Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
File:                     GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json)
Hash identifier:          2wIb4O/Nw3qigbGANAjuQcU8MinmcNr9hmbpreQII/U=
Subject key identifier:   B6:A3:5F:21:4D:41:82:9D:19:73:65:DE:2A:90:45:55:FA:5B:D5:96
Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Certificate issuer:       /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
Manifest number:          014F
Signing time:             Mon 21 Sep 2026 05:22:50 +0000
Manifest this update:     Mon 21 Sep 2026 05:22:50 +0000
Manifest next update:     Mon 28 Sep 2026 05:22:50 +0000
Files and hashes:         1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: DVwNchoLCEyv/vE6gRjcsryO5ln0UEIfBKzmbvLiUv8=)
                          2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: 00t278toG5ltI5w8ERTGNX15x/yelt1qQ4SxeDS7/K8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
        Validity
            Not Before: Sep 21 05:22:50 2026 GMT
            Not After : Sep 28 05:22:50 2026 GMT
        Subject: CN=6ab0bf2a-3282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:26:6e:f7:d2:29:5b:6c:fb:05:e8:db:6f:
                    0b:f9:43:cb:48:16:67:5f:10:6e:f6:51:28:98:92:
                    a3:96:6a:60:fe:e0:d8:13:c2:36:65:dc:c1:2f:9a:
                    58:0b:8d:f5:8e:e7:c2:7c:b4:96:6a:7e:f7:50:77:
                    be:65:15:72:15:7a:71:89:34:9a:41:0c:64:90:85:
                    51:93:58:74:ad:42:81:7c:22:69:6a:22:ee:97:da:
                    d2:07:82:c6:09:da:b5:77:3b:6e:51:de:ee:66:d0:
                    22:4c:0d:44:c3:a2:ed:ca:74:3c:74:f3:8e:b8:67:
                    36:52:f4:15:d4:06:69:47:06:c0:c2:11:2b:e2:e8:
                    e2:53:e5:ef:11:24:97:13:bd:b1:48:aa:c3:5d:ff:
                    31:7e:45:08:66:23:54:91:79:b0:59:e8:1c:87:c0:
                    99:8a:ff:b2:34:d7:cb:8e:d3:71:54:33:d5:c0:77:
                    71:77:32:40:7e:68:42:fc:fc:48:47:d3:8f:de:4d:
                    f3:13:48:72:92:95:5d:23:4e:d6:c7:da:4f:51:9e:
                    0a:b2:b8:ff:c9:54:08:cd:59:0f:db:ed:1d:89:28:
                    9f:1c:ab:79:38:96:f9:b1:ca:a0:69:e3:6e:f9:6d:
                    c7:84:0f:5b:6b:3c:34:39:e0:2d:7b:51:fd:33:d5:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:5F:21:4D:41:82:9D:19:73:65:DE:2A:90:45:55:FA:5B:D5:96
            X509v3 Authority Key Identifier:
                keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ec:e8:bd:65:1c:de:3e:4b:49:70:79:44:06:f2:a3:b7:d5:
         ff:6a:b2:d2:f2:ea:f4:be:9c:63:af:61:86:a4:83:9d:d2:8f:
         1f:cc:08:63:98:63:d7:8b:59:35:2e:89:14:d3:d1:31:ae:8e:
         19:78:5c:0e:c4:cb:37:82:50:91:0c:66:51:ce:1a:a9:fe:9d:
         80:bd:3b:ba:09:46:fe:3f:07:89:9a:1e:89:5a:89:90:75:d9:
         ec:88:0d:6c:fb:63:30:3c:af:91:8f:04:3b:85:57:03:4d:8b:
         28:06:8c:0e:cc:fa:3c:c8:0a:b6:82:13:e8:88:72:70:4d:3d:
         60:8e:1d:ac:f8:cc:53:17:e3:3b:73:67:bc:8a:02:a9:22:97:
         d4:b4:f2:2d:38:4b:f1:91:53:c8:a2:d9:e3:b1:55:bb:c8:2a:
         f3:df:c0:5e:84:8f:f5:ae:0f:2c:aa:bf:17:af:1e:4f:46:02:
         a7:3c:66:54:10:8a:fb:c3:ac:d2:c9:a5:62:d2:a4:1c:f4:d3:
         17:83:f8:a1:99:27:0e:3d:94:df:da:99:ac:3d:e0:3b:20:5d:
         22:cf:a2:bc:57:16:9c:b8:78:04:36:5a:38:8f:d4:0c:86:e7:
         11:e6:d7:52:dc:9c:b0:68:49:0c:cc:4a:f7:ad:88:16:e5:52:
         2a:6f:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:30:42 2026 by rpki-client