Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File:                     GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier:          Ofnut+eB37f3LOBLLxGqZWeLUbtr4tDOf6/Sd5DZADI=
Subject key identifier:   8B:EC:95:FA:70:5D:93:99:21:72:1A:95:55:D4:13:76:3F:EA:5E:00
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       02A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number:          0295
Signing time:             Wed 19 Aug 2026 02:15:20 +0000
Manifest this update:     Wed 19 Aug 2026 02:15:20 +0000
Manifest next update:     Wed 26 Aug 2026 02:15:20 +0000
Files and hashes:         1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: HBS0oluB1J9UJnaaOETr0LM0WYAVCx++YtWcj3GQTbY=)
                          2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=)
                          3: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg=)
                          4: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: GCoUxXSsVbAe0WY7DuUx66j+ly/pwEQTvzaDkQp3iFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Aug 19 02:15:20 2026 GMT
            Not After : Aug 26 02:15:20 2026 GMT
        Subject: CN=6a8511b8-76c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:55:08:c3:ef:ee:ab:cf:5b:f4:9a:7b:63:
                    ae:88:04:94:bb:ff:10:eb:f9:ed:ed:e6:c9:64:ec:
                    b1:1b:ce:14:c9:83:14:77:94:fd:39:a5:a8:22:d0:
                    f5:d9:2a:75:3d:d6:ad:5d:7c:a4:ac:f5:98:14:9e:
                    db:21:9a:1e:e7:03:a6:7a:62:25:92:2d:31:89:c3:
                    e4:4a:de:1b:a8:e0:a1:de:ec:f4:cf:b5:db:86:e2:
                    9e:63:c3:ee:fe:83:36:f1:b3:cc:4d:57:7f:bb:ca:
                    fa:11:6d:45:31:7c:05:5f:3e:fa:28:2f:43:8e:1f:
                    7c:72:be:6d:21:d7:54:e1:21:11:67:2c:62:ad:77:
                    15:dd:41:d6:85:83:3e:a7:47:27:70:af:e6:de:f4:
                    0a:d6:0e:52:fa:e8:2c:e5:58:f9:2a:7a:1c:42:0e:
                    30:b3:38:10:79:59:32:13:28:9e:97:69:ca:81:71:
                    3a:b9:ca:0c:16:22:24:f3:2b:a7:4d:e0:29:60:c8:
                    d0:cb:c0:07:9c:14:6b:4e:5b:1c:b2:bf:8b:3f:8a:
                    e9:74:7c:bf:fd:e7:4f:bd:75:ec:03:a9:de:cb:a2:
                    7d:be:8d:93:cc:20:97:42:44:c5:4f:87:78:bb:33:
                    f5:ea:ff:a6:98:e9:05:d0:a4:f1:bb:33:43:e7:cc:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EC:95:FA:70:5D:93:99:21:72:1A:95:55:D4:13:76:3F:EA:5E:00
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:99:65:6d:a7:61:62:1b:a5:d5:84:2a:7f:d8:0d:65:29:39:
         0e:a0:aa:e9:78:a4:d8:ce:a5:99:f9:b4:cc:51:2f:26:ea:41:
         52:e1:04:7a:0c:ed:9d:71:ff:95:a6:ea:7b:d3:5c:84:4f:25:
         82:4a:f5:aa:1a:a5:a4:75:48:c2:89:bd:b3:91:44:69:d3:e9:
         4c:54:2f:2f:75:8c:6b:cd:40:71:69:39:4c:e4:47:22:91:28:
         05:b5:39:f9:a8:3b:4d:df:d7:e6:66:b4:fa:3d:1c:d1:87:33:
         71:30:4f:c9:d3:7d:82:4b:7f:a9:1e:ab:de:3e:09:7f:97:08:
         6b:9d:75:81:a3:1d:2e:82:59:06:08:14:4d:99:b4:96:be:6b:
         66:2f:d0:84:74:99:8a:a5:a1:3f:f8:54:4b:39:49:55:8d:28:
         da:d4:6c:2b:0a:94:01:28:0f:0a:73:89:43:15:0b:47:fd:7b:
         9e:28:99:01:b5:5b:c1:ba:65:15:01:db:bd:ed:bd:79:f8:f2:
         ff:ae:d3:77:55:36:cd:cb:62:5c:f2:c0:c9:82:d8:bc:b9:9d:
         0f:bf:6a:e2:72:05:46:19:21:ae:cf:0d:b6:c6:63:f6:10:a0:
         be:7b:cf:cb:db:c0:c5:7a:14:a2:b1:7d:94:0a:01:43:8c:1c:
         50:bb:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:53:30 2026 by rpki-client