Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File:                     GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier:          suujdh3MqCEC3wLHFh16ILjn4+pXI7zRP6EsQfVrhQQ=
Subject key identifier:   D2:61:24:23:AA:05:43:B9:B2:DB:7C:02:B9:A5:9E:3E:8F:8C:92:19
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer:       /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial:       11AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number:          1151
Signing time:             Tue 28 Jul 2026 17:23:45 +0000
Manifest this update:     Tue 28 Jul 2026 17:23:45 +0000
Manifest next update:     Tue 04 Aug 2026 17:23:45 +0000
Files and hashes:         1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: VXK5fzxAaunVCMI1Fy7ovLbofBCPDSB4IARYlYYn5XU=)
                          2: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: itbqWUa/NKPPtYKdrkpcQWzti779l/FpRj9FQ1sUc8Y=)
                          3: 446826648F3511EE8864C25EC4F9AE02.roa (hash: ny4GhVXrmI+9wyEmhfWqKmydIRJbc32z+Z+I8AKHWUk=)
                          4: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: Ro1WYvBGHNUPbIY7IvUqpCvewp4A9RwhtkxBRjwWeZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
                          rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4527 (0x11af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
        Validity
            Not Before: Jul 28 17:23:45 2026 GMT
            Not After : Aug  4 17:23:45 2026 GMT
        Subject: CN=6a68e5a1-19e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:80:7d:dc:51:f1:0f:cd:01:06:6a:9f:12:
                    2f:b3:4f:8a:f9:69:a7:e6:fb:c8:48:a3:98:ea:fa:
                    66:46:da:ee:50:4f:ee:9b:3b:58:ae:6f:a5:b4:e8:
                    cb:7d:c1:98:45:4a:24:f0:93:9d:10:82:43:d2:6f:
                    9c:62:28:03:50:0d:26:b6:6e:6c:0e:2b:e2:64:a0:
                    f4:5c:fa:b5:b8:e7:06:30:35:ee:35:f6:2e:76:e0:
                    4f:35:24:e2:b3:00:19:5f:c3:02:0e:ed:b4:04:81:
                    52:2e:c0:91:bd:93:15:40:63:0c:db:e2:e2:d1:db:
                    ae:0b:20:ce:aa:f9:0a:79:d3:2d:d6:d2:09:fe:8a:
                    1f:d9:38:35:f2:ce:23:23:86:92:65:a6:54:71:e4:
                    fe:20:7f:6e:a5:21:37:57:2e:17:85:b9:01:0c:81:
                    c2:1f:2f:a1:79:f2:38:0a:1c:6a:89:54:55:4c:04:
                    fb:26:a8:61:33:70:33:16:a2:04:dd:bd:8b:a4:45:
                    03:20:a7:bc:1e:0a:d4:94:e0:07:b9:d3:58:eb:19:
                    d2:8a:27:cb:81:52:75:f9:13:f3:ca:df:9b:94:a4:
                    50:5e:bc:3d:48:22:b5:bd:16:f2:5a:27:89:d3:2f:
                    7e:cf:36:72:30:2b:22:80:99:9a:d1:32:7f:4c:8e:
                    6b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:61:24:23:AA:05:43:B9:B2:DB:7C:02:B9:A5:9E:3E:8F:8C:92:19
            X509v3 Authority Key Identifier:
                keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fb:23:9b:b8:1d:c5:5d:d9:15:bc:6a:74:62:8a:da:18:40:
         3e:5a:79:09:06:dd:3c:1d:40:39:32:d7:78:d6:f8:41:61:36:
         e7:a6:74:53:7d:b3:4d:d4:c9:8a:49:36:83:6c:11:c8:29:90:
         d9:1a:26:24:32:6c:37:dc:4c:b8:27:c0:9e:69:0c:63:fe:e2:
         d0:e9:0f:39:00:8f:50:7e:db:b4:6c:fe:65:98:f1:d0:5b:56:
         55:e4:40:69:a6:a1:17:13:f7:2d:97:da:c9:e8:a4:92:1c:32:
         ac:d0:c1:42:d0:2a:f3:08:5c:8d:df:a8:08:8b:c8:2a:0a:e4:
         55:db:4e:5b:21:33:40:0d:5b:99:ad:a1:c7:d8:50:21:c8:1e:
         d9:b6:46:6e:e6:29:39:1d:56:79:93:dc:03:9a:bd:5a:89:b0:
         b2:90:21:f0:fe:92:4e:ed:7c:b2:9f:82:59:59:aa:11:0b:7d:
         90:c4:76:5d:33:3f:35:ff:64:1d:0d:1b:01:c5:55:d6:51:89:
         a4:19:96:e0:d1:e4:bf:a8:b3:ca:f3:06:9c:94:dd:64:a8:77:
         37:43:2d:11:4e:d3:33:f0:0b:18:9d:bc:b8:a2:b1:78:41:dd:
         d7:22:fc:fa:1f:ea:27:c1:61:ec:1e:89:ad:50:f4:93:46:20:
         ac:af:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:33 2026 by rpki-client