Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File:                     oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier:          1JZAAp3w4+oz8UPvq/Ls3k7e+l1cd9Ee05WykceQxB8=
Subject key identifier:   84:36:4C:52:98:F8:31:70:34:8D:7A:6F:5D:68:B8:2D:A3:B7:92:1E
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer:       /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number:          07F3
Signing time:             Sat 04 Apr 2026 21:03:35 +0000
Manifest this update:     Sat 04 Apr 2026 21:03:35 +0000
Manifest next update:     Sat 11 Apr 2026 21:03:35 +0000
Files and hashes:         1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: hajAwzXrah7qMYW02Dv4DoAK/snAgsSjEKMVFiv8V6E=)
                          2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
                          rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
        Validity
            Not Before: Apr  4 21:03:35 2026 GMT
            Not After : Apr 11 21:03:35 2026 GMT
        Subject: CN=69d17ca7-4b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:6e:42:d5:19:56:66:33:fa:0c:ad:47:89:
                    09:64:1b:5b:c7:cd:cc:0b:ba:e9:48:a7:c4:4e:8a:
                    ff:8c:f1:b2:29:2b:b9:67:a4:3f:7f:c9:34:46:99:
                    d2:e1:c8:ab:ed:80:8e:4f:02:34:64:dd:d7:7f:cb:
                    03:10:6a:f6:b3:64:df:b7:d9:42:32:5d:7a:a2:cc:
                    d9:f8:35:1c:d2:8d:ef:f7:9e:33:46:74:eb:b8:fc:
                    36:db:3e:b4:a0:54:c6:16:ba:86:f4:37:5c:04:fe:
                    12:39:5d:94:32:3e:82:93:cd:22:9a:53:94:5e:6f:
                    1d:69:2e:ef:7d:66:0c:36:fa:ef:21:e0:81:4e:46:
                    ef:d1:98:57:40:fa:ad:f0:c5:7c:9a:e0:45:66:55:
                    35:cc:ba:64:5f:91:6e:8d:df:af:46:00:47:fe:8b:
                    4d:cd:be:77:33:aa:d4:0a:00:1f:84:b6:7b:79:f7:
                    ce:99:0c:51:7b:c6:6f:d5:84:2a:73:c0:23:16:5b:
                    32:7f:09:f7:96:2a:8d:c3:86:c5:e7:34:c8:cc:78:
                    00:98:e2:48:63:10:ad:f1:64:f7:3f:86:af:62:18:
                    a3:5e:11:99:89:f0:bc:24:27:b8:0a:4f:57:96:f2:
                    a2:ea:a9:0d:7c:94:2c:06:3e:fa:df:22:01:6f:96:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:36:4C:52:98:F8:31:70:34:8D:7A:6F:5D:68:B8:2D:A3:B7:92:1E
            X509v3 Authority Key Identifier:
                keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:a3:2b:a9:0a:38:dd:99:cc:58:1e:12:aa:d0:96:29:03:
         38:6b:7c:7f:66:fb:42:3e:b0:b3:cd:de:74:37:19:76:70:72:
         ac:08:77:19:96:ae:39:e1:b9:06:6d:32:c8:6d:7b:7c:d7:fe:
         56:af:5d:a6:d5:c4:fd:eb:90:30:83:11:20:92:44:62:75:04:
         f9:e1:2a:7e:98:b5:d4:44:58:93:e4:f6:35:a0:b6:cf:31:3d:
         76:92:5f:c2:2f:b8:44:c2:3f:28:fb:7c:63:b9:ca:bc:b9:b3:
         16:c9:21:2a:a3:fe:0a:fd:9b:71:79:b0:aa:a8:ad:7c:74:a9:
         29:ce:ab:64:33:fa:35:27:d4:d1:b6:fc:9d:38:46:da:c6:24:
         04:88:9d:c2:b8:d6:25:1d:65:d4:5d:f7:9d:a0:35:b6:dc:62:
         e9:ec:de:bc:5c:1c:5a:b6:8b:af:a5:85:35:8b:02:81:ae:31:
         01:0e:41:75:a5:43:1c:a6:cf:3f:c2:29:06:41:e6:c7:fd:31:
         4b:a0:8b:bc:a9:cb:38:5e:0c:49:a1:8c:8d:cb:3f:28:c5:43:
         60:4e:5e:d6:cc:e1:23:96:67:b7:cf:84:0a:33:93:52:88:85:
         09:4d:e0:4a:24:d3:f8:81:01:93:64:76:0e:07:d9:72:2f:fb:
         4c:03:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:48 2026 by rpki-client