Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
File:                     oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json)
Hash identifier:          lENsd6qdUM1OBFGxKfzWaVbrKjqcaoEBjn+r89omELo=
Subject key identifier:   B8:D6:02:A7:69:05:3E:B0:92:16:07:96:EA:2D:D3:02:10:AA:FF:53
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Certificate issuer:       /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
Manifest number:          9C
Signing time:             Sun 05 Apr 2026 06:51:58 +0000
Manifest this update:     Sun 05 Apr 2026 06:51:58 +0000
Manifest next update:     Sun 12 Apr 2026 06:51:58 +0000
Files and hashes:         1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: piqdkuSW5wBUseyzdVbgIz+E+irngLywWnpsA6lvR3E=)
                          2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=)
                          3: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: JA5c+7d2qZTIm69DCdbstQqBEizQ9Ks5KiXF+78kjhU=)
                          4: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: 53ZWjWlrVEqMyyvIGIAG0rSeNEbjukC62nS0Gg37TsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
        Validity
            Not Before: Apr  5 06:51:58 2026 GMT
            Not After : Apr 12 06:51:58 2026 GMT
        Subject: CN=69d2068e-32b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:4b:c0:22:e8:59:2a:fe:ca:65:c7:7b:97:
                    a7:8d:22:87:84:5b:6b:6a:8c:c6:45:ec:4d:e5:6d:
                    3e:89:ec:e8:1b:5f:45:37:84:af:8a:c1:b4:c2:45:
                    0f:57:9a:91:ab:e1:d0:a8:7d:58:d1:e9:5f:4a:46:
                    6d:d2:0c:74:3b:90:f0:2f:8d:76:35:9a:86:78:c6:
                    c1:6a:99:43:13:b4:f4:4d:8d:65:21:63:86:f0:a6:
                    6e:06:64:b6:3e:22:79:c7:6c:fd:cd:fe:10:5e:58:
                    fb:3a:5b:97:6c:fe:b1:59:ab:fa:93:ab:54:1a:69:
                    df:91:b7:b3:58:ed:f0:bd:3f:53:d9:6d:23:db:b2:
                    94:ae:f3:00:82:cc:8c:5a:13:09:03:03:26:24:da:
                    b5:9f:36:43:4e:ad:74:c1:08:cb:e1:a7:d0:e5:66:
                    aa:93:11:aa:bf:11:87:5a:d7:7a:66:97:0b:27:18:
                    97:0e:18:e2:2c:bc:c6:a5:06:fd:fc:8a:e6:ba:64:
                    e9:1d:1a:21:45:39:62:d7:13:df:18:99:00:41:f2:
                    b4:2c:ee:30:80:2b:35:9c:6a:cf:b1:a9:1b:e6:4a:
                    6d:4f:e1:8b:7b:17:f3:4f:be:d4:8e:87:75:09:3c:
                    89:11:c9:84:56:3f:26:ef:2e:a4:df:8e:1d:2b:29:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D6:02:A7:69:05:3E:B0:92:16:07:96:EA:2D:D3:02:10:AA:FF:53
            X509v3 Authority Key Identifier:
                keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:78:f5:ba:2a:14:c9:11:80:2d:ff:d2:09:e8:8a:6a:b9:7a:
         aa:00:f2:30:8d:a4:78:87:d4:91:75:51:cd:dd:76:55:51:f4:
         7b:79:76:62:09:96:92:a6:3e:d0:e0:a2:2d:fe:75:f4:09:c3:
         13:89:44:4a:10:01:b4:48:4c:a1:bb:02:49:a2:4a:49:54:29:
         a9:df:5b:6d:e5:0c:9b:00:f9:4e:cd:33:e2:24:39:ef:fb:6b:
         80:72:be:37:89:02:7b:ad:ec:df:74:ae:5e:ca:d4:6d:bf:3a:
         25:e3:22:a2:08:f0:c3:e3:91:ec:4d:be:04:27:4e:ff:e3:0e:
         8b:d7:39:4e:32:e1:35:14:0e:e1:7b:5c:59:9c:df:ce:3f:00:
         b7:37:72:92:18:e7:09:3c:5f:5f:1b:e3:56:92:7f:72:87:c6:
         72:60:f7:85:ae:24:91:f9:de:6d:2a:d8:ed:3a:1d:ca:06:20:
         8c:d1:9b:eb:a5:c0:ea:b6:e7:ae:6f:8a:ec:45:b7:7f:4e:12:
         b8:10:ac:14:9c:d5:98:91:5c:23:7b:e6:07:e3:13:17:b5:f1:
         d0:33:dc:c1:7b:39:35:9e:66:14:df:e1:e3:8d:68:78:f7:ca:
         c4:c4:43:47:c7:ff:0f:53:62:05:2f:d0:9f:8f:08:55:43:11:
         8f:5d:53:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZBMDExMTAvBgNVBAUTKEEwNUVDMjY2QjNDMEJGRDZDRUI1MTcxMDBCRTA1QzUw
NUI5NDM2MjQwHhcNMjYwNDA1MDY1MTU4WhcNMjYwNDEyMDY1MTU4WjAYMRYwFAYD
VQQDEw02OWQyMDY4ZS0zMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsRVLwCLoWSr+ymXHe5enjSKHhFtraozGRexN5W0+iezoG19FN4SvisG0wkUP
V5qRq+HQqH1Y0elfSkZt0gx0O5DwL412NZqGeMbBaplDE7T0TY1lIWOG8KZuBmS2
PiJ5x2z9zf4QXlj7OluXbP6xWav6k6tUGmnfkbezWO3wvT9T2W0j27KUrvMAgsyM
WhMJAwMmJNq1nzZDTq10wQjL4afQ5WaqkxGqvxGHWtd6ZpcLJxiXDhjiLLzGpQb9
/IrmumTpHRohRTli1xPfGJkAQfK0LO4wgCs1nGrPsakb5kptT+GLexfzT77Ujod1
CTyJEcmEVj8m7y6k344dKymvsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjWAqdp
BT6wkhYHluot0wIQqv9TMB8GA1UdIwQYMBaAFKBewmazwL/WzrUXEAvgXFBblDYk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkEwMS9GNjREM0IyNDU3
QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9vRjdDWnJQQXY5Yk90UmNRQy1CY1VGdVVO
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29GN0NaclBBdjliT3RSY1FDLUJjVUZ1VU5pUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkEwMS9GNjREM0IyNDU3QTkxMUYwOEVFNDI2MDlDNEY5QUUwMi9vRjdDWnJQQXY5
Yk90UmNRQy1CY1VGdVVOaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqHj1uioUyRGALf/SCeiKarl6qgDyMI2keIfUkXVRzd12VVH0e3l2YgmWkqY+
0OCiLf519AnDE4lEShABtEhMobsCSaJKSVQpqd9bbeUMmwD5Ts0z4iQ57/trgHK+
N4kCe63s33SuXsrUbb86JeMiogjww+OR7E2+BCdO/+MOi9c5TjLhNRQO4XtcWZzf
zj8AtzdykhjnCTxfXxvjVpJ/cofGcmD3ha4kkfnebSrY7TodygYgjNGb66XA6rbn
rm+K7EW3f04SuBCsFJzVmJFcI3vmB+MTF7Xx0DPcwXs5NZ5mFN/h441oePfKxMRD
R8f/D1NiBS/Qn48IVUMRj11TLw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:22 2026 by rpki-client