Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
File:                     4goGuYVhP9oaaujHZ7pLjX9yQFs.mft (raw, json)
Hash identifier:          6sjWj0VkdH6s2+WbCWx8FboqomgP4BTa1LZVocciPNY=
Subject key identifier:   BF:47:3C:58:82:52:6C:A8:80:13:DB:5D:91:27:5C:C3:1E:30:22:70
Authority key identifier: E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B
Certificate issuer:       /CN=A918B2BC/serialNumber=E20A06B985613FDA1A6AE8C767BA4B8D7F72405B
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
Manifest number:          30
Signing time:             Wed 07 Oct 2026 09:17:36 +0000
Manifest this update:     Wed 07 Oct 2026 09:17:36 +0000
Manifest next update:     Wed 14 Oct 2026 09:17:36 +0000
Files and hashes:         1: 4goGuYVhP9oaaujHZ7pLjX9yQFs.crl (hash: 9qKBFjXYp/MR/P57huiAhAmyn7MmC+DzkJAsP6Tj374=)
                          2: F407EC687A8711F18A4B7A2898A30FBC.roa (hash: dbJOtySmHlCrVLnA91Fl15rpXoiwAXBjnY/J/x5tB+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.crl
                          rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B2BC, serialNumber=E20A06B985613FDA1A6AE8C767BA4B8D7F72405B
        Validity
            Not Before: Oct  7 09:17:36 2026 GMT
            Not After : Oct 14 09:17:36 2026 GMT
        Subject: CN=6ac60e30-e768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:6b:3d:55:65:f0:67:94:7f:8f:62:64:3c:
                    da:67:5c:b7:f8:a3:50:05:52:ef:a4:79:34:c5:3b:
                    47:58:06:2f:1d:b7:32:fb:84:d9:98:ce:02:51:49:
                    c6:78:fb:9f:d6:25:8a:0a:4d:b8:2e:d5:28:4d:8a:
                    6d:06:e1:db:89:dd:0c:a6:f8:03:35:29:7e:52:8d:
                    c7:0b:40:38:5a:45:41:50:db:79:87:1d:05:50:13:
                    c3:a0:52:5b:c3:88:8a:44:cc:f8:c8:32:6c:5b:13:
                    ea:02:ca:b5:5f:65:23:ce:6b:d0:6d:2a:0c:af:27:
                    2b:29:cf:fd:8a:d6:5a:57:d3:e0:e9:e4:94:b8:c2:
                    3d:02:09:67:be:e4:e5:2a:f2:60:32:eb:ec:ee:4d:
                    55:06:9a:36:11:6d:67:da:b8:b3:59:b1:dc:c0:74:
                    5e:a2:a0:e2:42:46:39:28:73:4d:78:16:92:dc:82:
                    10:c6:41:f1:cf:9f:3a:29:5b:61:93:d6:ea:0b:9f:
                    87:c7:92:f9:a0:f2:c2:d5:96:99:6b:aa:2c:0c:2d:
                    60:15:6e:1c:79:76:89:d8:64:50:54:3c:c6:1c:23:
                    8d:fb:f2:c8:47:8f:bc:98:c7:22:a1:bf:50:83:68:
                    a7:be:3b:8d:d7:99:c3:bd:e7:eb:13:5a:8b:cb:a4:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:47:3C:58:82:52:6C:A8:80:13:DB:5D:91:27:5C:C3:1E:30:22:70
            X509v3 Authority Key Identifier:
                keyid:E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bd:7b:6f:44:b7:e3:e3:6e:ea:1c:39:31:17:c7:db:73:28:
         31:4a:e1:7f:f8:83:20:ce:b1:cc:88:17:e9:e5:3a:22:87:46:
         9e:1a:9a:9b:b5:0f:04:30:9f:45:de:aa:d9:3c:d2:6f:fe:ff:
         71:23:19:31:3e:19:6b:42:a7:21:07:3f:09:30:a8:11:20:18:
         1a:7f:8c:9f:95:a7:47:eb:27:fb:ee:32:b9:21:4b:97:20:c3:
         7f:e1:87:07:8e:aa:34:2e:3a:0d:80:98:e9:45:61:ea:3c:16:
         94:98:19:e3:fd:63:77:0b:cd:2e:a5:b8:08:b1:3c:e5:05:8f:
         03:a9:88:44:e7:7e:b2:0f:fc:75:81:36:21:c6:53:11:1f:d9:
         6f:f0:27:7c:06:57:6d:ac:ac:e3:fd:79:84:62:2a:90:52:7f:
         07:95:b3:b5:2c:9c:03:e8:e7:4f:38:40:13:50:6f:19:85:2d:
         c8:9c:27:aa:04:63:de:49:ce:1c:f4:00:4a:2c:57:d6:a8:fc:
         a9:01:e7:24:8b:3b:8b:cc:89:1c:95:61:a9:31:04:49:ec:d4:
         39:e0:ab:50:a6:6a:db:10:c0:94:6a:ab:39:f4:0d:9b:16:b2:
         33:ba:c8:f1:60:47:46:f1:3c:68:50:b7:48:b4:3c:5b:ff:a2:
         fe:8f:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:20:13 2026 by rpki-client