Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
File:                     gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft (raw, json)
Hash identifier:          d3To/Cf1Y+B0nlPeYniKvtKaGggeaSDuVytYfyf4Mtg=
Subject key identifier:   85:90:9F:F3:7F:75:23:8D:E8:CC:15:39:83:81:38:60:F3:D1:F6:27
Authority key identifier: 80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A
Certificate issuer:       /CN=A9143A67/serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
Certificate serial:       0343
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
Manifest number:          033D
Signing time:             Sat 13 Jun 2026 01:04:10 +0000
Manifest this update:     Sat 13 Jun 2026 01:04:10 +0000
Manifest next update:     Sat 20 Jun 2026 01:04:10 +0000
Files and hashes:         1: gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl (hash: Dfp13tL+G3Gw8zj5ZCraT4LuSc0GDHaBbf/ZK57dSlY=)
                          2: DE7835E0162A11F1B1AE06BC373D8C67.roa (hash: Jp5WJKUubellDV7cpOEF0ELwISK86JVxqNhDR8XDEUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl
                          rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143A67, serialNumber=80E0AB189FCD701EEE42C92B93C15B6F7424826A
        Validity
            Not Before: Jun 13 01:04:10 2026 GMT
            Not After : Jun 20 01:04:10 2026 GMT
        Subject: CN=6a2cac8a-216a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:95:54:86:b6:9e:41:53:ce:6f:74:02:a6:
                    ed:f0:73:12:90:b8:8b:28:84:83:97:4d:10:8d:ae:
                    b5:8f:49:2f:c2:69:4a:02:5b:b0:87:10:0f:b0:5f:
                    ed:d3:03:05:03:3f:5f:92:3b:ab:a3:1e:27:4f:5c:
                    73:b1:b4:cc:e8:2d:3d:bd:23:0f:a8:75:07:f7:64:
                    89:e4:4e:03:2b:8b:39:b0:7a:57:23:3a:2e:95:2d:
                    4f:d9:52:21:d9:a0:cd:e7:44:6a:6e:5d:16:36:57:
                    fb:a9:a7:46:bb:93:e9:ca:75:88:e4:03:70:dd:35:
                    61:60:7f:15:86:dd:c5:05:e0:f7:70:ff:02:11:64:
                    67:8f:05:62:3e:72:3f:8f:87:8b:5b:00:15:18:bc:
                    57:d3:ac:ca:e9:b2:d4:f3:c8:ff:c3:d0:ae:b0:02:
                    63:92:74:61:ae:b0:77:5b:21:7b:af:78:bb:8f:26:
                    68:7f:bf:df:29:4e:35:e6:03:45:d9:53:ad:98:c3:
                    75:f4:35:67:b7:85:80:90:3c:b1:0f:a6:ae:2f:f8:
                    b3:e9:8d:9b:60:aa:f5:ca:1b:ef:62:f3:a4:b1:c6:
                    f6:3f:ad:99:13:78:2c:8a:7f:bc:b5:bd:de:0a:53:
                    e1:71:31:4f:36:a8:13:40:ce:6c:93:4d:72:a5:93:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:90:9F:F3:7F:75:23:8D:E8:CC:15:39:83:81:38:60:F3:D1:F6:27
            X509v3 Authority Key Identifier:
                keyid:80:E0:AB:18:9F:CD:70:1E:EE:42:C9:2B:93:C1:5B:6F:74:24:82:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143A67/C80697920D9C11EDB8F9B617C4F9AE02/gOCrGJ_NcB7uQskrk8Fbb3Qkgmo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:82:4c:36:ea:1b:85:c2:04:76:be:46:78:99:ba:b0:f6:bd:
         9a:9e:ca:2a:0a:a6:80:fa:1c:41:79:fd:18:b2:bf:f7:fa:15:
         03:d0:df:f2:26:0b:d8:ee:69:95:54:d4:47:cd:b6:97:6c:9f:
         07:6b:d4:82:04:55:b0:ed:61:1a:4b:2b:f6:3f:13:c4:71:46:
         0a:a6:e5:bd:25:dd:1d:27:87:54:e9:6e:f5:55:3a:63:2f:38:
         98:79:30:67:e6:c8:a8:02:fc:33:31:c4:ab:94:e0:73:3a:da:
         d4:6c:66:2c:9d:fb:55:af:42:20:cd:69:7b:a8:fe:9b:5c:6a:
         2d:72:45:0f:bf:5b:ca:5e:ed:f8:e9:fc:27:b6:85:d7:83:aa:
         c5:15:d8:a1:91:fe:c9:e0:14:cf:f4:2b:64:05:52:bf:e0:3e:
         0f:4b:81:20:fd:d4:50:fc:4d:11:92:8c:4e:c4:41:63:6a:ce:
         1b:95:50:65:84:25:e5:4a:42:2c:4a:b3:08:9f:e6:d3:a3:58:
         ec:8c:3e:03:e3:58:94:63:ec:ee:05:2f:12:5c:40:6d:e2:85:
         7b:39:49:d6:1f:be:7d:4d:56:92:20:f5:0c:f7:52:86:c2:c1:
         f2:62:e4:a4:bb:39:06:e8:89:55:37:07:ce:3c:3e:35:b6:6b:
         c0:b6:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:26 2026 by rpki-client