Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
File:                     oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json)
Hash identifier:          2N8v1Uk4c/Ou6MevsNBTCu8BH0/jvdeN9MabaCIrDQQ=
Subject key identifier:   E6:D9:38:FF:49:DA:96:0C:82:D8:6A:AB:EC:F9:F1:FC:AF:5F:73:28
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Certificate issuer:       /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial:       03D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
Manifest number:          03C8
Signing time:             Sat 21 Mar 2026 00:06:32 +0000
Manifest this update:     Sat 21 Mar 2026 00:06:31 +0000
Manifest next update:     Sat 28 Mar 2026 00:06:31 +0000
Files and hashes:         1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: MxCxyY9ye9T5AZF4S/Myw7m84u4zrV9l+mBuUqB8ego=)
                          2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: QpiN7xo5vbbiecoxrdRCGbnh2zridFdffb3erbBLZ/w=)
                          3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: aRlYf5QuJuURu55O+1viI4YkKaPRp6ELm5Cv+jOPlLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
                          rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
        Validity
            Not Before: Mar 21 00:06:31 2026 GMT
            Not After : Mar 28 00:06:31 2026 GMT
        Subject: CN=69bde107-1bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:c6:88:d5:d9:3c:34:00:29:88:52:54:d3:
                    c0:10:bf:a7:89:9f:20:48:91:a9:91:75:a6:6d:3b:
                    a4:fd:c1:ce:d2:a7:65:55:a8:9a:a8:df:b6:24:40:
                    bf:bd:ee:84:5e:be:8f:dd:f2:bc:00:f1:a4:9e:14:
                    8c:dd:dc:27:0a:55:33:cf:2e:1e:6c:5b:95:20:48:
                    07:a5:02:ad:6d:ab:a2:0c:e7:79:91:b5:a7:ae:37:
                    f7:09:97:86:7f:ec:58:4b:dc:f0:cd:bf:61:b7:48:
                    c6:d6:d7:47:7d:d8:69:14:07:a5:21:58:83:df:9d:
                    86:12:43:91:d8:bd:05:9a:ea:b7:ab:a3:8b:03:c4:
                    fe:ec:82:aa:91:97:03:0f:5c:51:72:75:dd:f3:8a:
                    bd:b7:90:6a:b2:4d:41:ec:76:ea:4b:15:50:76:79:
                    a1:7b:d1:17:e8:ff:b8:30:01:03:24:70:27:33:e2:
                    df:e6:06:a3:37:2e:d3:8e:01:e4:b1:ea:7a:87:75:
                    7d:74:27:c7:b0:80:8d:5c:4c:15:13:5e:66:07:d0:
                    30:18:18:6d:d0:4e:43:18:a5:18:ed:38:e5:ed:2c:
                    a0:b5:54:17:f0:0d:d7:2d:5b:22:0f:02:b3:46:34:
                    89:c9:1e:7a:32:ef:6b:09:af:15:fd:38:69:3e:51:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D9:38:FF:49:DA:96:0C:82:D8:6A:AB:EC:F9:F1:FC:AF:5F:73:28
            X509v3 Authority Key Identifier:
                keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:50:f0:9a:1e:81:88:65:6b:2f:5c:4f:f5:92:62:64:7b:c7:
         b7:25:d6:40:de:9c:64:96:30:65:0f:69:b8:0c:64:50:bc:be:
         a9:7f:8e:ba:ed:51:95:77:ee:3d:bf:c9:b6:d3:d8:d1:86:ae:
         d1:81:c0:b8:ec:5a:d9:36:be:9a:e0:08:19:73:af:c2:e7:06:
         ed:f6:1b:84:9b:c0:31:51:d6:bc:e3:32:8a:ff:f4:53:5c:0c:
         35:c0:90:29:c7:1f:d7:54:33:e9:4a:46:b5:16:a7:68:6b:56:
         47:6f:96:20:7f:33:7e:f2:00:b5:52:d0:7b:f4:29:dc:eb:65:
         7e:4b:e0:0c:68:31:ad:96:8e:18:78:ad:46:e1:c6:58:fa:08:
         e1:23:4f:86:2e:0d:6b:01:cb:31:4c:12:93:00:81:c2:d7:29:
         62:c0:c9:da:29:f9:fc:1c:dc:44:dd:98:82:7e:2f:11:5f:8f:
         7d:54:e5:95:fd:d1:dc:a7:68:99:31:1a:e5:ff:2e:d8:31:a1:
         42:15:35:e0:1f:ee:31:34:30:d6:d2:7c:5d:f2:3c:37:57:a6:
         a0:57:0e:cb:15:75:70:7a:fe:bc:d1:54:ee:30:ca:74:95:fb:
         68:db:a8:14:5a:11:59:a7:3a:a6:a7:9f:ed:6d:c0:61:28:38:
         5d:56:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:10:36 2026 by rpki-client