Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
File:                     8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json)
Hash identifier:          oao5Jkc3ZaA8P44u6wSmMHVMiov9jHZGT40NrK3NlFQ=
Subject key identifier:   E1:12:F0:D0:D8:13:F2:51:A2:76:8D:63:09:76:B9:C7:9D:49:C4:94
Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14
Certificate issuer:       /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
Certificate serial:       05DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
Manifest number:          05D4
Signing time:             Sat 04 Apr 2026 22:48:11 +0000
Manifest this update:     Sat 04 Apr 2026 22:48:10 +0000
Manifest next update:     Sat 11 Apr 2026 22:48:10 +0000
Files and hashes:         1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: ikMxFsBpL4pt979q4Wko0pGpwXyE99hiZhPTx3mJlzQ=)
                          2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: LiXQFtp2ngg/qzCFHe4dcqm+yap/blmF4mtH/hvw6dc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
        Validity
            Not Before: Apr  4 22:48:10 2026 GMT
            Not After : Apr 11 22:48:10 2026 GMT
        Subject: CN=69d1952b-1e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:61:56:95:32:d2:9f:8c:30:7f:64:80:ef:
                    cc:4a:00:fb:ab:86:14:23:1f:3b:06:b8:dc:2b:5f:
                    ac:00:1a:14:39:79:7a:df:f0:e0:40:d8:ab:d9:78:
                    ec:1e:1d:77:7c:31:2b:db:9f:ab:16:07:e8:fe:2d:
                    df:f9:d4:70:88:79:72:a9:a5:43:c3:b7:8c:08:30:
                    f2:6f:13:d3:f5:66:2c:d2:bc:5c:fa:db:29:71:3b:
                    24:00:bc:15:82:21:92:5b:c1:b2:62:22:6d:11:62:
                    95:96:64:86:13:7e:bf:29:fc:32:94:12:9c:b4:8a:
                    69:8c:c1:c3:8a:ec:f9:c9:1f:07:09:37:29:99:9f:
                    66:7a:f0:ff:c7:11:51:90:cc:d6:7d:83:fd:d4:85:
                    e1:d0:e9:16:a2:73:4a:86:67:53:a6:fb:a9:62:78:
                    ee:1a:f7:d3:e3:e9:dc:b0:45:e4:d0:9b:8b:71:f3:
                    fa:7e:48:f4:96:a1:ce:38:12:c9:15:dd:80:e4:00:
                    fe:3a:e0:d8:64:e4:e0:fc:a4:99:ca:a6:fe:21:f4:
                    ad:7f:fc:e8:92:40:1e:ec:f2:c7:cf:7e:1b:e8:be:
                    21:dd:b0:e1:df:d6:66:86:2e:e7:d6:c8:f4:f8:d2:
                    92:5a:e3:09:93:ff:40:50:40:27:06:3e:81:28:99:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:12:F0:D0:D8:13:F2:51:A2:76:8D:63:09:76:B9:C7:9D:49:C4:94
            X509v3 Authority Key Identifier:
                keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fe:73:5b:65:77:81:8e:23:3e:40:63:6d:04:04:87:75:cc:
         d6:df:3e:99:b5:3e:c4:d0:c5:4f:25:35:02:f7:f5:04:a5:fd:
         26:c4:b7:cd:2c:be:ba:dc:e4:24:8b:02:fe:11:e0:09:3f:36:
         d5:b9:fb:93:c5:2f:83:72:6a:8d:91:0a:e3:8e:4e:39:2c:26:
         11:ea:26:2a:53:14:a2:c5:fc:a9:f8:b9:f7:e9:e8:05:3e:6e:
         32:9c:a3:7c:d0:28:b3:b8:8a:50:b7:1a:67:3c:54:cf:0f:79:
         67:e3:84:03:09:16:48:a5:f2:35:b7:d4:f0:c9:6f:2e:0a:ab:
         ca:1b:17:25:cf:7f:d7:7f:03:35:39:7a:ce:b0:a3:d6:eb:0a:
         0e:d5:14:56:8d:c5:e0:08:a4:5c:a2:4c:0c:cd:b8:5c:d0:d7:
         b4:02:81:77:73:11:d4:1d:0d:fb:13:23:c4:d5:d8:7f:bc:66:
         42:8a:95:67:0c:ee:a7:05:aa:a4:6c:3a:4a:d2:d4:ca:97:ca:
         65:e0:2c:6d:3e:6e:a2:cb:b0:1a:44:79:91:10:6e:5f:68:2e:
         3e:34:55:f6:58:fa:1b:24:e3:6d:fb:ea:cc:38:49:97:d6:ba:
         7a:c1:ea:75:f7:11:cc:7d:08:2e:f3:f7:de:35:2c:c2:c2:a4:
         19:e0:4e:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy
OUExRTI0MTQwHhcNMjYwNDA0MjI0ODEwWhcNMjYwNDExMjI0ODEwWjAYMRYwFAYD
VQQDEw02OWQxOTUyYi0xZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZNhVpUy0p+MMH9kgO/MSgD7q4YUIx87BrjcK1+sABoUOXl63/DgQNir2Xjs
Hh13fDEr25+rFgfo/i3f+dRwiHlyqaVDw7eMCDDybxPT9WYs0rxc+tspcTskALwV
giGSW8GyYiJtEWKVlmSGE36/KfwylBKctIppjMHDiuz5yR8HCTcpmZ9mevD/xxFR
kMzWfYP91IXh0OkWonNKhmdTpvupYnjuGvfT4+ncsEXk0JuLcfP6fkj0lqHOOBLJ
Fd2A5AD+OuDYZOTg/KSZyqb+IfStf/zokkAe7PLHz34b6L4h3bDh39Zmhi7n1sj0
+NKSWuMJk/9AUEAnBj6BKJmo9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOES8NDY
E/JRonaNYwl2ucedScSUMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5
RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX
R3pPMlRlRkxBUjhwb2VKQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlv5zW2V3gY4jPkBjbQQEh3XM1t8+mbU+xNDFTyU1Avf1BKX9JsS3zSy+utzk
JIsC/hHgCT821bn7k8Uvg3JqjZEK445OOSwmEeomKlMUosX8qfi59+noBT5uMpyj
fNAos7iKULcaZzxUzw95Z+OEAwkWSKXyNbfU8MlvLgqryhsXJc9/138DNTl6zrCj
1usKDtUUVo3F4AikXKJMDM24XNDXtAKBd3MR1B0N+xMjxNXYf7xmQoqVZwzupwWq
pGw6StLUypfKZeAsbT5uosuwGkR5kRBuX2guPjRV9lj6GyTjbfvqzDhJl9a6esHq
dfcRzH0ILvP33jUswsKkGeBOTQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:23:42 2026 by rpki-client