Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
File:                     oQCGP_euS0zjitmLfMw3suVvSQk.mft (raw, json)
Hash identifier:          GiQJ4ucZd5FyTZVb3FhqDXBMkUcRFZWHrZ23FQJLshw=
Subject key identifier:   EE:CA:0E:19:FC:02:56:22:E5:BC:2E:D4:E3:DB:AF:64:33:82:FD:75
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Certificate issuer:       /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
Manifest number:          0F
Signing time:             Sun 05 Apr 2026 08:24:30 +0000
Manifest this update:     Sun 05 Apr 2026 08:24:30 +0000
Manifest next update:     Sun 12 Apr 2026 08:24:30 +0000
Files and hashes:         1: oQCGP_euS0zjitmLfMw3suVvSQk.crl (hash: QW2l58i5m8QUP5jUFYbI3B5vQqw4xTCjN2JhkX4flLQ=)
                          2: E437E9AA1D2B11F1A78643DA153D8C67.roa (hash: RhXXKNC+YYqsWGihres6AD8woRBHOi1Rql/obsHUIrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
                          rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
        Validity
            Not Before: Apr  5 08:24:30 2026 GMT
            Not After : Apr 12 08:24:30 2026 GMT
        Subject: CN=69d21c3e-4b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:7b:b7:c1:b3:2e:22:9e:34:14:ab:e5:ad:
                    08:67:89:9c:7d:ea:05:c2:f5:d5:ec:ed:17:4a:8f:
                    06:5f:3f:06:13:3a:f4:f8:94:ba:05:19:46:61:45:
                    7c:25:bc:52:1c:57:b6:2c:5a:80:93:ea:ca:a6:95:
                    ab:0f:a3:d0:30:ea:b3:38:b7:ec:f7:60:0f:85:b3:
                    8e:ee:0a:d7:17:ea:f5:f9:a8:eb:15:ba:cc:83:6c:
                    28:c8:5a:f1:f4:cb:b0:24:26:66:43:a4:0b:ea:53:
                    00:3d:d5:b2:68:8d:ef:3c:ee:02:ce:7a:e0:d0:c4:
                    92:35:ae:77:22:fc:21:bb:50:96:e6:7a:7d:bc:dd:
                    ad:5a:a0:a2:a8:af:d1:b8:40:5f:44:f6:0d:75:f6:
                    fc:8f:29:eb:65:25:42:72:83:b2:51:39:1a:6e:d7:
                    a3:6e:d9:25:3a:3d:aa:35:cf:c5:ec:66:95:bc:ed:
                    ae:aa:55:bf:65:28:9d:0a:a5:3a:ce:b0:59:9d:17:
                    4f:ce:28:8c:3a:3d:da:05:1e:43:82:b1:3d:4e:5b:
                    b3:f5:ca:a8:b9:0b:fe:23:0f:be:10:6f:42:c4:1c:
                    1e:ab:a5:0b:b5:05:c4:40:2d:c5:19:73:ac:1f:dd:
                    9e:09:21:3a:bf:1f:6d:91:f2:cd:10:fb:91:74:20:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CA:0E:19:FC:02:56:22:E5:BC:2E:D4:E3:DB:AF:64:33:82:FD:75
            X509v3 Authority Key Identifier:
                keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:73:a3:b0:cc:e3:fa:09:68:64:f7:48:1a:dd:a8:b3:a2:0a:
