Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
File:                     8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json)
Hash identifier:          4ZYSGZOpR72KsKNcLJEZhb5ZWHVymus8PRef4J/ZNXc=
Subject key identifier:   CA:0E:37:3B:C3:6E:54:C6:6F:26:79:2C:49:D8:18:0C:16:90:E9:A9
Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14
Certificate issuer:       /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
Certificate serial:       0616
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
Manifest number:          060D
Signing time:             Wed 22 Jul 2026 23:35:46 +0000
Manifest this update:     Wed 22 Jul 2026 23:35:46 +0000
Manifest next update:     Wed 29 Jul 2026 23:35:46 +0000
Files and hashes:         1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: 9k23lfAS+GCFmw5OvNVGQrStUk+jfEakbIzWXlaa+lY=)
                          2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: lkhGPvHLt5B4SMlhrUjjiqTdeEOWM5w+xJQVTXf+Zdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
        Validity
            Not Before: Jul 22 23:35:46 2026 GMT
            Not After : Jul 29 23:35:46 2026 GMT
        Subject: CN=6a6153d2-2962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:35:67:96:4e:50:c0:32:05:c7:2d:e2:3b:2d:
                    1f:00:d1:09:0e:f1:8f:12:dc:8a:bf:dd:b1:bd:63:
                    4d:68:f4:8a:bc:f2:37:bb:03:54:bc:2f:1b:87:f7:
                    3f:be:f6:04:09:87:ef:c2:3b:7a:80:63:9c:eb:91:
                    9a:b5:ac:ba:24:52:39:74:3d:1d:56:64:ce:69:d4:
                    0f:ed:83:73:ed:48:80:05:ef:7a:38:46:0a:bb:5d:
                    ba:e4:2b:28:08:00:49:93:af:44:20:e2:37:e8:aa:
                    7c:64:97:62:7a:31:1c:bf:3e:6b:96:0a:34:2e:ba:
                    4d:96:9c:02:bd:5a:fa:d7:de:e2:cc:f3:8c:b1:0d:
                    76:c1:63:aa:b7:89:02:93:66:ab:dd:18:26:76:0c:
                    b9:a7:22:fc:58:b9:43:a3:d7:9f:11:2e:77:1a:ea:
                    f8:89:1b:fe:a4:ae:30:83:a2:33:5d:a1:a3:4b:0a:
                    2b:47:20:0a:8b:af:1d:ad:5f:d6:f8:f9:c7:e5:c9:
                    0f:36:b3:bd:20:37:0f:bf:2a:c1:42:4b:45:fa:04:
                    20:5a:0d:a5:47:86:0d:4f:b7:56:c9:73:b2:88:84:
                    e0:ec:0c:ee:ab:04:48:7a:d3:a5:f4:f7:5a:67:79:
                    6a:b9:39:fb:55:65:30:1b:b0:66:f5:02:00:8b:67:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0E:37:3B:C3:6E:54:C6:6F:26:79:2C:49:D8:18:0C:16:90:E9:A9
            X509v3 Authority Key Identifier:
                keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:eb:38:bf:95:95:db:82:f9:b1:80:e1:6f:eb:c8:7c:f4:
         48:27:df:93:2a:b9:f7:f8:a2:c6:21:3b:0e:b8:b7:ba:e0:d2:
         05:e2:cb:9d:37:74:29:86:c1:57:8d:4d:3b:a4:07:cd:ab:9d:
         45:70:c2:76:0f:ca:df:31:1d:97:54:e4:4e:d2:36:97:e0:fa:
         7d:d1:c3:b1:c3:8e:c5:c5:ea:30:91:d9:b1:08:89:4c:0f:e9:
         5a:0c:c6:fa:15:14:15:8c:3f:1e:e2:b6:f1:a1:2b:cb:68:d5:
         31:80:aa:ac:b4:97:1e:fc:40:ef:c6:08:f8:1f:1d:2d:69:db:
         39:bc:11:5b:f5:44:a2:d9:77:37:d5:cc:03:26:f1:d6:87:4b:
         a9:d3:19:40:61:c5:8f:94:ed:17:24:6f:ca:d0:91:e2:55:09:
         ae:14:04:96:2b:4c:c2:fd:e3:6e:f4:5c:15:ae:90:99:ef:c9:
         ad:f5:fa:54:9f:31:b8:57:4c:ef:b3:57:9a:8b:44:7c:25:a4:
         59:60:e7:7c:de:21:8d:c8:16:24:78:a7:c8:a1:1f:1a:c0:48:
         a5:f8:06:05:bc:4c:72:fe:4d:1a:ce:3f:d9:b3:9b:a8:2d:20:
         42:7c:ea:9a:aa:93:66:0c:b6:8b:31:7a:6d:71:89:de:fa:78:
         46:6e:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:29:02 2026 by rpki-client