Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
File:                     rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json)
Hash identifier:          ldwWFWXzeJSwCmASoVqACaKs/D2tGHPdluWFcXUMM3Y=
Subject key identifier:   D5:A2:C5:7B:C3:E6:80:CA:B6:D1:F4:C6:16:79:2D:CF:A9:B5:AC:B3
Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34
Certificate issuer:       /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
Manifest number:          0564
Signing time:             Sun 05 Jul 2026 01:06:55 +0000
Manifest this update:     Sun 05 Jul 2026 01:06:55 +0000
Manifest next update:     Sun 12 Jul 2026 01:06:55 +0000
Files and hashes:         1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: 4pPlxUwITwzDE9jimLtgznL4HtxrUxC44bBoMDDQCoY=)
                          2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: Z1lkPboS7Do5JVczgOK46BmhKy5Eyozp7p6CLVvAhpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 01:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34
        Validity
            Not Before: Jul  5 01:06:55 2026 GMT
            Not After : Jul 12 01:06:55 2026 GMT
        Subject: CN=6a49ae2f-64c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:18:6f:88:30:fe:72:34:08:91:ff:18:bc:
                    6e:32:c4:b8:6a:80:ea:d0:e1:70:ef:5c:d4:b7:2b:
                    5d:18:33:7f:e5:38:2c:41:dc:94:d6:f8:c3:c8:4c:
                    82:70:1a:3c:37:9f:8d:9a:0b:0c:39:63:af:d9:51:
                    c5:b7:8a:6f:cb:d2:b7:93:34:ce:b2:59:67:eb:43:
                    35:6b:fd:12:51:f8:b5:3a:4a:8f:e2:d5:04:6f:0e:
                    4c:ca:8a:f5:04:5f:9b:4c:d5:1b:da:a7:18:dd:97:
                    d8:db:0c:ee:3e:1d:f9:33:45:b1:6f:db:be:4b:08:
                    57:6f:d7:2f:37:72:f1:ec:9d:53:cc:66:7c:a5:a9:
                    08:cd:6b:a2:b2:f2:04:bf:e3:19:25:49:d1:04:ef:
                    53:ba:15:c1:78:91:66:ff:ec:13:7b:f0:83:9a:63:
                    3d:ed:11:7c:69:fd:bd:9e:7f:c0:d5:f6:79:7d:89:
                    41:57:08:41:3a:4a:75:ce:ce:e0:a0:7e:17:fb:48:
                    b9:d2:0b:05:33:d2:31:74:13:40:d7:06:15:b7:93:
                    ce:93:97:4c:1f:5d:72:69:93:16:5a:fd:0e:01:38:
                    b4:0c:32:7a:a5:e7:98:05:87:80:e6:cf:c1:85:6d:
                    9e:fa:8e:81:b9:4a:a7:80:ce:1b:60:20:61:7a:fc:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A2:C5:7B:C3:E6:80:CA:B6:D1:F4:C6:16:79:2D:CF:A9:B5:AC:B3
            X509v3 Authority Key Identifier:
                keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1f:59:ae:cb:ea:72:4c:93:e3:d1:4e:f8:7e:a5:25:6a:eb:
         fe:c2:38:3b:de:b9:5e:a3:3f:ab:83:b7:12:a0:b5:08:73:c1:
         54:84:cf:d5:d5:ce:84:d4:a2:7e:78:0a:bd:74:1a:f1:ad:b1:
         a6:69:64:6c:b0:fa:af:4c:7b:9e:0d:5e:f0:05:97:22:07:88:
         54:f2:9e:54:19:8d:04:52:1a:b8:7e:61:e8:f5:4a:dd:c3:91:
         7b:ee:97:42:db:20:04:d3:fc:58:2a:0c:a7:f3:2c:b9:13:57:
         99:0e:f4:d4:52:8d:71:ed:de:5a:60:93:08:2b:55:53:5d:0c:
         5e:bb:9b:99:28:68:78:80:45:d6:fc:87:22:3a:fe:4b:59:2a:
         2f:3e:20:8c:6b:c3:ce:25:97:9b:12:b3:6d:44:0f:ff:45:39:
         f4:07:09:60:ef:19:ec:60:6c:b7:a4:6b:72:93:e5:ea:5e:ad:
         1a:52:38:3b:b0:18:26:50:7d:17:2e:ce:b5:1d:be:0c:af:d4:
         36:fa:8f:f1:57:fd:24:42:cb:17:c7:28:2e:ad:c4:54:0a:33:
         31:ce:61:9f:60:ae:02:c1:59:da:eb:e6:c5:fe:7d:df:50:28:
         93:01:1f:99:92:b3:f9:6f:6b:cb:f8:da:94:6f:29:81:75:5b:
         f8:8c:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:28 2026 by rpki-client