Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File:                     GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier:          KGVgZu9rXLnchnFA5cAdBz4heBzWM4wGKU8Z2md95Fs=
Subject key identifier:   D4:29:4F:2E:49:7E:46:7E:7C:11:56:47:91:4C:44:41:46:F9:05:26
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number:          024B
Signing time:             Wed 25 Mar 2026 01:47:29 +0000
Manifest this update:     Wed 25 Mar 2026 01:47:28 +0000
Manifest next update:     Wed 01 Apr 2026 01:47:28 +0000
Files and hashes:         1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: ITB+wteDbQ8b3LwxJOOzIZ3DRlKeMB5DIEzuksZrc0k=)
                          2: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg=)
                          3: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=)
                          4: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: GCoUxXSsVbAe0WY7DuUx66j+ly/pwEQTvzaDkQp3iFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Mar 25 01:47:28 2026 GMT
            Not After : Apr  1 01:47:28 2026 GMT
        Subject: CN=69c33eb1-da6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:41:16:30:42:49:e6:1f:e5:bb:6d:64:ca:
                    2c:89:63:b5:38:55:be:ee:75:7e:63:bb:f0:1c:e9:
                    54:ea:6b:0a:30:93:fc:64:e5:84:f3:3f:54:d3:7e:
                    2f:c0:ba:55:8d:18:b3:08:f9:4e:8e:73:8b:4a:b9:
                    23:61:b3:00:91:a7:57:3a:7f:70:1c:1f:ce:c2:67:
                    41:fe:75:87:09:bc:10:52:52:e4:70:dc:de:6d:fb:
                    10:f2:e3:f1:57:e2:44:65:8d:79:36:d2:d2:9c:b0:
                    a9:52:3f:92:36:64:f3:40:05:f2:80:7c:c3:a2:53:
                    4c:fe:50:66:ca:b0:93:53:ca:b6:70:de:1d:ab:78:
                    1b:24:5d:8f:92:46:9b:ae:e7:10:63:d5:cb:ed:e7:
                    4f:07:40:f2:72:cd:b6:e1:72:f5:4e:3b:ed:3b:48:
                    d6:46:08:24:ec:79:51:05:61:ea:81:08:7b:5b:6c:
                    93:8a:0f:99:03:32:70:af:88:ff:de:48:10:22:a3:
                    76:0d:ce:1a:68:e5:ca:ad:dc:32:ae:36:89:36:b0:
                    cb:58:c7:82:5a:d2:fa:ef:4c:28:b7:2e:28:f6:7d:
                    3b:c7:e3:75:10:05:7f:81:a9:22:fc:9a:dd:3e:a5:
                    8d:46:df:20:f8:2f:f5:0e:a1:aa:8c:0f:08:db:27:
                    c6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:29:4F:2E:49:7E:46:7E:7C:11:56:47:91:4C:44:41:46:F9:05:26
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:26:b4:22:3f:e5:4a:4b:3a:a4:89:81:c3:ba:54:2c:d8:b6:
         75:91:d3:ef:69:24:f1:52:d5:9b:ce:4d:e9:77:77:6f:49:89:
         ed:b9:42:f4:d7:f5:f4:77:41:1c:37:1f:35:38:b5:c4:3a:92:
         9a:5b:c4:2b:1f:e7:39:56:d8:fb:ab:d9:c6:07:54:c9:18:e4:
         70:cc:0c:d2:21:cf:1c:92:a9:dc:d9:bc:a5:cb:2c:35:bb:70:
         95:85:f7:a8:17:62:17:fe:30:aa:4e:c6:32:7c:ec:f3:af:c3:
         47:a8:4f:2b:ec:02:f3:54:1e:f9:5b:03:80:ac:8e:cf:b5:ce:
         39:8a:c1:30:62:3a:f0:1f:bc:27:c7:1c:74:a5:f0:07:35:86:
         2c:3f:98:28:28:33:ad:ee:52:06:3e:dc:5b:ec:86:9d:db:ba:
         6c:1b:ae:48:39:75:e3:4e:ac:a5:cd:45:53:cc:de:2c:21:39:
         58:c4:60:5e:38:aa:9b:64:eb:98:e8:1d:07:0f:4b:4d:c2:bf:
         d6:3d:f5:77:c9:a1:1b:f4:2d:38:87:35:df:1a:9c:b5:40:22:
         17:6b:8e:ba:c2:8a:c2:59:24:2e:31:1a:a6:30:e4:0a:a5:f9:
         e4:d4:55:4e:64:c9:d1:63:77:ac:f4:f3:ed:6f:84:c4:30:44:
         ad:69:e7:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1
RTFGMkNBNTIwHhcNMjYwMzI1MDE0NzI4WhcNMjYwNDAxMDE0NzI4WjAYMRYwFAYD
VQQDEw02OWMzM2ViMS1kYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzc5BFjBCSeYf5bttZMosiWO1OFW+7nV+Y7vwHOlU6msKMJP8ZOWE8z9U034v
wLpVjRizCPlOjnOLSrkjYbMAkadXOn9wHB/OwmdB/nWHCbwQUlLkcNzebfsQ8uPx
V+JEZY15NtLSnLCpUj+SNmTzQAXygHzDolNM/lBmyrCTU8q2cN4dq3gbJF2Pkkab
rucQY9XL7edPB0Dycs224XL1TjvtO0jWRggk7HlRBWHqgQh7W2yTig+ZAzJwr4j/
3kgQIqN2Dc4aaOXKrdwyrjaJNrDLWMeCWtL670woty4o9n07x+N1EAV/gaki/Jrd
PqWNRt8g+C/1DqGqjA8I2yfGKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQpTy5J
fkZ+fBFWR5FMREFG+QUmMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE
MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5
bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE
bHpvYXpTTEJOb3BlSHl5bEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwCa0Ij/lSks6pImBw7pULNi2dZHT72kk8VLVm85N6Xd3b0mJ7blC9Nf19HdB
HDcfNTi1xDqSmlvEKx/nOVbY+6vZxgdUyRjkcMwM0iHPHJKp3Nm8pcssNbtwlYX3
qBdiF/4wqk7GMnzs86/DR6hPK+wC81Qe+VsDgKyOz7XOOYrBMGI68B+8J8ccdKXw
BzWGLD+YKCgzre5SBj7cW+yGndu6bBuuSDl1406spc1FU8zeLCE5WMRgXjiqm2Tr
mOgdBw9LTcK/1j31d8mhG/QtOIc13xqctUAiF2uOusKKwlkkLjEapjDkCqX55NRV
TmTJ0WN3rPTz7W+ExDBErWnnZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:07:51 2026 by rpki-client