Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
File:                     GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json)
Hash identifier:          CzTqL6JT5see9rcAUmZGcLmUUZ16csMBY7fD9BrHsbg=
Subject key identifier:   B3:A5:35:A0:69:09:E3:F9:C8:48:36:F4:DF:48:D0:8C:92:32:31:CF
Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
Certificate issuer:       /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Certificate serial:       3587
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
Manifest number:          3584
Signing time:             Thu 24 Sep 2026 14:35:02 +0000
Manifest this update:     Thu 24 Sep 2026 14:35:01 +0000
Manifest next update:     Thu 01 Oct 2026 14:35:01 +0000
Files and hashes:         1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: FPJVtZ8dZ2noO3yQr/6Nc5QPQiDKCMnVUEDpDWaXTnI=)
                          2: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (hash: TqlpecplvSdLV29TPM7WN07wNwjZ8MAc88miHR0h6qc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
                          rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13703 (0x3587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
        Validity
            Not Before: Sep 24 14:35:01 2026 GMT
            Not After : Oct  1 14:35:01 2026 GMT
        Subject: CN=6ab53516-cfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:b5:27:24:ed:17:a0:ef:d8:a4:91:04:fe:
                    51:6a:79:d8:53:84:0f:19:9e:08:74:de:06:e1:a3:
                    25:f3:d2:8d:09:88:80:ad:f7:24:ff:6e:2e:7f:36:
                    2f:82:24:d3:ab:71:82:96:5d:f3:4e:28:e7:51:45:
                    97:85:68:21:59:25:a0:48:c7:ed:05:79:75:1b:81:
                    c6:7f:a4:74:45:7b:dc:10:be:98:70:5c:85:6a:92:
                    e6:44:57:f9:5a:d4:0a:1a:67:62:62:4b:6b:cc:65:
                    c6:03:32:1c:5e:ea:8b:40:f0:df:05:dd:6c:49:27:
                    e4:d3:3c:b6:b7:52:44:81:6f:e3:92:90:94:76:11:
                    3c:f2:05:66:cf:80:c9:75:47:87:96:bd:85:a1:8c:
                    56:81:84:c6:ff:cb:82:dc:d1:07:ea:96:f8:4e:62:
                    4d:9c:fe:66:ff:66:e0:ff:cf:ba:4a:5f:df:83:37:
                    3d:8b:4d:a7:9b:21:16:07:41:e7:df:f3:a1:51:4e:
                    98:bf:4f:d0:0f:92:50:b8:1b:11:77:b9:0d:7a:f1:
                    4c:3d:4c:eb:3d:d5:51:cc:f1:97:01:8b:3b:8d:0a:
                    69:2e:30:67:88:69:93:f1:81:ea:43:7f:30:63:85:
                    b5:b2:76:0c:f7:88:1c:ac:89:fe:d7:d5:ca:51:b4:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:35:A0:69:09:E3:F9:C8:48:36:F4:DF:48:D0:8C:92:32:31:CF
            X509v3 Authority Key Identifier:
                keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2d:6f:3c:f2:d7:0c:80:9d:c6:f8:c4:ee:cb:2d:6e:f7:8f:
         46:5a:98:7e:c6:f5:79:e1:4a:b8:69:11:45:e2:97:bc:9f:11:
         a7:7f:8c:52:a3:b8:70:9c:ed:cb:94:48:da:f6:a4:04:d3:53:
         c7:23:0c:79:f2:53:9f:47:ae:16:ed:d9:14:5b:5f:5f:fe:11:
         45:51:66:88:a6:e4:74:c8:69:bd:69:2e:39:44:15:89:27:bd:
         8e:4f:19:4d:fc:1f:50:5c:f0:f0:45:f0:7c:37:44:de:8d:5a:
         56:de:7e:99:81:f6:49:67:b4:43:f8:44:d2:79:ca:16:c4:aa:
         31:d0:36:21:43:5f:b1:0b:93:ab:e3:44:b0:32:1c:fa:24:4d:
         02:8d:32:b2:6f:ab:17:00:cb:08:03:64:de:cf:6f:bd:0d:39:
         38:53:c1:c6:e0:a9:9c:e8:43:b9:f5:72:18:b5:0f:de:8e:49:
         0d:11:89:ce:5d:80:b1:cb:57:17:19:da:43:99:fa:c5:ad:a0:
         88:29:f0:a3:d9:64:81:ad:b4:c5:3c:7c:eb:13:3f:73:e8:43:
         e8:fe:b8:0d:56:6f:c8:fc:0e:48:85:26:79:4f:95:76:d3:4b:
         a7:0c:63:0f:82:24:61:76:e0:53:80:7d:c5:95:24:39:46:85:
         bd:89:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:50:35 2026 by rpki-client