Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
File:                     goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json)
Hash identifier:          JHUwd6DEr+LMmBS8BYRlBUJKuIr6d1nGL0agybkDOb0=
Subject key identifier:   F1:1F:9C:5C:2E:A2:4D:D4:00:D2:45:9D:60:48:DA:A9:BA:A5:11:F8
Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49
Certificate issuer:       /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
Certificate serial:       0712
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
Manifest number:          070A
Signing time:             Mon 02 Mar 2026 02:57:28 +0000
Manifest this update:     Mon 02 Mar 2026 02:57:26 +0000
Manifest next update:     Mon 09 Mar 2026 02:57:26 +0000
Files and hashes:         1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: fYxYrKjtDlopScN5E1i67dVTiJyGo8mdwERiKzMtaAg=)
                          2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: QlMYMXdbZkn7ke0r4X84xbnzwCz4PshXdETVngfE7DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl
                          rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1810 (0x712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
        Validity
            Not Before: Mar  2 02:57:26 2026 GMT
            Not After : Mar  9 02:57:26 2026 GMT
        Subject: CN=69a4fc97-1a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:2d:6b:f6:e5:97:25:85:a6:9d:29:a9:35:
                    2b:cc:c8:43:4e:49:43:0b:7a:3e:fe:e4:5c:19:38:
                    dd:14:2c:f4:b0:28:68:77:66:88:f8:ff:cd:3e:30:
                    c0:53:4f:ac:86:c4:09:c0:64:0d:24:c9:0a:16:fe:
                    a0:08:a1:44:51:fd:0b:7e:20:5f:29:83:48:eb:dc:
                    4a:ec:36:71:3d:13:7d:5f:2d:32:3c:18:d1:3f:22:
                    71:23:c6:3f:52:f9:7b:e4:47:31:53:d1:89:db:21:
                    a9:e8:65:de:65:1c:f2:f7:72:9d:07:55:fd:20:5c:
                    61:c3:df:f9:20:f6:8a:34:7b:dc:1d:b3:75:56:25:
                    85:9f:86:08:2b:6e:f2:63:3c:18:60:4f:f8:e4:3c:
                    0c:0c:83:64:59:a2:e6:c2:c5:fe:5b:3f:21:33:14:
                    0e:28:b1:39:13:8a:74:fa:7c:0e:7d:01:1f:8d:63:
                    5d:f5:ab:39:bb:bb:a6:55:24:7c:f1:42:34:48:3e:
                    51:15:d9:03:c9:6a:71:5b:a7:01:d5:23:03:e9:96:
                    e2:c3:39:5c:21:9d:a8:58:3a:af:b9:37:88:2e:6e:
                    18:f0:9a:e8:60:0b:ec:9e:17:b2:fd:94:d6:84:50:
                    e6:79:1e:fc:c3:be:ff:d6:32:0d:a9:37:79:96:96:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1F:9C:5C:2E:A2:4D:D4:00:D2:45:9D:60:48:DA:A9:BA:A5:11:F8
            X509v3 Authority Key Identifier:
                keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ae:f8:0d:47:c5:88:0d:1a:a8:2d:91:4e:03:f2:9b:a7:50:
         84:9a:0a:d4:8e:54:de:04:a9:06:4a:57:4d:4c:62:cd:b2:24:
         6c:76:24:06:5d:23:6f:0c:28:5f:39:5c:4a:1d:9a:ec:59:f6:
         df:1c:ef:f1:bb:f7:00:c8:81:07:c0:de:66:d7:c6:39:27:4a:
         ef:15:78:26:e2:d4:df:8b:ab:5b:e7:1a:c8:49:09:80:ca:74:
         0a:f1:8f:ad:a8:28:8a:e5:e7:8f:ae:ed:7d:74:84:3d:7f:8e:
         59:34:02:e4:13:91:6d:73:a0:f7:3e:b0:34:65:be:08:5e:cf:
         50:cd:43:a5:79:db:33:06:f5:4d:da:e8:3c:d0:57:77:ca:a9:
         6f:a0:60:9c:bc:7b:59:18:e3:f5:07:1c:1a:5c:30:91:4f:de:
         4f:ea:0c:4b:8d:57:4f:6b:f3:cf:4a:04:6f:32:23:54:3c:6c:
         08:05:81:71:d1:35:c1:91:8b:d1:98:d9:af:41:13:f4:d7:e5:
         ce:fc:27:c3:3d:60:ee:28:40:7c:a7:f0:c4:89:ed:f3:e4:a6:
         79:72:e1:d4:80:5d:94:c2:77:8a:fb:3f:ea:04:d2:67:cc:62:
         3a:62:5a:20:33:76:b2:d7:c1:fc:ea:73:6a:30:03:c6:e9:5a:
         8a:98:15:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:17 2026 by rpki-client