         46:d4:9f:20:db:52:24:81:f3:63:6b:1c:23:2f:51:d1:9e:6e:
         d5:c6:bd:8a:bd:79:21:5f:a4:62:66:fb:55:ac:cb:f8:10:d1:
         f6:01:81:96:58:07:fe:d9:7a:f5:e4:5a:44:92:6e:cf:31:ab:
         32:86:a4:7f:6c:8c:ed:aa:09:ea:40:c1:77:f0:1f:02:45:a4:
         50:c6:fb:82:20:19:0f:99:03:07:48:4d:53:06:db:77:c3:95:
         ad:4a:ed:27:05:76:62:76:d7:eb:30:df:85:d6:ef:19:e7:6d:
         c2:bd:e4:82:2e:41:71:61:81:70:e1:69:e9:f4:72:d3:c8:31:
         d3:8d:2a:1e:d7:b7:f9:5c:4c:33:c3:5f:51:87:95:dc:95:a5:
         42:3a:6e:37:31:d5:83:bc:0f:33:04:ab:6a:51:fd:f6:25:29:
         ee:a7:65:7e:39:b8:3c:5f:fc:e1:8d:63:05:25:b4:7c:05:55:
         d2:2a:3d:81:e5:d5:3e:dc:1a:3f:31:9a:dc:79:d1:5a:31:25:
         45:ea:92:c8:fb:47:46:31:12:18:9c:21:88:e2:3f:8c:7c:29:
         e0:04:c0:bc:3d:f5:1b:b8:35:ed:73:13:64:58:d8:84:74:58:
         8d:7b:13:87
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Mjg0QTExMC8GA1UEBRMoQTEwMDg2M0ZGN0FFNEI0Q0UzOEFEOThCN0NDQzM3QjJF
NTZGNDkwOTAeFw0yNjA0MDUwODI0MzBaFw0yNjA0MTIwODI0MzBaMBgxFjAUBgNV
BAMTDTY5ZDIxYzNlLTRiN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHjXu3wbMuIp40FKvlrQhniZx96gXC9dXs7RdKjwZfPwYTOvT4lLoFGUZhRXwl
vFIcV7YsWoCT6sqmlasPo9Aw6rM4t+z3YA+Fs47uCtcX6vX5qOsVusyDbCjIWvH0
y7AkJmZDpAvqUwA91bJoje887gLOeuDQxJI1rnci/CG7UJbmen283a1aoKKor9G4
QF9E9g119vyPKetlJUJyg7JRORpu16Nu2SU6Pao1z8XsZpW87a6qVb9lKJ0KpTrO
sFmdF0/OKIw6PdoFHkOCsT1OW7P1yqi5C/4jD74Qb0LEHB6rpQu1BcRALcUZc6wf
3Z4JITq/H22R8s0Q+5F0IA/rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7soOGfwC
ViLlvC7U49uvZDOC/XUwHwYDVR0jBBgwFoAUoQCGP/euS0zjitmLfMw3suVvSQkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyODRBLzg1NEMwRjVDMUQy
QjExRjFCOTEyNjZCNTE1M0Q4QzY3L29RQ0dQX2V1UzB6aml0bUxmTXczc3VWdlNR
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb1FDR1BfZXVTMHpqaXRtTGZNdzNzdVZ2U1FrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy
ODRBLzg1NEMwRjVDMUQyQjExRjFCOTEyNjZCNTE1M0Q4QzY3L29RQ0dQX2V1UzB6
aml0bUxmTXczc3VWdlNRay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBrc6OwzOP6CWhk90ga3aizogpG1J8g21IkgfNjaxwjL1HRnm7Vxr2KvXkhX6Ri
ZvtVrMv4ENH2AYGWWAf+2Xr15FpEkm7PMasyhqR/bIztqgnqQMF38B8CRaRQxvuC
IBkPmQMHSE1TBtt3w5WtSu0nBXZidtfrMN+F1u8Z523CveSCLkFxYYFw4Wnp9HLT
yDHTjSoe17f5XEwzw19Rh5XclaVCOm43MdWDvA8zBKtqUf32JSnup2V+Obg8X/zh
jWMFJbR8BVXSKj2B5dU+3Bo/MZrcedFaMSVF6pLI+0dGMRIYnCGI4j+MfCngBMC8
PfUbuDXtcxNkWNiEdFiNexOH
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:44 2026 by rpki-client