Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
File:                     GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json)
Hash identifier:          navxVCxwaLghduiBwnilpK6j7EqO4HWHnMb8Z3kfTnM=
Subject key identifier:   68:33:36:9F:D7:F1:86:CC:38:6E:35:D7:C3:5C:09:96:1C:0C:8B:A8
Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Certificate issuer:       /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
Manifest number:          0100
Signing time:             Fri 17 Apr 2026 05:58:55 +0000
Manifest this update:     Fri 17 Apr 2026 05:58:55 +0000
Manifest next update:     Fri 24 Apr 2026 05:58:55 +0000
Files and hashes:         1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: TdtFyDpySIol1MGEbN3FT3WCkfJPqbHb2s7kvb/M7D0=)
                          2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: 00t278toG5ltI5w8ERTGNX15x/yelt1qQ4SxeDS7/K8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
        Validity
            Not Before: Apr 17 05:58:55 2026 GMT
            Not After : Apr 24 05:58:55 2026 GMT
        Subject: CN=69e1cc1f-16b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:5f:98:a2:f0:2a:ef:83:aa:33:0b:52:94:
                    e7:ee:43:04:12:ca:11:3c:2c:d1:6e:6c:73:15:09:
                    67:c7:3d:93:ed:93:b0:24:7f:84:d4:de:02:f8:63:
                    af:bd:da:15:38:b6:60:d4:52:59:14:77:9d:c5:b3:
                    fb:c9:11:7d:cf:8b:64:25:28:04:cc:c3:1a:f2:4e:
                    a0:93:7a:f1:2f:d8:5a:80:f3:4d:8c:be:8a:f4:5d:
                    f4:ab:10:da:95:40:87:0e:74:52:ff:a0:39:cc:d4:
                    f8:f1:49:5a:36:23:f4:01:73:c9:dd:bd:11:a8:66:
                    a5:a7:5a:be:92:44:e6:a3:b0:77:48:f1:c9:4f:89:
                    80:df:6d:6d:50:01:c7:ba:b8:bd:1d:d3:d2:09:c4:
                    60:7c:a7:93:21:53:94:4c:e2:bd:60:fe:4e:95:29:
                    e2:d8:62:b2:b3:11:e2:36:23:19:24:3d:dd:19:92:
                    8c:2d:6e:91:fc:df:0d:a5:bc:c7:c1:d7:ce:3f:e4:
                    b7:e4:e0:25:39:9e:fa:7c:36:19:93:6b:07:6a:64:
                    fb:fc:c0:cf:8b:78:49:ba:f6:dc:b7:53:6f:ec:b2:
                    77:db:ca:36:f7:8c:0e:8a:f2:da:7f:e7:93:c7:a0:
                    fd:11:aa:4f:7e:2d:d4:60:b9:54:66:5a:58:98:b3:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:33:36:9F:D7:F1:86:CC:38:6E:35:D7:C3:5C:09:96:1C:0C:8B:A8
            X509v3 Authority Key Identifier:
                keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5c:ce:78:76:cc:64:df:cf:0b:1a:61:6e:4b:7f:da:8b:30:
         64:96:d4:0f:71:8f:b4:d9:91:41:47:cc:db:b3:1a:1a:c4:81:
         25:24:33:9b:d4:f7:aa:00:47:65:6c:e8:1a:81:81:b6:51:ca:
         e1:9d:1c:c2:34:e6:6a:61:ef:60:26:55:82:09:31:b7:4a:28:
         1e:c2:8f:47:10:19:98:25:36:b3:22:31:7c:fa:d7:1b:42:da:
         99:dd:0f:5a:83:ca:e9:f4:12:32:82:e2:29:12:8c:10:6c:d5:
         d2:6f:8d:79:f2:70:74:4a:4a:84:a6:f8:9b:a7:35:e8:10:b9:
         81:f4:52:aa:a4:d0:93:58:c8:a9:22:2d:7d:dd:e1:e2:fb:93:
         f4:a4:4a:d6:d4:4c:f1:16:07:02:06:92:bf:23:42:97:f4:6e:
         b6:f4:60:60:27:54:f2:98:a0:7b:10:1a:d7:ea:24:90:9b:f3:
         9c:39:c5:99:0f:3f:ef:fb:47:0e:dd:a0:ab:41:98:22:dd:1b:
         60:70:61:fb:73:36:70:4a:b4:8e:6c:9d:bb:f1:2c:b8:4f:fb:
         f1:71:1b:85:63:19:a1:83:a4:8c:25:d2:cd:cf:0f:dc:a8:62:
         c8:6f:cc:42:77:85:55:67:d3:b2:56:e7:7d:2c:ee:93:86:09:
         5c:91:40:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU4MTAxMTAvBgNVBAUTKDE4RURBQkIyODIwQ0UyNUY5MEU4NjM1QzEzQjdGMEQ0
NUYwNDYzNzYwHhcNMjYwNDE3MDU1ODU1WhcNMjYwNDI0MDU1ODU1WjAYMRYwFAYD
VQQDEw02OWUxY2MxZi0xNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuiJfmKLwKu+DqjMLUpTn7kMEEsoRPCzRbmxzFQlnxz2T7ZOwJH+E1N4C+GOv
vdoVOLZg1FJZFHedxbP7yRF9z4tkJSgEzMMa8k6gk3rxL9hagPNNjL6K9F30qxDa
lUCHDnRS/6A5zNT48UlaNiP0AXPJ3b0RqGalp1q+kkTmo7B3SPHJT4mA321tUAHH
uri9HdPSCcRgfKeTIVOUTOK9YP5OlSni2GKysxHiNiMZJD3dGZKMLW6R/N8NpbzH
wdfOP+S35OAlOZ76fDYZk2sHamT7/MDPi3hJuvbct1Nv7LJ328o294wOivLaf+eT
x6D9EapPfi3UYLlUZlpYmLN7ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgzNp/X
8YbMOG4118NcCZYcDIuoMB8GA1UdIwQYMBaAFBjtq7KCDOJfkOhjXBO38NRfBGN2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgxMC83QkE4RDM5Q0M3
MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9HTzJyc29JTTRsLVE2R05jRTdmdzFGOEVZ
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dPMnJzb0lNNGwtUTZHTmNFN2Z3MUY4RVkzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTgxMC83QkE4RDM5Q0M3MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9HTzJyc29JTTRs
LVE2R05jRTdmdzFGOEVZM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfFzOeHbMZN/PCxphbkt/2oswZJbUD3GPtNmRQUfM27MaGsSBJSQzm9T3qgBH
ZWzoGoGBtlHK4Z0cwjTmamHvYCZVggkxt0ooHsKPRxAZmCU2syIxfPrXG0Lamd0P
WoPK6fQSMoLiKRKMEGzV0m+NefJwdEpKhKb4m6c16BC5gfRSqqTQk1jIqSItfd3h
4vuT9KRK1tRM8RYHAgaSvyNCl/RutvRgYCdU8pigexAa1+okkJvznDnFmQ8/7/tH
Dt2gq0GYIt0bYHBh+3M2cEq0jmydu/EsuE/78XEbhWMZoYOkjCXSzc8P3KhiyG/M
QneFVWfTslbnfSzuk4YJXJFApQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:30 2026 by rpki-client