Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File:                     o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier:          IEvZTNk3uVGfJYDBW4R8PzynJkM4x1BDlF3ym99Nzgo=
Subject key identifier:   DF:25:B8:08:36:19:15:25:D9:30:E4:0C:E2:16:32:68:BE:47:B0:9C
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer:       /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial:       03D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number:          03CC
Signing time:             Sun 05 Apr 2026 00:23:08 +0000
Manifest this update:     Sun 05 Apr 2026 00:23:07 +0000
Manifest next update:     Sun 12 Apr 2026 00:23:07 +0000
Files and hashes:         1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: 9Mv6Xm4jHf3aehk8iGr1OU6PhrdEWZ9C25fkz044sO4=)
                          2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: omBdwTJjBpYLM0wYV64/jRWywyvUBhT0d+jsji8w+eY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979 (0x3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
        Validity
            Not Before: Apr  5 00:23:07 2026 GMT
            Not After : Apr 12 00:23:07 2026 GMT
        Subject: CN=69d1ab6c-d4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:c2:02:01:3d:2b:3f:62:6e:3a:39:f5:5f:
                    0a:85:10:5b:ab:a4:aa:06:fa:ec:0f:a8:49:c6:76:
                    30:c4:10:63:61:a8:7a:6c:26:29:99:76:a4:bf:4a:
                    ce:bd:2a:85:b9:14:92:7b:a6:32:73:e1:85:06:c5:
                    ad:01:30:87:ab:26:78:da:02:71:0b:f9:3f:07:af:
                    d0:1a:2a:8b:94:f6:27:43:5b:1e:64:f1:08:6e:18:
                    f1:a7:f0:f8:92:94:bf:8b:2c:7b:66:f3:e9:87:36:
                    4e:e0:61:18:67:02:df:bb:15:85:d9:c0:61:3a:c5:
                    fb:fe:85:91:bb:2c:9e:ac:1a:cd:8d:a0:e1:a4:05:
                    cc:44:6d:47:ec:79:0e:4c:db:56:3b:0e:c0:21:1e:
                    8b:2a:bc:08:0f:01:13:f2:84:a3:11:fe:b0:63:6d:
                    e1:6c:53:de:b1:72:52:fd:87:8e:f9:8f:a0:20:f6:
                    b4:fd:b4:f5:bc:19:c6:a7:38:de:86:75:3d:6d:08:
                    bc:89:0f:13:9c:59:e6:dd:63:b3:be:96:7b:85:3b:
                    68:1c:02:75:15:a3:48:58:02:a1:b0:cd:3a:5c:9b:
                    9a:19:30:c2:44:07:9a:b7:4b:15:bb:1c:68:64:51:
                    0d:f0:36:d1:fd:45:d1:72:f6:0b:f4:80:92:a1:74:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:25:B8:08:36:19:15:25:D9:30:E4:0C:E2:16:32:68:BE:47:B0:9C
            X509v3 Authority Key Identifier:
                keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:af:3f:f1:fe:58:4f:ad:fd:09:c4:18:26:73:61:46:7c:44:
         7f:d4:30:27:b8:72:13:5a:f3:ad:c2:09:79:32:4a:a0:e6:8d:
         88:07:9d:c1:f7:59:4e:57:82:8b:c9:f7:ef:d0:b8:be:89:1a:
         b7:ac:63:cb:8f:95:7d:7c:c6:da:1a:ce:d5:5b:7c:f1:d8:66:
         5a:a1:2a:f6:70:b5:fd:d5:43:2c:63:30:98:b9:cb:37:35:35:
         31:f1:be:58:1a:00:4e:3e:78:7d:55:bb:20:9a:4f:6e:ef:24:
         e8:d5:0c:97:2c:4a:36:9a:e8:f0:c0:ab:8b:d0:75:31:ad:ea:
         8f:a9:6f:c6:cd:54:b2:f7:74:3c:22:e9:75:b0:78:d6:3f:51:
         a3:ce:65:82:3a:d6:49:33:b6:b1:d3:21:dd:48:13:1d:42:98:
         7a:fc:01:37:c2:ac:03:ed:9a:94:87:a9:0b:c8:6b:40:ea:d2:
         ff:75:7e:25:a2:0d:30:81:fa:6a:aa:da:26:25:b0:75:6f:86:
         6e:a6:66:8d:6d:79:37:59:3d:86:5a:be:35:c8:05:6a:36:68:
         8c:2e:4e:c5:1a:e5:a0:b4:58:ac:c4:76:cd:4a:17:02:e3:7d:
         59:6c:f5:af:c8:28:33:d7:10:67:2b:c6:0c:37:a9:0a:2e:68:
         5a:cf:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:10 2026 by rpki-client