Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
File:                     gopH06xuawNgEcIzIxcKlzG60iQ.mft (raw, json)
Hash identifier:          Z4GRaUMJ49+f17iquUjsAfDVyvZLB+bThaqucAh+7hI=
Subject key identifier:   DE:6C:B3:CD:0A:39:70:99:2F:10:A3:BA:70:E8:46:94:A9:F5:EF:A4
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
Manifest number:          012F
Signing time:             Wed 25 Mar 2026 05:09:01 +0000
Manifest this update:     Wed 25 Mar 2026 05:09:01 +0000
Manifest next update:     Wed 01 Apr 2026 05:09:01 +0000
Files and hashes:         1: gopH06xuawNgEcIzIxcKlzG60iQ.crl (hash: poTKC3o4TSeMAqR24gIS3zwtPjnuB66xI+xS5LPnzJ8=)
                          2: D83A0A7E1DAF11F0B2131B09C4F9AE02.roa (hash: +d57M7XA1iwaKErPIm6p+j4YRMOhWn89QZNMY2addAM=)
                          3: 76D77AC4DEE211F08292771D536F56BC.roa (hash: eJBqhqLmKG6Wh8NrxsK8kvyZ5MousUNeQkGcMFw/q2c=)
                          4: 7BB946FE52E611F099AC8F40C4F9AE02.roa (hash: P6ZC6luh7A5vMQ8U9N9qXYMfPvqFaeBlexbQm9wISw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Mar 25 05:09:01 2026 GMT
            Not After : Apr  1 05:09:01 2026 GMT
        Subject: CN=69c36ded-1a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:af:e0:cf:c5:e0:e0:f3:49:ab:02:ee:7a:0f:
                    21:1c:72:1a:b7:33:6c:3c:c8:15:0a:31:ee:e7:8a:
                    16:79:87:0e:bd:2b:91:c9:d2:ef:ff:ce:3e:ac:81:
                    58:0e:6e:90:80:6e:12:51:ac:88:fb:4c:da:9d:4a:
                    ff:8f:e1:b9:ce:c8:bb:f7:88:d7:4e:40:5c:91:a4:
                    5b:e9:c2:a2:73:6c:ce:db:11:1c:c6:25:b4:68:b6:
                    56:a6:eb:e4:4f:79:d6:19:06:85:b8:30:9b:8d:16:
                    75:88:b8:69:a9:d8:69:8a:c5:97:8a:d7:19:71:21:
                    a7:26:3a:3d:77:23:83:a2:7d:5d:bd:fe:b6:cd:a7:
                    2d:ef:1c:4a:33:c6:d1:f9:18:82:c4:6d:c3:33:f3:
                    f4:7a:c9:a4:b6:2a:22:35:86:f2:7a:8e:69:9b:27:
                    2e:93:f9:60:b1:e5:a0:19:81:a5:9e:1c:47:b2:42:
                    de:5b:c5:aa:22:6a:b1:54:8e:5b:ed:0d:1d:3c:28:
                    2e:ef:f2:90:64:06:10:52:ff:cc:ea:01:ea:2e:b7:
                    19:d9:5c:12:e5:9f:9a:2b:a3:65:9d:d8:29:25:fc:
                    d3:ba:8c:bf:6b:04:ba:c1:7f:a6:be:77:3a:00:ca:
                    e5:fa:e7:a8:a4:3d:a7:82:84:2c:26:e3:24:18:a7:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6C:B3:CD:0A:39:70:99:2F:10:A3:BA:70:E8:46:94:A9:F5:EF:A4
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:fe:8e:8d:f0:18:c9:22:b9:ad:30:5e:b4:25:ec:f5:64:
         47:21:ec:81:98:d2:0a:32:b3:2d:8e:2d:58:e0:e6:a2:0c:c7:
         cd:31:35:83:7a:a6:37:e7:f8:29:6e:77:d4:72:7d:24:d1:bc:
         b3:95:a9:33:af:9f:09:75:31:2a:74:2a:fd:75:70:75:d5:ad:
         ef:8f:50:ab:5b:bc:cf:25:b5:e6:5b:65:d4:1e:58:a5:ed:ca:
         ac:6e:2d:51:43:16:9e:dd:f4:f6:54:c0:bb:0d:14:7c:00:52:
         4f:0a:68:a1:c9:60:a7:b2:a6:92:e2:33:59:62:75:7c:19:2c:
         61:b9:b6:0a:9c:9b:22:9e:f1:6d:96:16:03:84:6c:f8:48:02:
         81:a9:f2:49:ac:47:2b:db:38:51:3f:47:c7:05:80:a9:75:69:
         54:e5:bb:81:c4:52:76:19:2e:14:3f:c1:e6:21:2e:50:f8:55:
         24:f8:d8:23:90:a4:23:b1:a6:cf:58:98:37:38:7e:36:99:cf:
         7b:06:45:0e:80:4d:dc:35:71:e7:b8:3c:df:43:5f:72:46:87:
         db:5f:55:74:83:af:c2:52:2b:28:09:d0:ac:d7:d3:e7:8f:a5:
         a0:ec:8b:0c:d6:df:fe:a6:5d:20:57:e9:13:fc:b8:43:f4:30:
         41:44:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:48 2026 by rpki-client