Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
File:                     rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json)
Hash identifier:          uw96EgjM7tl7kNTlfO44GbyBXcBE9bs235fMHo86BCM=
Subject key identifier:   D4:61:8B:BE:04:66:74:79:1D:7B:F6:90:0D:D0:6D:5B:95:1A:03:8E
Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34
Certificate issuer:       /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
Manifest number:          0514
Signing time:             Fri 17 Apr 2026 00:45:02 +0000
Manifest this update:     Fri 17 Apr 2026 00:45:01 +0000
Manifest next update:     Fri 24 Apr 2026 00:45:01 +0000
Files and hashes:         1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: 4LbS3mDxvjZd+w3fdQoEVIxXEY+fnChHhDNR/wWagfU=)
                          2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: Z1lkPboS7Do5JVczgOK46BmhKy5Eyozp7p6CLVvAhpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34
        Validity
            Not Before: Apr 17 00:45:01 2026 GMT
            Not After : Apr 24 00:45:01 2026 GMT
        Subject: CN=69e1828e-44ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:46:46:82:75:52:ae:d4:69:0f:c0:a6:91:
                    71:d7:33:f0:83:b9:98:12:34:64:67:59:5d:72:ea:
                    7b:21:cc:4f:2b:ff:ba:19:91:e4:16:71:e4:5f:11:
                    8d:7d:b1:cd:32:d1:fd:36:57:4c:14:f4:4c:11:b1:
                    3a:1c:21:ba:a3:bf:66:a8:12:82:51:df:93:8f:4a:
                    00:b1:ff:d8:6d:f4:cb:52:b8:f7:c8:df:53:70:65:
                    e5:3e:17:46:3d:2b:5b:9c:92:0f:32:a2:0a:67:af:
                    4a:3f:8a:33:37:9f:c8:b3:b1:3b:0f:02:4c:90:64:
                    6b:7d:d6:3b:30:9e:9a:e9:5a:30:e8:fb:57:bb:fa:
                    f2:bf:d9:ea:88:62:e7:9d:34:2a:12:46:d9:0d:82:
                    6c:4e:c3:b8:f9:f7:5f:f2:35:d6:10:bf:b8:30:d3:
                    01:38:d5:13:4a:68:be:e9:d1:81:5c:79:2b:47:d0:
                    e0:36:6d:55:98:70:4c:ab:2b:99:cb:a8:83:bd:12:
                    a4:9f:2a:02:8a:da:c3:0d:ce:8f:aa:2f:6b:1b:8d:
                    6e:78:39:c9:e5:01:ef:d8:5b:f2:54:cd:e2:43:7e:
                    f1:02:cb:6a:77:56:77:7d:34:c9:fb:85:b1:8b:aa:
                    63:24:bc:12:ed:c5:cd:17:8d:42:3e:d7:3b:91:76:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:61:8B:BE:04:66:74:79:1D:7B:F6:90:0D:D0:6D:5B:95:1A:03:8E
            X509v3 Authority Key Identifier:
                keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:ef:80:59:56:28:0a:9a:ed:30:b3:60:99:63:5b:24:8a:
         33:62:a2:6d:c9:c4:c5:30:1a:ee:1c:a7:d8:c5:31:d9:63:81:
         cd:5a:6b:04:6b:5d:b1:a8:93:9c:6b:45:d1:1c:e7:d6:87:0d:
         79:18:fb:73:f1:34:2f:72:38:a9:4f:27:fe:bc:6e:e6:c6:dd:
         aa:3d:98:46:aa:d9:27:e8:e2:a1:bc:b0:5e:d8:c0:c3:99:e5:
         00:6e:fd:36:4b:cd:22:93:50:8a:dd:11:7b:1c:b9:a6:7e:7d:
         7d:cb:6e:df:7d:b8:c0:31:77:c6:5b:26:6a:fc:a5:88:62:5c:
         1f:3b:3b:17:f1:6c:aa:72:a4:23:59:75:2b:74:dc:30:84:24:
         7a:de:2e:4e:74:9c:20:cd:47:0c:9d:18:7d:c3:f9:af:cd:3f:
         c0:13:24:e2:54:07:43:4a:30:cc:b6:a7:0e:f9:6e:e2:d7:33:
         3e:63:14:68:71:c8:99:fc:89:37:37:94:d2:e2:59:31:20:92:
         df:c8:d7:8f:6a:30:a7:cf:8d:48:3c:20:9e:ea:1b:a0:ba:a8:
         e4:13:3c:9e:e9:2c:ee:3e:ce:b7:f8:82:0a:61:4b:6f:b1:99:
         62:01:73:2e:ea:28:af:0a:15:d2:e0:72:35:62:2b:2c:ee:cf:
         b2:75:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:37 2026 by rpki-client