Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
File:                     GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json)
Hash identifier:          7eLYcWKyS3LYKCE7v4JbbRMWbS8b7+1XPJW4F4q07/E=
Subject key identifier:   13:68:81:AF:C8:32:9B:F0:9F:4B:63:1A:FF:0D:0F:66:6B:E8:7D:FC
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Certificate issuer:       /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial:       03DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
Manifest number:          03D6
Signing time:             Fri 17 Apr 2026 00:27:50 +0000
Manifest this update:     Fri 17 Apr 2026 00:27:50 +0000
Manifest next update:     Fri 24 Apr 2026 00:27:50 +0000
Files and hashes:         1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: Ff043g5JVNYQuguHLEa9TaTPP12K6qFK3eWjBZFUvlo=)
                          2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: AwUinlhQoZr0cr/LeO9LbpyYPRye/aoN+g7yo3vyhJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
        Validity
            Not Before: Apr 17 00:27:50 2026 GMT
            Not After : Apr 24 00:27:50 2026 GMT
        Subject: CN=69e17e86-c340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:85:35:7e:ef:a6:21:bf:61:5e:f8:62:4e:
                    84:85:8c:99:3d:75:44:f8:e7:42:c4:e2:40:9c:dc:
                    71:d4:28:d0:fb:4e:d5:14:71:c7:74:40:cb:3e:25:
                    be:a6:8d:1e:96:96:a8:8f:c8:19:a3:2d:e6:34:97:
                    32:bd:d0:18:df:6b:2c:bf:ce:25:32:5d:0d:97:d8:
                    db:54:44:bd:20:89:07:b0:bb:93:16:aa:d0:42:c0:
                    f2:bb:c9:9d:ce:21:e0:00:14:81:f5:ae:86:5c:b5:
                    33:4c:76:a1:4f:bd:40:6e:4c:cd:f7:63:4e:71:0e:
                    9b:67:fe:6b:57:9d:f4:9e:ee:9a:ec:ec:34:64:4d:
                    c2:c8:5c:12:45:8e:01:90:59:8b:25:87:58:27:e5:
                    ae:ae:99:b2:a1:ae:0c:91:43:ff:bf:24:46:c4:e3:
                    95:35:49:c0:88:7f:69:e4:cb:fc:dd:31:e0:91:07:
                    a4:e8:1a:66:a6:37:30:b0:42:89:12:90:ea:d0:64:
                    0c:68:6c:79:47:1c:51:b6:72:ef:86:df:4a:24:37:
                    df:48:05:2e:9d:f0:15:5a:85:53:bb:f3:62:89:a7:
                    24:57:63:61:86:90:cf:97:c3:24:44:66:31:49:c3:
                    6c:3c:58:a5:71:cc:e8:c1:2d:db:7b:f7:5b:90:c5:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:68:81:AF:C8:32:9B:F0:9F:4B:63:1A:FF:0D:0F:66:6B:E8:7D:FC
            X509v3 Authority Key Identifier:
                keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:18:f3:54:63:56:dc:7d:8d:3f:97:6b:18:6e:74:60:e6:e2:
         19:9d:5d:f0:eb:35:19:5f:d6:5b:62:d0:35:06:02:8c:9e:36:
         6d:73:5b:42:97:ea:93:ce:67:c0:00:f9:bf:10:76:d5:2c:8c:
         66:8b:e7:fb:f5:a3:54:7a:fc:a5:8e:16:1b:a9:8e:47:99:ed:
         95:b9:79:52:aa:88:07:c1:85:7c:e1:fb:12:21:d7:ad:6f:9b:
         cf:b0:3a:57:de:da:0d:c5:ae:91:22:cc:c1:06:3b:29:60:d8:
         f9:18:cc:9b:39:97:ab:86:d3:be:8a:64:87:7e:d6:a4:61:b6:
         e0:d1:ec:82:7d:fe:8f:0b:81:e3:8c:29:c4:52:50:65:5d:36:
         98:95:11:09:5a:b8:a2:e0:b0:58:39:5b:5d:e7:ea:04:4c:5f:
         dc:e2:ab:6f:53:dc:88:aa:ba:0b:9d:46:2d:b6:4c:f4:16:94:
         91:bc:e4:0a:8c:3a:57:ac:33:26:49:a5:87:6e:af:51:02:76:
         f2:9a:3d:e9:73:eb:85:cf:37:5c:41:29:e9:5b:0f:3b:f8:da:
         75:8e:c5:d9:d4:95:fd:51:ed:aa:46:b7:16:5c:39:c7:f1:8b:
         e3:3d:d6:6c:d2:d6:ec:7a:6d:1c:eb:74:ac:e1:c8:54:27:7f:
         45:db:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:49 2026 by rpki-client