Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File:                     goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier:          +yn/EXwNMXX6kx0nno109PGsHZC/gYhGwed12aq+yh4=
Subject key identifier:   C6:6E:52:F3:62:86:25:71:B9:08:B5:65:44:E9:69:74:05:5C:F0:D6
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer:       /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial:       0699
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number:          068E
Signing time:             Sun 20 Sep 2026 22:22:38 +0000
Manifest this update:     Sun 20 Sep 2026 22:22:38 +0000
Manifest next update:     Sun 27 Sep 2026 22:22:38 +0000
Files and hashes:         1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: mOhnztXemou0zlzBv+Vdl+WXEwoAeInlCcljksbFIGQ=)
                          2: 2BE5310AF27E11F082456479676F56BC.roa (hash: 2Ycp2FDeLcHLKVwrcaM8/eSEc3qO4G4mojiko0zAdR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
                          rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
        Validity
            Not Before: Sep 20 22:22:38 2026 GMT
            Not After : Sep 27 22:22:38 2026 GMT
        Subject: CN=6ab05cae-c777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e6:b0:fc:d4:83:2b:dc:0c:5c:c0:d9:41:c8:
                    a1:cb:be:45:15:f8:1f:5d:a2:0a:7b:ed:8c:aa:cb:
                    7b:df:2b:c0:2f:a7:55:ea:e9:2f:e3:1c:1e:c6:6f:
                    93:7e:ce:9c:87:13:51:a5:70:65:2d:3a:c6:d0:ea:
                    31:42:98:63:1e:6d:da:bd:9e:3d:4b:11:54:22:d3:
                    0e:1c:b3:8e:94:0f:d2:51:45:d1:29:30:46:fd:ac:
                    16:cd:9b:fa:48:e2:4d:dd:5d:ab:ec:48:04:51:fe:
                    6e:57:8c:cb:7a:70:98:e7:ef:3a:94:a4:12:0f:81:
                    9c:76:5b:ef:0f:16:10:d2:80:2e:ef:3c:c5:3b:24:
                    77:b0:79:7a:a2:77:07:39:4e:75:fa:04:1d:bf:93:
                    e1:d9:c5:ad:f0:5e:7f:f0:d9:cf:4b:79:6a:3c:73:
                    45:da:30:f8:cc:7c:b5:69:69:63:c1:3e:dd:82:fb:
                    85:d8:c8:42:1b:69:44:af:57:74:77:a0:bb:21:45:
                    86:97:a9:7e:eb:34:d5:3a:ce:9b:1b:f1:e3:70:3f:
                    b0:1c:8b:b7:f4:9e:1f:38:2f:57:d9:26:48:48:f4:
                    33:51:b7:bc:52:8e:f4:c1:8c:10:98:bf:fb:15:b7:
                    1b:03:75:59:f9:42:50:28:1d:4e:47:3a:0c:cc:bd:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6E:52:F3:62:86:25:71:B9:08:B5:65:44:E9:69:74:05:5C:F0:D6
            X509v3 Authority Key Identifier:
                keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:3b:44:23:6d:aa:24:c4:cf:44:d4:be:84:14:c9:ed:1f:
         84:fb:b7:6b:c5:c0:57:c5:95:39:9c:af:f6:96:24:67:bd:4c:
         72:00:a5:9d:d6:1d:c5:62:16:dc:9e:03:f9:d5:2f:e6:90:ed:
         9c:fc:ed:09:82:b6:dd:68:3d:03:17:23:d7:a0:86:3f:e6:4a:
         e5:99:58:26:47:68:2c:2a:d8:ed:f7:c5:0c:ba:b9:41:ce:f2:
         6c:ed:1b:72:81:f6:d6:4d:23:c2:e0:e7:6d:20:77:5c:6f:62:
         aa:85:2a:76:ca:9e:73:82:e9:da:7d:ea:a8:a9:7d:63:0c:a3:
         41:89:95:c3:30:b7:66:15:72:75:45:eb:fe:1f:e6:f4:23:f2:
         e4:fe:5f:97:ce:c9:64:42:0a:ad:94:cc:da:6a:bf:18:0a:af:
         f8:4f:41:a0:99:fa:5e:e4:d8:c7:24:e6:1b:55:a7:c7:b8:33:
         89:e0:6e:1a:a9:23:b7:fb:df:01:ba:ed:94:b1:92:04:3f:18:
         6f:cb:60:ab:9b:09:ab:1d:c4:dd:98:5c:dc:ff:ed:02:59:74:
         57:8b:5b:b7:4a:6e:d6:99:40:38:86:9f:9c:0f:a5:01:04:23:
         e2:4b:33:cb:79:bd:94:d2:4f:64:5b:c5:bc:f5:9b:80:3b:b0:
         7f:ad:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:06:03 2026 by rpki-client