Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
File:                     goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json)
Hash identifier:          NmUoy4ZqaajrosFCQfykdIjdD1227UOc7PUfjx6Fufs=
Subject key identifier:   D0:65:4A:ED:45:3A:13:05:3F:02:B6:BE:57:D4:BA:03:BD:B0:12:3A
Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49
Certificate issuer:       /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
Certificate serial:       06B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
Manifest number:          06B4
Signing time:             Thu 18 Sep 2025 22:24:22 +0000
Manifest this update:     Thu 18 Sep 2025 22:24:21 +0000
Manifest next update:     Thu 25 Sep 2025 22:24:21 +0000
Files and hashes:         1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: tGAmPhCQpnva083MF6Q/X3A80rhb2jnYMiTBeJjtOE0=)
                          2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: ElM40kRXls4915TJFeuEiV6vcriAHquSzfVrwEFHIlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl
                          rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 22:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
        Validity
            Not Before: Sep 18 22:24:21 2025 GMT
            Not After : Sep 25 22:24:21 2025 GMT
        Subject: CN=68cc8696-d123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a7:28:6c:be:04:25:30:a5:bd:33:7f:27:b6:
                    4d:3d:97:6e:9d:78:38:b4:96:a5:2f:1c:9c:ad:1f:
                    81:8b:93:1d:08:b6:a0:14:ad:db:25:c8:06:6d:ea:
                    4d:30:c0:bf:cd:cb:b6:53:34:8f:f0:b4:ae:39:83:
                    11:8e:45:69:a2:f9:3e:2a:59:2b:25:b3:7e:ec:1b:
                    98:91:56:d4:f8:c6:5e:1f:f4:bf:cd:c5:4d:86:36:
                    4a:bf:60:7c:3d:36:7d:8d:87:ed:7a:40:61:b3:8a:
                    d2:e5:fa:98:d7:fd:4a:dd:50:2a:50:bf:bc:3e:15:
                    1b:7e:60:30:54:53:b8:f4:1a:3f:d1:ce:b9:dd:34:
                    e3:a4:39:e4:9a:eb:e9:76:7d:20:31:ed:37:4e:d7:
                    e5:d4:c8:64:27:30:3c:76:a6:bc:76:0f:ea:49:14:
                    8d:32:09:a5:a0:43:92:c8:67:53:4a:da:09:73:12:
                    ec:9e:6f:b9:95:44:d3:d1:55:2a:2d:34:24:85:dc:
                    ae:76:a3:9d:e2:76:73:89:b3:ac:92:be:c5:0e:02:
                    e5:53:36:18:46:59:83:62:42:80:4c:5b:e4:59:f7:
                    c0:41:89:86:f0:e6:b3:4d:f8:df:90:24:54:6f:a9:
                    89:fd:9b:8c:f6:98:6a:5c:09:1f:01:e7:96:dd:04:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:65:4A:ED:45:3A:13:05:3F:02:B6:BE:57:D4:BA:03:BD:B0:12:3A
            X509v3 Authority Key Identifier:
                keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:34:1b:82:f2:18:89:34:b8:94:3c:91:6a:0c:23:1c:95:
         8c:93:17:9d:ff:18:a4:9b:da:78:ef:07:23:82:41:03:6a:b0:
         bb:b0:8d:9c:4f:c6:b9:37:3c:cd:c6:d4:d9:23:ff:a8:57:ef:
         1c:bc:91:c3:31:72:38:98:c7:3f:30:a9:b6:1a:68:d6:65:ad:
         dc:2f:85:9f:b2:90:97:46:6c:0a:82:9a:08:da:5b:5c:e1:71:
         4f:8e:75:1c:30:a2:3a:c6:f3:fa:80:a2:67:37:9c:8f:36:55:
         5c:95:2f:cf:61:82:c4:8d:36:c1:a7:8e:70:df:a3:dc:ad:dc:
         12:5c:82:5b:c1:e1:2c:52:78:69:4d:a9:e3:d1:b8:40:77:a9:
         e6:c5:0d:ca:14:53:04:12:0d:6a:06:55:2a:cb:96:90:86:0d:
         23:b0:86:b9:2f:7a:db:87:41:89:cb:07:3d:3f:93:c3:d6:36:
         e2:0d:16:c4:bc:30:ee:de:36:e8:82:62:85:1c:79:24:2b:8b:
         33:72:86:a0:87:2b:5c:30:6f:a0:82:3a:bc:9d:15:fb:97:07:
         b3:8a:e6:a5:45:33:0e:42:ca:07:6f:48:a0:ba:c5:54:34:88:
         69:9b:30:3c:0a:98:fa:36:a6:64:47:d0:1d:b5:8f:9c:db:77:
         1e:4c:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:32:00 2025 by rpki-client