Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
File:                     rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json)
Hash identifier:          jB9TGFbUIwiV7xQZaHcrsVl4VqmumYN7oTHpOzMVhpU=
Subject key identifier:   CD:DE:55:E5:92:DF:45:DC:36:98:3F:8F:8B:58:9B:D5:4A:90:3F:4B
Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Certificate issuer:       /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
Manifest number:          B4
Signing time:             Mon 27 Jul 2026 09:16:44 +0000
Manifest this update:     Mon 27 Jul 2026 09:16:43 +0000
Manifest next update:     Mon 03 Aug 2026 09:16:43 +0000
Files and hashes:         1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: KYJl+9XXiPKc8DWpwfft35r0PvDNLQrgve//JaMP+84=)
                          2: 802EA36AE88B11F09D8DF0484F6F56BC.roa (hash: CjISRCjOn0m+5030aubSSBLk5SCQO1cBM9gnCnW5SlI=)
                          3: B752BBF0EF0811F098A4972A416F56BC.roa (hash: rSx6SG/CH+Eqp7hGNaOrkPucM6ELj4c471xwycPS5Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
                          rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
        Validity
            Not Before: Jul 27 09:16:43 2026 GMT
            Not After : Aug  3 09:16:43 2026 GMT
        Subject: CN=6a6721fc-51d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:8a:38:f2:05:ef:4a:cf:d2:bb:32:84:96:
                    56:87:d4:24:a0:ca:6a:15:5d:6e:db:71:68:a3:59:
                    92:6d:a1:8a:21:da:bc:c7:bb:50:30:73:f9:0c:49:
                    91:cf:8b:08:3a:6c:ac:f6:bd:6c:8e:c8:05:4e:de:
                    82:1d:ac:17:8b:6e:0c:f6:09:48:d4:ad:7c:f2:b9:
                    40:6e:f3:59:4a:ba:1b:78:5c:5f:64:7b:fc:ff:97:
                    ce:01:74:07:e7:fd:1e:79:d1:06:9b:3c:d7:ef:6a:
                    17:98:9f:2e:33:cf:3e:db:0a:30:e2:11:22:c6:47:
                    8f:e1:54:b6:f0:ee:f5:d2:ae:c3:c2:b1:70:88:26:
                    00:fc:80:8a:76:f1:fb:ca:0c:65:c1:a4:ec:e7:a1:
                    69:32:aa:f1:28:31:9d:41:71:a8:4c:41:b0:11:62:
                    4f:1f:7a:eb:a1:5b:a7:13:24:62:b2:69:cf:b5:c8:
                    f1:8a:a5:01:29:28:17:0d:59:e1:e4:e5:a5:ed:b7:
                    b5:96:a7:bc:3d:f2:d9:1d:72:cc:09:cb:a0:68:4c:
                    69:7d:e7:a5:7e:2d:4c:30:03:42:e6:f8:9d:17:42:
                    6a:6f:e9:8b:17:a3:dd:7e:ec:c3:52:43:c4:af:b0:
                    2c:4c:d6:f2:b2:9e:e6:b0:ac:59:55:68:7d:7f:a0:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DE:55:E5:92:DF:45:DC:36:98:3F:8F:8B:58:9B:D5:4A:90:3F:4B
            X509v3 Authority Key Identifier:
                keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:d7:ca:93:d2:42:c3:78:cf:78:cb:cb:19:66:0d:50:6b:
         79:18:a4:ec:ba:f2:17:58:48:ea:eb:f8:ab:d5:4f:2c:cf:11:
         44:92:fd:e8:53:58:97:dc:86:d8:04:c4:70:7e:bd:92:3d:d0:
         79:10:6f:67:5a:27:29:65:4e:bf:82:39:49:4c:02:3e:91:9b:
         1d:f3:05:e3:72:23:99:1e:cc:a1:cf:0b:e0:5a:b0:98:9c:77:
         ee:ab:49:c0:1b:6c:fb:61:b3:80:e0:27:7e:97:1e:9d:a3:5a:
         d4:c7:6b:80:a5:6e:dc:80:a7:8a:1a:40:2c:a5:61:57:21:61:
         2e:9e:73:89:cb:7d:a2:eb:88:90:9e:7f:05:50:6a:28:f8:5c:
         d0:e1:ff:da:29:d9:3f:67:aa:56:f1:4b:e3:b3:30:07:0c:3a:
         7d:03:48:90:a2:74:ae:6e:63:fe:52:97:ba:5d:6e:b1:18:10:
         92:1a:e6:84:25:ec:85:f2:a8:0c:48:97:d7:b4:02:58:06:e0:
         66:44:65:28:57:f5:e5:67:6b:f2:71:84:1a:31:4d:35:2d:83:
         88:52:aa:4a:bb:ba:02:ee:4b:43:ba:28:16:2c:b9:f3:52:a6:
         f3:93:72:97:61:b0:af:c8:50:f7:70:c2:48:7c:56:e3:3b:5e:
         60:47:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:53 2026 by rpki-client