Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
File:                     OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json)
Hash identifier:          qn0l/EpHpXBfsJc65u59B1CHoCR1sUJ1hOmRftaZp6Q=
Subject key identifier:   79:6E:36:B6:B0:79:45:28:E4:74:BB:80:B1:AB:3F:E3:B4:BE:27:86
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Certificate issuer:       /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial:       0D64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
Manifest number:          0D31
Signing time:             Sun 26 Apr 2026 18:03:16 +0000
Manifest this update:     Sun 26 Apr 2026 18:03:15 +0000
Manifest next update:     Sun 03 May 2026 18:03:15 +0000
Files and hashes:         1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: +V0oWXdN7QQ0ByF9bOJRfNHsojCS+LX0ZwQ2AGTAcNY=)
                          2: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: gsMKozdipIVu4yCNIKSgaJ/LpxKdahpbHV6vCqtL14U=)
                          3: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 742WnLRxRAdtV7KzoHDoGL/kuH4GkN1lYPhgQ1RkcrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
                          rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 18:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3428 (0xd64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
        Validity
            Not Before: Apr 26 18:03:15 2026 GMT
            Not After : May  3 18:03:15 2026 GMT
        Subject: CN=69ee5364-cb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:c5:f9:ad:0e:a1:fc:e5:29:9b:2b:95:76:
                    75:8d:20:e4:30:8a:0c:65:a2:61:c9:a7:f5:4b:61:
                    db:dd:ee:e5:02:1f:86:ac:c1:e1:33:fe:7e:26:a2:
                    e5:fb:44:27:e6:22:e0:d0:55:51:06:96:bb:b0:4f:
                    61:bf:c2:35:ab:c4:18:15:36:0e:4b:f4:54:97:48:
                    96:6a:96:ee:c7:a4:43:e4:9d:28:d6:0f:4a:60:07:
                    70:5a:eb:73:fc:e8:59:cd:76:86:a5:0f:99:a9:64:
                    40:0f:e9:91:88:17:ab:71:60:be:0a:41:9c:c3:a7:
                    8f:7a:99:80:e1:30:f1:79:f2:b0:3a:df:c9:10:65:
                    e7:06:45:80:12:fe:35:15:cc:53:69:a8:6f:ec:dc:
                    ee:15:93:5e:00:d4:c5:4a:67:63:72:da:73:d7:ac:
                    6a:f3:ca:c9:f7:6e:6e:c7:51:12:9f:17:9d:3c:8a:
                    74:1b:f0:47:23:b8:f3:3f:9c:58:34:c7:22:c7:04:
                    e2:7f:63:1a:1b:48:80:a9:74:99:8a:9f:30:75:4a:
                    76:d4:6f:b2:16:da:47:9a:28:f8:70:03:0b:19:75:
                    5a:90:4f:c7:db:ca:3f:ee:ec:d9:c1:dd:0d:92:f0:
                    28:7d:a2:51:03:78:24:11:7a:10:f7:b7:4f:8e:10:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:36:B6:B0:79:45:28:E4:74:BB:80:B1:AB:3F:E3:B4:BE:27:86
            X509v3 Authority Key Identifier:
                keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:2a:94:b9:64:78:40:17:ba:19:6a:49:4f:d3:85:63:9f:
         8d:a6:cb:ac:c2:dd:e9:11:ac:d3:73:dd:a0:da:f4:32:fb:40:
         e8:67:a9:a7:67:95:39:d2:db:7d:aa:7b:0e:e5:8f:0e:da:58:
         e9:e1:c8:46:79:62:f1:f2:e6:4f:89:5b:6b:f3:92:44:05:2c:
         ba:0e:25:1d:ce:bd:89:cb:f5:cb:98:e5:77:02:18:82:af:18:
         6d:f7:c5:b0:6d:5b:d1:8b:b6:3f:4c:78:bd:97:3f:89:e9:3e:
         c9:ca:fc:f1:6f:6f:2a:07:d1:d2:b4:db:75:13:86:e8:85:39:
         57:4a:32:b2:af:41:5d:3b:e0:2c:f3:08:f1:0c:a2:9f:c1:ad:
         4e:3a:0c:04:bd:b6:ac:b9:91:1d:c9:21:02:97:ab:01:dc:f2:
         b9:d4:cf:e6:61:20:10:af:8d:52:fd:1c:50:e8:39:a4:94:ab:
         1e:a3:1c:40:d8:ec:7f:83:fe:80:15:af:0a:c7:28:16:d0:26:
         2a:9a:78:89:4b:ba:c5:6a:c7:66:3a:af:c4:c3:00:08:bd:bb:
         5c:5d:ae:83:91:bf:be:cb:1e:b0:de:fa:83:e9:99:93:50:69:
         ab:17:f1:1d:1b:ef:88:93:06:ea:07:0f:54:90:e4:9f:43:04:
         47:63:f0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:44:45 2026 by rpki-client