Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
File:                     GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json)
Hash identifier:          a16gYru2MMllxF09NWim0hvlTm0pPwFPyWggigcDCbA=
Subject key identifier:   E0:07:73:6C:22:05:04:F6:29:77:14:F5:97:3B:CC:03:01:90:BE:DB
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Certificate issuer:       /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial:       042E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
Manifest number:          0427
Signing time:             Tue 22 Sep 2026 23:54:13 +0000
Manifest this update:     Tue 22 Sep 2026 23:54:12 +0000
Manifest next update:     Tue 29 Sep 2026 23:54:12 +0000
Files and hashes:         1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: 8IVzq/rt2hJffXkyh5IfdCqotxf5pVeYoOW9VvVAh1g=)
                          2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: AwUinlhQoZr0cr/LeO9LbpyYPRye/aoN+g7yo3vyhJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
        Validity
            Not Before: Sep 22 23:54:12 2026 GMT
            Not After : Sep 29 23:54:12 2026 GMT
        Subject: CN=6ab31525-28bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:8c:90:53:de:18:13:57:d0:74:0e:7b:e6:
                    76:fc:71:21:23:75:c8:c1:5a:67:64:5f:15:da:65:
                    66:24:a7:52:b4:5e:a9:ae:4a:bc:a0:2d:a5:6e:f9:
                    78:a4:0f:8a:3b:40:ec:f6:e4:45:18:f2:10:2c:f4:
                    4a:4b:87:76:96:dc:75:4d:a7:8f:c3:98:ba:8b:24:
                    18:e1:59:d1:ce:03:cc:75:d7:62:c5:c4:fe:10:42:
                    6c:0d:5d:a6:2b:92:ce:57:f4:63:28:47:6e:99:77:
                    a6:7a:fc:c1:ae:47:61:80:7b:7d:5b:25:f5:81:3b:
                    50:54:7b:e2:0c:03:ad:9d:a5:33:5d:91:a2:ec:97:
                    16:bd:2a:d3:e4:9b:4a:52:89:fd:d2:2f:ec:ab:8c:
                    55:c9:23:2e:5d:61:29:93:0d:44:9b:75:77:69:ca:
                    35:1e:c8:ca:62:b5:3f:38:1c:28:15:05:4c:8c:69:
                    c5:ce:8c:83:67:91:3f:04:c7:05:ac:eb:a1:08:c1:
                    68:75:49:4a:76:dc:0c:16:db:4b:bc:94:49:17:bd:
                    02:cb:15:b1:9f:40:92:7a:ff:01:01:61:cd:af:cd:
                    19:aa:0a:59:8d:7d:70:c9:d9:17:37:b4:13:fd:d6:
                    0a:ab:10:56:39:1e:f6:3f:6a:8c:f6:30:86:d2:bc:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:07:73:6C:22:05:04:F6:29:77:14:F5:97:3B:CC:03:01:90:BE:DB
            X509v3 Authority Key Identifier:
                keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6c:28:34:d0:d9:76:b0:83:21:ec:7f:18:98:a8:d3:ba:b1:
         91:a2:89:a8:01:cf:c0:e9:19:8e:8e:06:bc:eb:69:3c:09:80:
         78:18:02:fe:4b:a8:77:ee:71:06:eb:76:74:d7:72:70:9a:af:
         b3:c9:1a:0a:23:f8:47:e8:de:09:52:df:86:d6:36:2e:42:02:
         1d:a7:cd:b6:e0:63:db:5a:2b:51:8c:33:af:47:50:62:9b:ed:
         78:ea:8d:b0:c3:5c:d2:13:84:19:80:71:a9:2f:90:49:cc:9b:
         83:e0:c9:6d:bc:41:22:b1:23:30:86:f8:fa:f8:74:10:3b:32:
         63:d6:3e:fc:5f:a1:89:24:a6:df:8f:ef:bc:25:db:08:d0:ab:
         65:38:77:5c:9f:63:b5:2f:58:d5:ef:7b:8f:b3:b2:a7:56:1f:
         11:dc:b0:14:10:54:f1:74:48:0c:c0:13:87:e6:e2:8e:e3:9e:
         d2:eb:80:65:7b:21:cb:83:7e:1b:49:4a:89:b9:0a:34:5a:62:
         6f:b8:d3:57:cf:54:11:8d:94:b4:cd:03:5d:18:49:cb:30:ca:
         43:6d:6c:c3:10:f8:e4:f5:37:5e:17:2c:66:0f:78:1a:1b:8f:
         40:58:d1:3e:40:50:ef:74:e9:a7:b3:0a:ce:53:70:bd:37:af:
         4b:8b:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:11 2026 by rpki-client