Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File:                     GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier:          jkG3Ac2c/3a9GMlinxh6VewbKrLJceI+y5Llz629L+U=
Subject key identifier:   63:CD:0B:60:76:BD:0F:10:ED:52:35:84:05:90:81:32:3F:16:01:BF
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number:          0257
Signing time:             Fri 17 Apr 2026 02:02:48 +0000
Manifest this update:     Fri 17 Apr 2026 02:02:48 +0000
Manifest next update:     Fri 24 Apr 2026 02:02:48 +0000
Files and hashes:         1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: eekmbDuQMtASzEpRW5jsdr+cGx/eMzmNLJVECFzy6rE=)
                          2: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: GCoUxXSsVbAe0WY7DuUx66j+ly/pwEQTvzaDkQp3iFo=)
                          3: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=)
                          4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Apr 17 02:02:48 2026 GMT
            Not After : Apr 24 02:02:48 2026 GMT
        Subject: CN=69e194c8-c4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:4e:91:7a:ee:43:d4:89:ba:35:ed:0c:09:
                    c5:66:24:7b:5c:52:27:3b:09:cd:b0:3c:0a:d0:c2:
                    d3:8c:1c:ed:19:10:58:3a:9e:26:f2:25:7f:73:a5:
                    f9:af:2e:ed:9e:48:b4:c8:51:17:f2:2c:9d:98:34:
                    a3:8e:53:9f:ad:55:66:15:c4:4f:bf:4a:85:07:02:
                    82:fe:44:89:2c:e1:42:96:9c:48:79:c2:ac:de:43:
                    db:76:cf:42:16:8f:5b:2e:3b:45:1a:e5:b4:fb:fe:
                    20:74:dd:64:e3:72:4a:11:2d:1e:21:29:7e:46:be:
                    a3:d8:90:d6:6a:f0:ee:c6:b5:7f:85:93:6d:4e:26:
                    6d:59:9e:71:1e:06:56:f8:2f:09:8d:c1:f6:ee:0c:
                    ba:32:12:67:d7:90:80:f1:fe:85:3e:6a:65:b6:e3:
                    ab:3e:ce:02:df:3e:3e:ad:03:b2:cb:4f:66:b2:08:
                    b8:b9:81:1d:11:31:6c:57:65:ce:f9:8e:25:3b:06:
                    ce:6e:ac:f9:45:b1:a3:e0:50:49:51:4f:47:6c:5c:
                    17:ab:e5:c2:8a:67:bc:49:ca:9d:ba:0a:d5:dc:6a:
                    17:cb:33:c3:36:f3:d7:a9:13:cb:86:d5:e2:cf:5b:
                    97:bf:79:e8:8e:bb:0a:78:57:4e:31:a0:a5:f2:63:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:0B:60:76:BD:0F:10:ED:52:35:84:05:90:81:32:3F:16:01:BF
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:2a:75:2d:18:02:3f:89:27:e0:d7:f0:3c:ef:d6:60:d3:
         27:a6:aa:3b:dd:bd:7d:b0:60:85:9d:bd:cc:a5:9a:50:e6:03:
         14:a9:15:4a:87:88:a8:d2:6f:46:c1:7d:35:f6:de:26:cb:fd:
         ce:9d:38:a6:ab:29:76:7f:75:10:69:43:46:2b:54:73:aa:a9:
         47:85:ee:bb:f4:d1:cd:4d:ca:db:6f:b5:79:37:1b:b0:61:35:
         a1:3f:a1:11:da:ce:18:db:cf:03:b9:52:51:9e:48:3b:02:c8:
         bc:67:aa:19:04:d1:42:07:67:ae:1f:07:0f:4e:d7:f5:59:71:
         c9:66:fb:a3:28:54:fc:c4:89:c8:73:ca:43:db:a8:4f:38:12:
         0b:aa:2b:07:a9:fa:4a:bd:21:03:3a:c7:5e:ff:4f:87:8a:2d:
         32:54:96:b4:81:0c:f9:61:dc:e5:15:37:89:6e:a5:1a:8f:bd:
         70:61:6f:16:f3:be:b8:ed:5d:eb:21:68:a8:1f:bb:58:ca:d1:
         7b:a8:f9:53:87:85:60:36:84:89:fe:6f:d2:e4:55:64:25:9b:
         76:2e:99:59:bd:ce:78:02:a2:8b:fe:0d:f1:f8:11:1b:41:0a:
         ea:1a:bf:1a:a2:cf:e7:f7:f5:db:25:bc:5f:96:98:7b:cf:53:
         1c:64:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:07 2026 by rpki-client