Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
File:                     oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json)
Hash identifier:          7aPnlXhriOHVUBybi5EcJuBdL3HfNlaE2/3MjH2j8uk=
Subject key identifier:   97:D3:D8:22:C1:AF:E7:3B:EC:BD:D2:00:9C:ED:9D:BC:2E:D9:66:18
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Certificate issuer:       /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
Manifest number:          AB
Signing time:             Sun 05 Apr 2026 06:33:41 +0000
Manifest this update:     Sun 05 Apr 2026 06:33:41 +0000
Manifest next update:     Sun 12 Apr 2026 06:33:41 +0000
Files and hashes:         1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: OZqy5+oxT99FnJG5mG6SElcw5oAmy9I7ujKHC5h9dT0=)
                          2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: JMC4EuohYAuR9ioGha9Vz6YB1g+lt1RMEiDJajpI5UU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
                          rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
        Validity
            Not Before: Apr  5 06:33:41 2026 GMT
            Not After : Apr 12 06:33:41 2026 GMT
        Subject: CN=69d20245-60d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cd:4f:3a:c2:e3:48:11:8c:13:d9:bc:6f:7e:
                    02:90:03:cb:13:05:ce:d1:f9:e9:7c:6a:58:94:26:
                    24:69:04:ea:22:e5:4d:94:39:97:ad:4d:4a:2d:e3:
                    61:5a:19:23:36:ca:60:e7:6a:c6:96:56:fb:05:c1:
                    1a:15:03:35:09:f5:ae:3b:1c:72:7c:b5:79:c1:31:
                    d6:f1:41:dc:93:af:62:69:b9:c7:c1:a0:77:82:1f:
                    9f:ee:bd:45:50:4b:8f:cd:af:34:2e:f7:8c:e0:72:
                    37:2c:5c:7d:7b:52:37:60:e4:06:bb:76:a9:ca:fb:
                    11:ce:64:fc:75:34:bc:05:1a:a5:b7:51:6f:e8:1d:
                    87:fd:8d:76:1e:40:6f:e4:c3:24:0a:23:43:c0:31:
                    73:df:d1:e3:33:db:27:3c:81:82:d6:49:1f:3b:2f:
                    f6:84:a3:5c:4f:7b:0a:87:b8:05:ad:19:26:93:46:
                    8f:5b:52:04:4f:c2:13:e9:b7:fb:b2:14:3f:f6:f1:
                    fb:17:27:b6:3a:d1:d0:1f:ea:d2:70:e0:3b:bd:63:
                    84:b0:6b:82:26:cd:97:4c:fd:70:14:a9:1b:8f:e1:
                    cb:c4:1f:54:5d:e7:7a:24:ad:63:9c:a2:7f:30:7d:
                    76:f2:36:99:db:c7:95:a3:7e:ee:3b:bf:cc:8d:47:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D3:D8:22:C1:AF:E7:3B:EC:BD:D2:00:9C:ED:9D:BC:2E:D9:66:18
            X509v3 Authority Key Identifier:
                keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:3e:b2:bb:c5:11:66:42:50:e5:36:70:9b:bf:a4:0b:d1:1a:
         c4:7e:0c:f5:bf:fb:08:1d:21:b1:0f:7a:a3:69:2d:c2:97:a4:
         6b:6c:dd:87:e9:6f:8e:44:7f:22:b3:36:af:5b:c8:81:08:12:
         54:b9:fa:73:b1:7b:ea:17:31:fa:0f:66:67:9c:fc:6e:3c:8d:
         2c:ba:31:f5:7c:89:0d:16:3b:50:76:88:c6:51:b3:e4:b0:1d:
         d4:9d:b8:75:ec:ed:b9:78:6e:2e:1c:bd:10:f3:12:6f:92:67:
         c4:2d:1c:10:27:39:67:d2:4c:9c:97:4e:cb:bb:6f:6c:04:ba:
         cc:c4:56:cd:43:d8:f0:9d:60:fa:7e:f3:e4:06:47:6a:0b:2c:
         5d:e4:26:af:96:93:64:8c:c5:8a:07:37:a9:88:f9:b7:36:00:
         9a:32:e8:53:19:4f:1b:14:d1:bd:2d:80:ef:71:1a:1e:2e:b3:
         6b:18:71:0b:c9:19:4d:b0:e6:b6:46:3f:d4:e3:c7:cc:09:99:
         54:fd:6d:72:46:5d:f1:57:03:d1:e9:e5:e0:c5:f1:87:b2:83:
         dc:ca:3d:66:51:0e:66:d4:69:20:98:4b:a5:d9:5c:10:20:b2:
         dd:fd:63:39:7c:92:34:8f:14:cb:1d:5c:ec:66:dc:cc:76:ac:
         3d:07:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:52 2026 by rpki-client