Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
File:                     GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json)
Hash identifier:          2EMCV0WWC7NQoKdGfBLjkgdf4ZNq0Vv5xdlswvaBDiI=
Subject key identifier:   8B:16:6D:17:0F:BC:01:CF:62:C6:5E:6A:90:0D:E4:3E:9A:21:52:BB
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Certificate issuer:       /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial:       03D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
Manifest number:          03CA
Signing time:             Wed 25 Mar 2026 00:33:57 +0000
Manifest this update:     Wed 25 Mar 2026 00:33:57 +0000
Manifest next update:     Wed 01 Apr 2026 00:33:57 +0000
Files and hashes:         1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: NNqZJKIGZh0aEQZWFWvCekri+9+kZelPnjlIEs9TBC8=)
                          2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: AwUinlhQoZr0cr/LeO9LbpyYPRye/aoN+g7yo3vyhJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
        Validity
            Not Before: Mar 25 00:33:57 2026 GMT
            Not After : Apr  1 00:33:57 2026 GMT
        Subject: CN=69c32d75-9292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ae:0c:c5:8a:ba:51:e6:83:01:87:89:61:e2:
                    ea:09:e0:ed:df:d7:c6:61:d4:2b:f1:8a:27:d6:8c:
                    94:d0:0b:24:64:94:6e:ea:d3:88:11:80:99:99:f5:
                    14:6f:9f:8e:d3:ee:96:c1:2a:4d:04:92:50:4b:53:
                    73:e5:f5:2d:51:99:09:b2:9c:5a:9e:4b:05:07:6c:
                    9f:52:19:09:29:67:40:70:9c:24:f0:5f:66:c7:41:
                    62:0e:3f:37:8a:ed:51:f1:31:b7:59:2c:8d:89:3e:
                    bb:0a:09:3f:b3:70:17:8c:4e:75:10:ab:61:d1:28:
                    2c:ca:eb:85:36:1d:fb:a5:81:44:a9:03:f1:35:03:
                    6a:7c:d2:f4:6c:c7:e2:98:30:e8:ae:55:c3:cf:54:
                    75:94:91:83:7b:16:2d:75:4a:f5:cb:48:51:ef:41:
                    b2:4e:4c:50:19:55:54:98:8d:a4:78:1c:38:42:4d:
                    47:1a:64:a2:f9:b9:21:35:f5:53:02:71:f5:97:94:
                    41:f4:be:70:41:08:37:95:6a:7b:d3:d4:33:d7:51:
                    87:f1:28:4b:de:8f:0e:b0:93:af:23:9d:38:39:6f:
                    03:fd:95:78:9b:70:c1:db:1b:9f:19:d6:80:9c:5b:
                    dc:c4:66:4d:38:8d:3c:dc:04:f4:b9:55:1d:fd:a2:
                    1a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:16:6D:17:0F:BC:01:CF:62:C6:5E:6A:90:0D:E4:3E:9A:21:52:BB
            X509v3 Authority Key Identifier:
                keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:84:02:48:36:18:70:1b:c0:95:e8:5e:34:d4:d5:47:f4:68:
         b4:18:68:25:5e:17:4f:dc:42:e1:9c:57:b3:a4:51:6b:78:bc:
         0e:12:67:bb:6e:f4:9c:82:c4:b3:62:32:40:7c:56:e6:60:39:
         48:15:43:2f:9d:e1:1c:8d:dd:99:b8:12:c5:8e:3b:9c:e4:b3:
         90:56:6e:b8:d3:46:55:41:2e:a1:cf:be:3f:a8:cc:e5:3c:a2:
         58:76:69:71:b1:97:b5:e7:a7:90:c7:e3:54:97:da:66:f5:23:
         c2:71:ce:aa:3b:bb:0f:b5:1d:1b:8f:b5:43:09:ca:b0:23:74:
         db:49:80:79:ba:f7:6d:fc:0f:f8:93:64:89:b4:43:04:a5:13:
         9b:f9:fb:de:63:92:91:01:d9:b7:b0:6f:68:6c:ad:c8:71:7e:
         84:f7:12:e8:63:04:b6:9c:5d:da:58:54:4d:f1:a1:ab:0b:09:
         f6:91:0b:ec:80:21:db:0d:88:f9:1c:af:99:c4:bf:ea:f5:c5:
         08:59:ac:6b:22:85:14:9e:e4:e9:50:4d:b4:23:45:30:0d:6c:
         21:59:8b:e0:f5:ff:5e:f5:74:4b:44:bf:03:fb:cf:0f:59:19:
         9f:7c:4b:b1:d5:f3:2b:21:59:6b:64:27:2a:12:ee:5c:a1:ab:
         5d:15:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:25 2026 by rpki-client