Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
File:                     goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json)
Hash identifier:          aJA0x6sJZCyDQJg7DYrWQ3BrvnSxzjmH4VPOs2V6q2w=
Subject key identifier:   2B:C4:AF:DC:6D:C0:2D:93:82:D1:D1:D4:D0:26:14:52:A7:FC:F4:EF
Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59
Certificate issuer:       /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
Certificate serial:       1AF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
Manifest number:          1ADC
Signing time:             Fri 12 Jun 2026 16:16:09 +0000
Manifest this update:     Fri 12 Jun 2026 16:16:08 +0000
Manifest next update:     Fri 19 Jun 2026 16:16:08 +0000
Files and hashes:         1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: y6HOMeMyrg1NZ/H4/vSvbHP2lIcT8Qn2Zo6XKEgrvC0=)
                          2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: 9z91DZp5gGn5objaZcmJRC9eXIJ9vkXiEByHhLrLrmk=)
                          3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 5qtsq7ia4AOMsTly8sF4e2lBQ7HF32ao+hzi58so/BA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl
                          rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6896 (0x1af0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59
        Validity
            Not Before: Jun 12 16:16:08 2026 GMT
            Not After : Jun 19 16:16:08 2026 GMT
        Subject: CN=6a2c30c9-7322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:f5:34:40:49:e9:cb:5d:7c:57:bb:36:0f:
                    98:30:98:0a:f0:5a:2d:0e:4f:26:69:67:d2:81:cb:
                    8a:7e:70:ce:79:8a:1d:2d:ff:95:eb:95:6b:1a:6c:
                    0b:63:2d:a2:f2:00:e0:8c:80:c9:1e:e0:1b:15:b6:
                    5a:15:e4:57:52:d7:ee:6b:3e:4b:ee:ca:17:28:8d:
                    f6:85:be:83:0b:3a:68:a5:f4:68:96:a6:b5:f4:de:
                    eb:80:06:ad:a3:ed:5a:2a:22:95:2c:91:15:84:7e:
                    67:b4:9c:f2:43:a2:6f:8f:55:c9:4a:5e:8a:ef:47:
                    b9:b3:91:da:81:3b:0c:2e:69:5c:4b:93:89:b3:d5:
                    11:36:0c:87:ea:f1:b7:18:a7:dc:d3:27:c2:54:ae:
                    11:fb:77:c6:17:40:38:e7:4b:ba:59:05:80:ba:83:
                    8c:fd:67:f2:ad:09:5f:ca:ba:cd:8c:1a:53:7a:bb:
                    e0:a4:5c:4d:a0:f4:23:4f:88:07:3c:bb:67:4b:8f:
                    1d:31:3a:0c:fc:92:3d:24:67:0c:64:d8:39:2b:5b:
                    cf:b7:66:e3:b4:a5:72:04:e5:00:25:9f:73:1c:34:
                    4b:32:fa:3a:04:65:c3:38:aa:4d:09:d6:c2:26:95:
                    23:9d:4b:91:16:e6:7c:a4:c1:79:85:ea:0d:bf:8d:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C4:AF:DC:6D:C0:2D:93:82:D1:D1:D4:D0:26:14:52:A7:FC:F4:EF
            X509v3 Authority Key Identifier:
                keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:41:25:88:5e:5e:b6:c2:95:02:5d:7a:c9:3b:d9:21:af:66:
         14:e8:b5:39:10:81:e3:3d:4e:f6:8f:07:a7:b5:25:1f:19:70:
         73:3e:1f:fe:77:50:ee:42:94:39:1e:63:4f:2e:12:4a:73:8d:
         76:fa:0a:ad:af:97:dc:e2:fe:64:0b:66:ed:4f:01:a6:47:80:
         9f:d0:1a:9a:8b:d0:e9:85:94:b2:7e:ad:d0:d4:90:d9:70:30:
         11:6d:d8:28:aa:1e:1c:7a:80:50:8c:da:c1:33:85:b2:fc:4c:
         c2:0c:d1:77:2a:d6:91:db:1e:33:83:75:91:66:1b:7a:7c:72:
         cd:39:82:69:3b:c7:87:d6:79:a9:9e:18:b3:76:6f:77:f0:b6:
         e6:4d:ec:9e:dd:d7:a1:cf:53:1c:b9:e3:ad:02:42:c7:bc:a5:
         ae:2e:4b:69:37:82:6f:44:0b:30:3a:f2:53:a7:e9:a8:d4:2f:
         d8:38:d2:71:e8:20:30:14:73:25:35:19:83:6e:a9:7c:53:6c:
         90:6e:fa:08:d8:52:6b:50:86:00:7e:f6:b5:af:2a:ec:0d:4f:
         80:10:ff:13:e0:50:20:31:94:7a:fc:aa:e5:bb:8d:bb:ea:95:
         1e:9a:76:61:ba:ee:12:4e:c3:52:ea:59:6f:3e:8d:e5:9d:de:
         77:c5:2e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:16 2026 by rpki-client