Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
File:                     ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json)
Hash identifier:          5jKP3FGW5vPzlLLC/M5LVQj54kf2DoYJf/2569593h0=
Subject key identifier:   4B:6A:F3:28:38:90:DF:CB:2D:F3:BC:17:9B:95:9E:CD:B7:2B:28:2C
Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
Certificate issuer:       /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Certificate serial:       08B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
Manifest number:          08A3
Signing time:             Sat 04 Apr 2026 20:18:25 +0000
Manifest this update:     Sat 04 Apr 2026 20:18:24 +0000
Manifest next update:     Sat 11 Apr 2026 20:18:24 +0000
Files and hashes:         1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: TA2qaSqVKr7hds2zgGZYTqSw78SL3mP4r0FCwLsH+xA=)
                          2: B019C596499E11EBA61D7146C4F9AE02.roa (hash: vmFeCCqd0p+xBwwBiH862ux9Uk8d+Hb/Tq8YBNVAOrY=)
                          3: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: t3r3ct1v62CkRoqbDTfbFNF8KY0PM5gtyGYmsu7VXes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl
                          rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
        Validity
            Not Before: Apr  4 20:18:24 2026 GMT
            Not After : Apr 11 20:18:24 2026 GMT
        Subject: CN=69d17211-f455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:a9:eb:51:3a:27:93:d2:91:76:44:5b:e2:
                    04:89:cf:69:57:97:fc:c9:1a:b8:b4:a0:86:4e:6c:
                    19:6c:7f:e1:ee:b9:b1:d3:1b:d9:17:1f:d1:31:16:
                    41:e0:e4:83:fa:e0:b8:7e:eb:21:2c:49:c9:87:73:
                    6b:dc:8d:6e:77:36:a5:a9:cb:c0:50:f8:a1:28:06:
                    27:65:bb:1e:42:9c:77:1d:f9:41:ed:7d:4d:77:61:
                    7f:10:89:ae:bc:0b:42:cb:23:1d:e7:6e:7a:2f:ed:
                    cc:95:8c:a6:1a:eb:e9:a3:11:ff:4d:3c:aa:a3:8d:
                    c0:fa:37:da:76:0f:53:70:46:fe:95:6a:64:5c:77:
                    37:49:84:84:d0:f3:ca:32:c5:2b:3b:e1:d8:3d:c6:
                    cb:1b:61:e0:33:2f:da:d8:52:ce:f2:d6:1d:a4:c0:
                    d6:18:6c:1f:55:16:60:11:71:70:e8:5b:62:3a:57:
                    ef:e3:4d:3d:77:60:2a:71:3c:9e:fa:f6:c5:19:e2:
                    52:3e:1b:7b:a3:c6:03:f7:5a:0c:dc:42:a1:bf:b5:
                    b1:9a:67:7d:cc:9c:aa:ce:d0:24:07:72:68:53:ec:
                    f6:79:d6:b0:6c:60:f7:55:b5:33:b3:88:cd:1a:32:
                    e2:f9:0b:c1:ca:17:6a:9c:07:cd:33:68:81:6e:32:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6A:F3:28:38:90:DF:CB:2D:F3:BC:17:9B:95:9E:CD:B7:2B:28:2C
            X509v3 Authority Key Identifier:
                keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:d2:65:2c:c1:ac:50:69:5f:c6:0e:73:af:ab:05:c9:68:
         e5:b2:25:50:fd:b0:51:fe:29:79:a5:dd:b1:b9:7b:da:cd:f3:
         1a:c0:b2:14:cc:2d:05:5d:13:fd:d7:c5:f8:26:a8:1c:34:9c:
         56:95:d3:20:e8:24:76:a7:c0:8d:da:71:fa:0c:4d:7a:c6:a2:
         95:82:8c:aa:12:08:5d:38:b4:6f:e3:bb:03:6c:90:f4:e2:d1:
         89:a8:5c:12:be:8e:fe:2f:4d:65:2d:17:9b:40:84:47:4c:c7:
         97:12:71:e7:37:db:f6:49:fe:46:ed:fb:75:07:41:8f:59:0c:
         d3:26:6f:a2:fd:ef:43:ed:fd:92:bc:6a:9a:6b:f1:3c:9a:4d:
         ef:a0:fd:e2:a8:11:a0:55:b9:12:2d:fb:8d:fc:11:99:55:95:
         a2:13:e1:9b:b8:3d:af:c4:b0:cd:9b:71:e9:58:7d:48:26:be:
         d8:9d:83:5d:26:8b:36:45:f7:90:75:a8:20:d2:ef:99:1b:ee:
         2b:1c:a9:b6:7c:d5:e6:62:25:8d:9a:95:26:73:95:df:7e:bd:
         6a:d9:0a:3f:76:c7:92:c9:e2:aa:c6:bb:3c:88:96:29:be:f1:
         c9:56:75:05:b4:fa:5f:83:92:7a:01:9b:3d:73:6c:18:d9:bf:
         7c:fe:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:59:01 2026 by rpki-client