Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
File:                     OY22Qj_F4Pd3TyozMdfbzErb9TY.mft (raw, json)
Hash identifier:          ZM+eVrhQ/mmH6uxoltj6+ctG2aLxXdn8WSxFZCE4uM0=
Subject key identifier:   D2:1A:8C:8A:C8:2F:29:8E:64:0F:28:71:8B:97:AB:43:23:EF:E1:8C
Authority key identifier: 39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36
Certificate issuer:       /CN=A9111E74/serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
Manifest number:          60
Signing time:             Fri 17 Apr 2026 07:43:00 +0000
Manifest this update:     Fri 17 Apr 2026 07:42:59 +0000
Manifest next update:     Fri 24 Apr 2026 07:42:59 +0000
Files and hashes:         1: OY22Qj_F4Pd3TyozMdfbzErb9TY.crl (hash: tWjPfhrWjbvhM6cx/sEWwVykhXC6o2nZHi2ndnK9Lt4=)
                          2: 7A55B678AB4511F091F88158C4F9AE02.roa (hash: lWwnc93vcwPeE067Q8c+J9Tc2/DFJkWrWa0LCFaHy10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl
                          rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111E74, serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536
        Validity
            Not Before: Apr 17 07:42:59 2026 GMT
            Not After : Apr 24 07:42:59 2026 GMT
        Subject: CN=69e1e484-a830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:fe:c7:63:4c:8d:47:ce:2f:e4:37:cb:ae:
                    b6:f8:c3:18:1d:8f:14:64:fb:51:79:f6:ff:3c:b7:
                    19:18:9f:f3:e8:c0:1e:c5:a9:7b:d8:42:77:f6:78:
                    db:6e:c5:52:f4:4c:01:ea:aa:a2:af:70:14:1d:45:
                    7d:b6:44:74:30:57:b4:f1:5d:69:55:c1:14:bd:60:
                    f6:94:66:53:45:75:bc:07:0e:11:46:47:7d:2a:d9:
                    b0:4e:18:f6:dc:37:bb:bf:a5:a7:5a:08:81:bc:58:
                    ca:93:3e:a4:a8:3f:9e:ec:51:75:f5:50:d8:68:1e:
                    8f:10:05:a1:b6:3d:5c:fd:f8:08:d4:fc:28:2f:70:
                    36:94:1d:19:ba:75:06:93:67:21:4d:91:4e:ec:19:
                    52:fa:5a:aa:23:95:c5:9c:3b:8d:5d:cd:58:82:92:
                    ed:1a:ff:28:57:b3:06:16:69:c6:2a:e0:7b:e2:f7:
                    3e:f8:fe:0c:a1:c5:f7:6d:db:52:2e:a9:5e:34:d3:
                    7f:37:db:83:13:7a:dd:13:df:85:58:49:ad:0a:93:
                    b0:43:53:4d:75:92:75:85:54:9a:e0:8f:f4:1d:d2:
                    52:38:e7:73:0e:b1:da:00:b9:0b:1a:0a:34:17:68:
                    55:82:36:8b:fc:d7:42:3d:4b:9a:b8:44:cb:33:92:
                    70:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1A:8C:8A:C8:2F:29:8E:64:0F:28:71:8B:97:AB:43:23:EF:E1:8C
            X509v3 Authority Key Identifier:
                keyid:39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:61:a3:b7:5e:8c:a2:7f:f7:01:fc:be:bb:49:17:a2:4e:96:
         f6:e7:83:2b:f3:e9:4a:e9:89:21:a2:c5:f1:7b:5c:5b:9e:6c:
         e1:0f:c7:b5:01:88:90:97:94:14:0f:52:f6:41:4d:b4:0e:7e:
         83:fa:a0:a8:84:82:01:ef:93:2f:71:da:81:86:c5:f6:dd:e8:
         c4:4a:3d:cd:bb:16:05:3a:6e:37:ba:6e:7e:2c:b1:54:bf:6a:
         7c:8e:23:4d:ca:ae:67:14:a8:d1:dd:52:db:b0:af:a2:31:79:
         e2:de:38:67:03:93:c5:42:84:9e:d4:c7:3f:84:72:f3:15:19:
         a2:ed:9c:c4:ce:b8:db:e0:0d:a7:06:65:59:fc:ec:39:aa:22:
         65:8f:5c:f0:1c:49:47:34:84:78:09:85:3c:0c:84:55:b4:3f:
         68:65:ab:5b:92:9a:0a:ea:37:7a:27:38:e6:08:dd:b1:bd:81:
         ff:59:ab:74:0c:d1:5a:41:85:c7:d5:d8:e6:f0:82:19:51:ad:
         de:0f:c1:3f:5a:ce:3b:6a:1a:73:69:0e:3b:79:07:78:53:21:
         00:f1:5f:ed:1e:11:31:d3:95:7e:9e:10:b5:89:61:ae:e9:82:
         d4:c0:8d:47:c7:1b:40:78:6e:87:bf:df:24:49:5e:b8:c1:1d:
         02:46:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:39:37 2026 by rpki-client