Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
File:                     gopH06xuawNgEcIzIxcKlzG60iQ.mft (raw, json)
Hash identifier:          CgdtYFIGV0Im4Jz5vQrV+CJ8jJhJZCgdvTcqc6ecPtc=
Subject key identifier:   4D:C6:D5:AF:F7:1A:49:22:26:73:27:00:96:37:73:7F:9F:E0:95:10
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
Manifest number:          C7
Signing time:             Sun 07 Sep 2025 06:38:16 +0000
Manifest this update:     Sun 07 Sep 2025 06:38:16 +0000
Manifest next update:     Sun 14 Sep 2025 06:38:16 +0000
Files and hashes:         1: gopH06xuawNgEcIzIxcKlzG60iQ.crl (hash: QpxdDSQFncbtQZjD/vCNVQKmFIiuqM3Q9V/ekNW0Gtc=)
                          2: 7BB946FE52E611F099AC8F40C4F9AE02.roa (hash: YjPm7Xn1a+FiZm9E4eDQxc9fhD3W48rbwns0VAHMVzA=)
                          3: D83A0A7E1DAF11F0B2131B09C4F9AE02.roa (hash: odyeRSn+ecQUPk/XU8SqIqXsjh++sp4kLUV5M/g9Vic=)
                          4: CA79E350BF6D11EF9730D429C4F9AE02.roa (hash: 8YB/1JeosBYKfSfsWZVMsLmKwDlq/zSd/qgbcV6vesg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 06:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Sep  7 06:38:16 2025 GMT
            Not After : Sep 14 06:38:16 2025 GMT
        Subject: CN=68bd2858-8b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:53:25:ab:c7:18:33:d0:e6:bc:68:f1:14:3e:
                    24:23:86:4a:7b:f6:8f:9f:81:64:56:fa:fa:39:71:
                    30:4b:44:b5:f7:aa:a7:a7:a6:03:c6:a0:d8:3b:f8:
                    58:e3:0b:c8:b1:29:22:4e:f7:49:2e:c1:eb:82:c9:
                    1b:94:57:fe:be:8e:f5:7b:ed:ef:d8:4c:68:45:f3:
                    8e:65:d9:23:64:d7:0e:ce:71:5e:b0:36:c0:fe:8a:
                    6c:02:21:f1:5a:bb:91:57:06:78:86:23:48:d4:76:
                    9d:26:25:0c:08:fb:8b:1a:cc:e4:cb:2d:36:7d:6d:
                    db:6c:b1:49:fb:01:7c:da:64:25:26:b9:0b:df:aa:
                    ce:91:ac:7f:71:ca:6d:03:bd:4c:00:c8:ec:06:fa:
                    e0:23:fc:e1:f3:43:c9:33:82:5e:21:c2:34:f1:dd:
                    4b:b0:62:39:c2:26:b2:c4:c9:e4:d9:67:d8:de:79:
                    4a:48:24:f9:09:37:c0:47:f7:8e:7a:e2:82:ae:2a:
                    18:ed:90:60:6f:e6:4c:64:68:34:a2:d2:6c:4b:42:
                    a5:05:1f:65:59:99:8f:db:e4:27:0b:e8:b9:b7:56:
                    c9:7b:d4:51:de:4e:cc:74:eb:f9:81:57:2b:ef:8e:
                    15:98:1f:2f:0a:4f:21:c0:b5:6f:7a:7f:52:68:97:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C6:D5:AF:F7:1A:49:22:26:73:27:00:96:37:73:7F:9F:E0:95:10
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f4:2f:c5:67:9b:00:d1:1a:99:eb:fd:2a:a0:79:b1:6c:5d:
         36:b5:19:91:cb:69:f2:39:44:88:61:77:90:39:c5:7d:f8:ef:
         27:f0:0a:47:be:c3:96:50:ee:81:b3:87:ac:fd:5c:0e:fc:b6:
         19:93:3e:9b:68:94:ab:31:95:1b:d9:88:d9:24:ad:63:b4:ee:
         a6:03:ec:d6:ac:8e:82:44:ab:99:04:1c:ca:e2:a9:39:c9:5e:
         e3:5e:65:38:d3:7c:6d:78:0a:44:98:64:52:39:67:5b:6b:0a:
         ff:24:50:4e:56:03:fa:55:a9:aa:f2:66:0a:de:cb:f7:62:5f:
         b6:e9:23:df:b7:e5:9c:8c:4b:53:aa:d3:25:05:48:36:55:9d:
         0e:f3:83:77:8a:a7:15:a5:37:c8:b9:b0:51:bd:e4:0e:58:96:
         4a:86:47:c4:43:5c:13:8a:a9:d1:91:e4:40:b5:44:27:04:b4:
         f3:68:66:f2:6e:c8:22:49:ea:6b:3f:8e:7c:8e:f7:55:a1:c8:
         e8:2b:0f:1b:e1:c4:7e:fe:03:0c:42:b6:1b:12:08:3f:ca:ac:
         5e:b9:37:8c:e5:fa:0d:9a:e6:a6:e6:5f:39:ef:62:2d:14:20:
         f8:ea:73:df:42:3f:b2:16:bf:fa:86:69:d3:84:1b:94:2c:b0:
         3a:3a:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:47:26 2025 by rpki-client