Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
File:                     ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json)
Hash identifier:          ruLfbrSJXTQsoH5a/yih598FVY6X8Ue0Ymif/hEyXpc=
Subject key identifier:   E1:06:ED:F1:7F:B1:57:C3:79:2F:ED:D7:0F:29:8D:64:2F:49:5A:92
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Certificate issuer:       /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial:       0C66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
Manifest number:          0C49
Signing time:             Thu 12 Mar 2026 18:31:35 +0000
Manifest this update:     Thu 12 Mar 2026 18:31:34 +0000
Manifest next update:     Thu 19 Mar 2026 18:31:34 +0000
Files and hashes:         1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: N9pcDQTaOZpXS1IQjfw+OAEMjDA9B/IH/fiCbgk7+yU=)
                          2: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 2A0LGFbTxJM1CyVE/zh4gUOdkdA5g554p/UKkKfLEQk=)
                          3: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: TTxeq1OMdbgzaP7dTYMc6Fs5lQ+8FxgwD7ohl1EhyQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
                          rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 18:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
        Validity
            Not Before: Mar 12 18:31:34 2026 GMT
            Not After : Mar 19 18:31:34 2026 GMT
        Subject: CN=69b30687-d9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:51:6a:c6:d6:69:82:8e:8b:a8:14:7b:aa:
                    c9:5b:c3:21:48:76:5b:4f:d8:f6:36:f9:b0:b5:2e:
                    57:12:d6:72:6c:17:c3:1b:c2:db:61:f4:83:4f:c7:
                    74:03:d4:56:f7:70:5d:71:2b:ae:2b:2f:5a:b1:9b:
                    8f:dd:d8:dd:9b:b8:9f:e2:b6:20:97:8d:75:03:e9:
                    f8:fd:34:cf:45:bb:7d:2d:a0:4a:f9:dc:1e:cf:f0:
                    0f:d2:32:6e:3f:35:15:72:31:86:03:e8:13:66:f0:
                    b4:4e:fe:4b:9a:10:3e:c0:ff:d2:ab:53:a0:84:e2:
                    00:28:6d:4f:16:5b:32:f6:33:dc:9c:a5:b5:4c:20:
                    f5:d1:fc:39:43:19:ef:b4:e6:96:88:db:5b:f3:0f:
                    38:24:91:54:0c:00:62:78:59:61:37:c8:0c:41:c5:
                    29:07:cc:3a:64:92:2c:d1:21:5f:ba:9f:e0:7e:e9:
                    72:18:92:fd:7c:7c:3a:5f:46:6d:7e:98:86:05:9f:
                    54:bb:36:4b:06:33:4f:22:c2:bd:04:44:29:85:40:
                    53:a0:ff:dd:26:c6:4a:65:64:5a:45:90:df:11:b7:
                    2e:f9:1c:dc:c2:f1:80:86:39:16:a7:f3:30:f2:3c:
                    90:5e:36:31:f2:f7:c7:24:96:18:91:db:1a:80:7c:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:06:ED:F1:7F:B1:57:C3:79:2F:ED:D7:0F:29:8D:64:2F:49:5A:92
            X509v3 Authority Key Identifier:
                keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:25:59:59:d8:d5:54:f3:70:ec:af:73:a7:29:48:13:ea:f3:
         c3:1a:da:84:01:88:4b:e4:7b:11:8b:58:f3:1b:64:1b:c0:85:
         10:35:cd:d4:33:a9:97:16:0e:07:86:8f:ec:27:15:64:c0:0e:
         97:be:e4:a7:de:c7:6c:49:2f:cd:fe:e6:95:d0:38:2e:30:c7:
         68:68:60:ce:2b:ed:4a:75:e2:6f:ff:8e:88:da:9a:3e:b4:3f:
         9b:50:95:04:a5:a6:dd:99:e2:64:a3:0d:b6:83:39:16:5f:23:
         d2:3a:d6:a9:6f:60:e5:ee:00:d7:91:71:39:31:0f:bd:de:0d:
         4a:40:38:d1:f8:d9:ef:9e:22:36:c4:6f:b1:3e:9f:af:60:30:
         76:2e:d9:51:03:1b:49:b5:04:39:7f:2a:a8:27:a6:6d:0a:55:
         5a:a6:56:cf:5a:95:69:1d:c3:fa:ba:87:8c:d1:34:f5:6c:6f:
         36:26:fa:95:99:b6:0c:f7:b5:4e:c4:d6:a3:b7:5d:df:63:30:
         04:e4:b9:7c:10:45:3f:9a:06:e6:3d:a4:11:95:17:9f:98:a8:
         13:57:7e:97:37:5e:1e:fb:84:4a:13:c9:13:0b:7f:c6:b8:26:
         e9:9b:e2:6a:54:be:70:79:65:b5:e5:92:49:fe:12:0c:78:5f:
         74:69:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:51:11 2026 by rpki-client