Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
File:                     GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json)
Hash identifier:          Riu0H2/fiMrmXheveWLE6Du0+uah+YzyrQEqeBNZZyc=
Subject key identifier:   A0:F4:FE:0F:AC:52:B9:A4:5C:29:15:DE:12:AC:76:0A:DC:3B:CE:12
Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7
Certificate issuer:       /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
Certificate serial:       3536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
Manifest number:          3533
Signing time:             Sat 18 Apr 2026 14:35:09 +0000
Manifest this update:     Sat 18 Apr 2026 14:35:09 +0000
Manifest next update:     Sat 25 Apr 2026 14:35:09 +0000
Files and hashes:         1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: 6LlzJnKStli33ERLrlRbWZjawgP8q9zMdqsUU/u9gzU=)
                          2: 2021C6F6795E11F0B07E6E6BC4F9AE02.roa (hash: TqlpecplvSdLV29TPM7WN07wNwjZ8MAc88miHR0h6qc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl
                          rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13622 (0x3536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7
        Validity
            Not Before: Apr 18 14:35:09 2026 GMT
            Not After : Apr 25 14:35:09 2026 GMT
        Subject: CN=69e3969d-9ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:8c:17:91:13:19:72:06:4c:46:b9:de:3f:
                    98:8d:03:74:86:1c:fa:f1:c2:73:90:5c:e5:08:8d:
                    4b:66:71:c5:71:52:58:68:67:53:db:c6:69:99:53:
                    98:fb:f9:90:86:9f:da:27:df:75:28:9d:fe:c9:af:
                    28:a2:f0:54:0c:ca:fb:fc:27:b2:63:00:67:ce:c9:
                    02:1f:14:d3:69:b7:88:e2:44:6a:67:f3:a4:f0:36:
                    74:5d:e1:5a:c5:c3:75:b0:7a:9a:7c:dd:d3:be:4f:
                    1e:6f:ac:40:9d:c3:16:cc:25:b4:57:e9:16:e7:69:
                    70:08:53:0e:a8:ca:09:6d:5d:be:82:c0:33:9d:4d:
                    d2:a3:4f:96:7e:0b:5a:1e:55:36:f7:a3:e2:0f:ee:
                    da:0e:18:33:18:f1:52:de:f4:3b:0b:73:11:20:76:
                    d3:0c:29:97:2c:05:25:a2:fd:1d:a7:99:2a:8b:24:
                    08:af:48:82:08:6b:bc:af:16:f6:49:fc:e2:2f:27:
                    61:f5:92:4d:ab:92:77:5c:78:77:be:d1:a3:6d:64:
                    c0:9d:0a:7b:85:2a:a9:8c:4a:ad:3a:f9:a0:c5:d4:
                    5a:ed:e8:c4:13:0c:97:cc:d4:60:c0:74:a8:1b:55:
                    3d:17:88:68:89:a8:46:26:95:ed:c6:a8:0c:40:a3:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F4:FE:0F:AC:52:B9:A4:5C:29:15:DE:12:AC:76:0A:DC:3B:CE:12
            X509v3 Authority Key Identifier:
                keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:30:cc:d1:4d:c5:f6:df:1b:e9:a9:d8:03:4b:2f:33:82:9a:
         1f:ea:4d:e4:8f:6d:71:18:20:e1:b0:ae:03:d9:9f:01:ba:92:
         19:e5:d5:7b:45:08:8c:55:d0:09:af:07:4a:30:91:d6:27:37:
         4c:b3:5b:c0:35:1e:f0:d7:22:f5:31:15:44:0d:70:f0:68:16:
         fb:3f:fc:a3:70:39:a1:28:e1:26:de:8d:92:d5:da:89:7e:fd:
         fb:c9:72:ea:89:81:64:0f:6e:ab:66:f1:2a:f9:b6:09:02:8c:
         69:4a:7c:bc:7f:4a:f3:8c:7c:91:6b:d1:98:f2:83:46:60:65:
         a6:0a:98:79:8e:ef:3f:63:71:cf:02:77:78:f0:b9:46:ae:61:
         8c:4e:0d:fb:ac:73:b8:cb:cd:c0:82:77:39:7c:b4:05:95:b5:
         e9:58:a9:70:6e:6c:fc:83:00:c6:2d:2b:35:f2:78:87:88:b6:
         de:1d:25:66:2c:ff:78:2c:80:72:c8:c8:f9:5e:4d:4f:a8:22:
         51:00:f5:44:c8:a6:a3:5e:f3:c6:fd:e7:ef:fa:49:27:f0:6c:
         c9:dd:ca:84:e0:55:59:46:55:23:e9:67:97:61:76:ce:50:c6:
         3e:11:18:4c:c4:5a:ab:7e:fe:3f:49:4b:a3:c9:75:5b:0e:40:
         5e:78:11:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZGQTgxMTAvBgNVBAUTKDFBODM4QTc2OEQ1QkYwRjU0QzYxQUE2REEyQjQ1MDM4
MUJERTY3QzcwHhcNMjYwNDE4MTQzNTA5WhcNMjYwNDI1MTQzNTA5WjAYMRYwFAYD
VQQDEw02OWUzOTY5ZC05Y2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0FyMF5ETGXIGTEa53j+YjQN0hhz68cJzkFzlCI1LZnHFcVJYaGdT28ZpmVOY
+/mQhp/aJ991KJ3+ya8oovBUDMr7/CeyYwBnzskCHxTTabeI4kRqZ/Ok8DZ0XeFa
xcN1sHqafN3Tvk8eb6xAncMWzCW0V+kW52lwCFMOqMoJbV2+gsAznU3So0+Wfgta
HlU296PiD+7aDhgzGPFS3vQ7C3MRIHbTDCmXLAUlov0dp5kqiyQIr0iCCGu8rxb2
SfziLydh9ZJNq5J3XHh3vtGjbWTAnQp7hSqpjEqtOvmgxdRa7ejEEwyXzNRgwHSo
G1U9F4hoiahGJpXtxqgMQKMeEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKD0/g+s
UrmkXCkV3hKsdgrcO84SMB8GA1UdIwQYMBaAFBqDinaNW/D1TGGqbaK0UDgb3mfH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkZBOC85MjU1MzM2MjFE
OEIxMUUyOURGRDNERTYwOEIwMkNEMi9Hb09LZG8xYjhQVk1ZYXB0b3JSUU9CdmVa
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dvT0tkbzFiOFBWTVlhcHRvclJRT0J2ZVo4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkZBOC85MjU1MzM2MjFEOEIxMUUyOURGRDNERTYwOEIwMkNEMi9Hb09LZG8xYjhQ
Vk1ZYXB0b3JSUU9CdmVaOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmzDM0U3F9t8b6anYA0svM4KaH+pN5I9tcRgg4bCuA9mfAbqSGeXVe0UIjFXQ
Ca8HSjCR1ic3TLNbwDUe8Nci9TEVRA1w8GgW+z/8o3A5oSjhJt6NktXaiX79+8ly
6omBZA9uq2bxKvm2CQKMaUp8vH9K84x8kWvRmPKDRmBlpgqYeY7vP2NxzwJ3ePC5
Rq5hjE4N+6xzuMvNwIJ3OXy0BZW16VipcG5s/IMAxi0rNfJ4h4i23h0lZiz/eCyA
csjI+V5NT6giUQD1RMimo17zxv3n7/pJJ/Bsyd3KhOBVWUZVI+lnl2F2zlDGPhEY
TMRaq37+P0lLo8l1Ww5AXngRsw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:48 2026 by rpki-client