Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
File:                     8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json)
Hash identifier:          Q7276UkE5Ulljzin0IzhbZjOK3l7lkC4X0chJVKpwv8=
Subject key identifier:   05:7F:3F:71:BB:B9:BD:94:05:8A:B5:F9:AA:57:01:CA:A6:3F:78:BA
Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14
Certificate issuer:       /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
Certificate serial:       0635
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
Manifest number:          062C
Signing time:             Sun 20 Sep 2026 22:37:50 +0000
Manifest this update:     Sun 20 Sep 2026 22:37:49 +0000
Manifest next update:     Sun 27 Sep 2026 22:37:49 +0000
Files and hashes:         1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: Kpc8gTHjxmVV9eBqK5kX6wmlPx7G2pnWBRTBUA0e3iM=)
                          2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: lkhGPvHLt5B4SMlhrUjjiqTdeEOWM5w+xJQVTXf+Zdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1589 (0x635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
        Validity
            Not Before: Sep 20 22:37:49 2026 GMT
            Not After : Sep 27 22:37:49 2026 GMT
        Subject: CN=6ab0603e-fed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:f8:b3:9f:4e:0f:b8:31:43:3a:e8:5f:87:
                    c6:2e:78:e6:e2:b3:07:b8:13:12:7e:3a:b2:ad:a1:
                    6b:05:f2:0e:0c:25:26:34:ab:93:d1:fd:3a:75:d5:
                    21:e9:d9:ba:d0:6e:76:a8:08:1e:5c:34:ec:76:82:
                    fb:93:bb:54:ef:fa:56:74:1e:4a:fc:0e:96:69:0e:
                    13:06:61:08:8f:1c:7f:95:38:42:60:26:95:d6:b1:
                    ee:99:1f:b7:4a:ef:79:f2:ef:9d:62:64:0e:c3:6b:
                    d8:d5:ea:35:4f:ed:a6:44:67:59:7c:03:53:c5:e8:
                    ff:55:b7:56:5d:a0:ec:7a:b8:91:06:1a:0f:2a:ab:
                    41:6d:58:b1:0a:a5:da:82:6c:65:3d:ce:62:55:fb:
                    9f:60:16:f0:83:9b:b5:83:ae:46:bc:5e:74:f2:a4:
                    e9:08:10:3b:0c:b9:74:f1:31:c6:b9:75:d5:37:bc:
                    39:73:91:6c:7d:5d:da:fe:38:8d:d1:4e:37:29:6a:
                    c5:f7:1a:b6:94:ec:13:c5:51:9f:0e:d3:2e:d4:59:
                    a2:f1:91:1d:e3:b7:c6:71:d7:4e:c4:98:0d:e5:d6:
                    78:ad:b3:02:17:83:a4:1e:3f:9b:fd:eb:a4:4a:33:
                    95:23:ed:40:16:28:f9:ba:32:1f:ef:74:52:b7:4d:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7F:3F:71:BB:B9:BD:94:05:8A:B5:F9:AA:57:01:CA:A6:3F:78:BA
            X509v3 Authority Key Identifier:
                keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:29:b4:ee:5b:30:f5:1a:b5:19:c1:df:25:e0:04:be:5c:44:
         56:09:25:cd:85:f8:b2:3e:9f:fe:da:05:e8:89:ed:b9:8e:99:
         d7:05:58:46:8e:b6:a4:18:31:36:d2:d4:a2:e9:1b:bf:dd:9e:
         91:a6:43:67:f8:48:0a:87:bc:5c:c4:0a:17:de:3f:60:00:30:
         46:8e:d8:23:5f:2c:58:c6:0e:52:59:be:ea:ec:45:37:8a:0d:
         7a:9a:ba:d2:09:80:81:11:86:2f:02:fc:11:30:8b:9a:f0:48:
         1c:51:1f:a0:b8:9d:79:29:cc:e4:6f:00:f3:db:69:1d:87:27:
         8a:0c:7f:e3:22:53:cc:ab:5c:8e:0b:2f:bb:5c:d5:b0:42:15:
         bc:19:8c:ae:d8:ce:59:77:0f:d5:55:00:dd:9a:5c:ab:1d:03:
         b9:d5:66:f7:79:fd:61:9a:87:2d:f9:94:d5:ad:31:9a:2c:1e:
         24:0c:3d:ab:67:9e:c8:57:33:3b:3f:d5:eb:1b:d2:f8:b6:c6:
         89:f2:42:9a:41:6c:1a:98:1f:34:71:9e:24:36:aa:d4:78:fa:
         14:e9:83:c7:ab:4f:f4:97:2a:6c:85:24:64:d9:e8:1b:ce:26:
         90:ad:ec:fe:48:e1:91:1b:23:38:a5:7c:ca:ac:00:f0:46:1f:
         7b:96:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:17:40 2026 by rpki-client