Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File:                     GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier:          FoEQrpqETA59I18T0z8I8Z2el0phthiI6DHTzGB/OAg=
Subject key identifier:   54:09:8D:D3:27:0E:41:B4:7B:62:7B:56:C3:E0:0F:D5:DC:01:07:9B
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       028B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number:          0278
Signing time:             Tue 23 Jun 2026 02:06:19 +0000
Manifest this update:     Tue 23 Jun 2026 02:06:19 +0000
Manifest next update:     Tue 30 Jun 2026 02:06:19 +0000
Files and hashes:         1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: rAO+B6ySIJyKl+kthF4S7OUWwlkP3bkehqdg5qdRok4=)
                          2: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: GCoUxXSsVbAe0WY7DuUx66j+ly/pwEQTvzaDkQp3iFo=)
                          3: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg=)
                          4: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 02:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Jun 23 02:06:19 2026 GMT
            Not After : Jun 30 02:06:19 2026 GMT
        Subject: CN=6a39ea1b-8043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:6c:b4:f4:ff:a9:8f:d5:c9:01:ec:5f:f3:
                    2c:8b:24:37:1c:22:25:79:76:cc:93:40:2e:47:bd:
                    8d:c5:19:39:19:49:db:81:bf:2c:d2:bc:d3:84:61:
                    5b:cb:33:10:53:82:0e:01:ea:8f:32:cf:34:c1:c3:
                    6f:d2:21:6d:dc:fa:ce:cb:c3:7f:25:63:34:a2:09:
                    2f:00:ef:58:ce:7c:07:a2:1e:87:13:1d:55:a4:45:
                    8a:54:b6:3c:a6:2b:1d:6f:db:2f:ce:b0:da:86:77:
                    35:06:d5:eb:fd:38:d1:de:ed:ed:fc:68:e6:4f:da:
                    32:e3:d5:cc:6e:f2:56:1a:d9:93:dd:01:57:cb:af:
                    da:e3:94:04:30:21:da:29:ed:33:21:a0:1a:9c:b7:
                    32:77:13:e6:c4:0e:0d:9c:7a:9c:ba:62:c1:2e:37:
                    bd:ea:85:11:fb:85:45:ea:ba:97:a8:bf:bf:3e:da:
                    f7:44:b5:48:02:20:85:7d:9f:4f:71:cd:fc:bf:fc:
                    df:fd:b0:55:ca:d3:4a:6f:a5:34:18:6f:a5:7f:99:
                    b6:85:9b:52:5e:99:e6:e3:34:bf:98:a2:12:9b:23:
                    29:08:cb:89:ae:29:21:02:72:5b:90:cd:20:95:38:
                    2c:77:7f:36:bc:29:1c:1c:4a:4e:81:32:19:73:ec:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:8D:D3:27:0E:41:B4:7B:62:7B:56:C3:E0:0F:D5:DC:01:07:9B
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ac:ff:d1:f6:b3:3a:90:dd:53:34:cd:62:d5:6a:f4:ac:c0:
         13:b0:30:76:1a:d4:77:bd:a8:f4:33:80:94:5c:4b:24:95:ee:
         79:f4:09:40:da:54:77:0d:f4:11:31:6b:98:fe:5c:82:5d:21:
         65:aa:2f:1c:df:b4:e5:1b:49:66:5c:11:f0:aa:b2:a8:33:8e:
         50:fa:e4:c4:58:28:b0:66:ac:fd:61:a5:c7:2a:be:40:b9:49:
         37:a9:04:c7:b0:d4:d8:82:76:af:a1:04:96:92:b0:3d:7e:97:
         cb:29:98:66:ee:00:09:6d:25:3f:cf:88:a3:44:d6:00:ee:65:
         ab:3e:b4:85:70:b3:63:72:02:e4:7c:51:76:85:cd:db:bd:16:
         83:6f:23:02:39:97:7f:7a:34:ae:f4:ac:c3:b2:67:0b:20:60:
         e7:cb:b5:05:13:cc:e3:c6:b3:ce:94:c4:56:b3:15:a0:ec:25:
         1e:22:c2:12:b5:1b:3a:6e:e6:e7:49:0d:6a:12:49:a4:7c:90:
         c2:84:da:78:3d:e5:25:34:88:1a:92:46:c6:5d:a6:82:c0:38:
         08:fa:9b:97:a5:85:c8:59:a1:29:8c:03:7e:f8:00:b4:4d:d1:
         5d:cc:33:55:1b:b8:8e:4b:79:e3:ee:c0:2b:5a:51:16:43:b8:
         06:f3:07:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 13:15:12 2026 by rpki-client