ab:
                    17:8d:dd:de:4a:f3:b1:fe:2b:e7:43:87:2b:53:e3:
                    ac:b5:ef:26:f3:f4:0d:59:f2:4f:70:6a:b9:8f:e9:
                    2f:8b:74:30:5d:eb:6b:e7:cb:3e:18:79:07:7a:0d:
                    10:ff:bf:7a:b0:88:ca:b4:e8:75:dc:3a:9b:1b:a8:
                    41:f1:62:9c:7b:c3:cd:6d:c6:40:42:40:38:35:9a:
                    39:17:ac:2c:90:f8:ad:22:19:fc:6d:be:db:bc:a1:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:02:AB:6A:D8:AF:85:00:35:38:E2:D4:75:92:65:69:E7:03:14:E5
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:aa:05:a3:82:00:bb:e2:9a:25:fd:c6:bf:0c:b0:3c:15:
         69:14:57:26:a3:3e:79:67:49:5c:a0:9d:39:74:3e:8e:de:bb:
         e5:57:11:ca:71:c7:d9:9b:98:e2:61:8b:b0:f9:55:df:af:3c:
         ca:6e:0d:5d:80:dc:f6:14:3e:ee:9b:9b:e9:29:b1:d8:18:3e:
         c9:18:e3:6c:df:52:8f:ff:0b:c4:a3:d0:be:30:8e:9d:7c:85:
         57:e1:b2:29:5d:f2:5d:cd:6a:42:da:ca:dd:30:6a:13:04:2c:
         5d:34:f5:c2:28:f6:1e:e4:0d:2b:2b:a3:eb:f0:44:16:b6:3b:
         32:b9:d1:d0:50:68:7f:f4:81:f8:2c:0f:39:0e:9c:bd:9a:b3:
         97:f7:b9:4e:8c:8e:66:23:2f:ef:51:7f:bd:bc:7c:a7:22:89:
         bc:42:26:eb:79:05:82:a9:8f:95:dd:d5:f9:c2:f0:00:69:53:
         90:69:c6:ca:93:0c:c3:2e:40:92:91:60:ff:2a:79:7b:ff:90:
         67:04:4b:27:da:af:5f:36:74:21:8e:63:49:6f:3a:8c:59:6f:
         86:4c:5b:cf:1b:c0:80:8d:f0:c6:03:24:96:c5:e0:e8:23:c4:
         ef:8b:98:4d:c0:22:a1:d9:fc:f8:05:19:6e:9f:03:b8:39:0d:
         b9:f8:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:20 2026 by rpki-client