Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          nO6mp7pBDxkgQTD/leAvNwtDPzD+BKI9pgx01658e5o=
Subject key identifier:   76:75:F1:D4:89:3D:DA:AA:9B:C1:8E:3C:C4:F0:5F:F7:A6:CA:57:0A
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1057
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0D6B
Signing time:             Sun 26 Apr 2026 19:36:22 +0000
Manifest this update:     Sun 26 Apr 2026 19:36:21 +0000
Manifest next update:     Sun 03 May 2026 19:36:21 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: gvmzPvxGgu09BvTcxp0pv72rU7oYHui4yk6Gc7IjVQc=)
                          2: F94772A2127711F18BE24F01353D8C67.roa (hash: Ia2OY00mHGLN5kewmPdoukAdUzDfyI0EliOAKlUSYq8=)
                          3: 4D705F4E419711F1B231ABB69F833773.roa (hash: ppP1P2I7en6iPMzRQNviBQcyfvHxjsYQ4YnddAdumLg=)
                          4: 65020FA2288011F1BBF58DB5A8833773.roa (hash: ZSdTfWuzS86WLzpkvNdiXv34xqzKQg41A9OfgH776Xc=)
                          5: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: vtYeDrgDVDYpydstxqGvKZDpQ+8m/h2qUkMiKDSPoy8=)
                          6: AD35E5023B2F11F1A4C73024AD833773.roa (hash: lyTKbKvxoL/cLSR2bX4t85NaPeWThldC+RCGxWFHVvk=)
                          7: 4C692978419711F1B231ABB69F833773.roa (hash: j6EC0scEQGwbeez5XUvQrEX6Zct0WAzh456SxbrLHgU=)
                          8: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: TEd4/aWDB1KLW6JK30VIuFWcMe+qda12gGy9MUlfqhE=)
                          9: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: z0LgFHba0FwF6fQrrQACVyXZeL4NTZdHGfqQ2uiux64=)
                          10: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: 24u4HBCO1KtwHfOL7e2RjvlMPalnF3UcOXpG6jE4G34=)
                          11: 9C1227FE164511F1992ACCC2403D8C67.roa (hash: B5QpT3KOJZjxftF1mEkAc77f38gbyfCcpBtAmGDEp3Q=)
                          12: D9419C8A39B911F1AC578A42AE833773.roa (hash: qwSxeuQSB6Duh1LMHCpJoNbQHXCiqNIZI9gcnzEG6ds=)
                          13: 4AF4D966419711F1B231ABB69F833773.roa (hash: gnhlfN/UV7lg95BNdf661VaRtI2IHUWJRO8GV+aX7mQ=)
                          14: 849E45A839B811F1B2456B00AE833773.roa (hash: WrHoimy7W3Kh4V/ViVWvGFPYBxuHZRvygLPr6i6VQGA=)
                          15: 6D2E74CE119511F18720E261383D8C67.roa (hash: ohbtR0bU4Nw5MTZqq0EScoDeeVXif9T0EFY44v6uECc=)
                          16: F85564DA127711F18BE24F01353D8C67.roa (hash: xLEMW1WeRTdeL1parZjm1o3kSVKBhcygphTEuPzcr9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 19:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4183 (0x1057)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Apr 26 19:36:21 2026 GMT
            Not After : May  3 19:36:21 2026 GMT
        Subject: CN=69ee6936-3337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:65:95:7b:7a:41:3d:f7:7c:cd:d7:5b:19:0c:
                    12:ea:b9:9a:0d:3b:4f:af:3e:bd:72:fc:e8:54:01:
                    40:52:26:e6:a3:60:f3:9b:af:44:d9:9f:65:af:71:
                    2c:2b:72:c0:77:68:e4:50:f6:70:5c:c7:dd:79:b0:
                    50:de:2e:23:60:23:fc:91:35:0a:16:84:0b:03:d4:
                    a1:83:c1:79:2d:ea:ce:86:07:aa:48:ea:aa:7e:f5:
                    00:c0:8e:fa:36:f3:53:20:b2:37:b2:90:a2:4c:6a:
                    7f:8c:33:47:c5:fb:de:37:30:d2:ac:27:ba:1b:7d:
                    15:0d:9a:de:f8:5a:23:62:16:8a:ea:39:4a:19:c4:
                    f2:e0:f9:19:ed:b5:03:07:34:2a:2c:a0:5d:69:3d:
                    fe:f4:a6:d1:d4:68:31:46:e9:ae:37:b8:f2:a1:10:
                    c5:84:8e:35:27:f6:24:b9:1b:48:4f:24:82:df:da:
                    f7:ca:51:7c:f2:d6:79:c1:c5:25:61:6a:5b:0c:f3:
                    05:05:2e:fe:51:fa:12:b6:f9:9d:25:5c:d3:b9:73:
                    99:7c:ad:d6:ff:fb:36:d9:af:c0:d2:97:82:2d:b0:
                    2c:6f:ac:86:d6:9d:37:08:59:22:6f:0b:dc:53:81:
                    4e:e4:31:a5:72:7b:61:6e:c4:10:60:2f:ad:7b:23:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:75:F1:D4:89:3D:DA:AA:9B:C1:8E:3C:C4:F0:5F:F7:A6:CA:57:0A
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5d:60:a2:2a:cd:ca:d2:20:a8:7e:25:90:ec:48:1a:1b:3c:
         0c:d4:ac:45:4c:d2:49:af:1e:f3:32:d0:ba:82:f9:a0:d9:53:
         dc:db:6a:4a:46:e8:29:fe:7d:37:29:23:0f:95:a4:22:bc:c9:
         3a:87:73:50:e2:6b:b4:ef:d4:92:ee:7b:c2:52:b5:2d:b9:5f:
         87:3d:93:c6:ce:44:fe:a7:c2:98:db:45:70:fe:70:33:c7:d3:
         af:d2:fd:db:36:0d:77:3a:61:44:17:5c:27:47:b6:29:0a:05:
         e5:58:d1:03:7c:b2:99:6a:f3:07:d0:78:f9:4d:9a:d1:74:b5:
         db:46:47:46:c1:b2:b7:40:b7:55:2e:c9:56:71:a7:14:8b:c0:
         b8:d8:76:cd:b1:e5:e2:e9:22:12:f8:2d:ed:bc:c1:23:1d:5c:
         00:c7:a0:91:b4:ce:f0:f8:8c:13:bf:eb:ba:80:4e:fa:f1:f4:
         f8:e0:8d:4c:70:0c:2e:a3:37:5d:6a:4a:0c:79:8a:8b:25:2b:
         14:7a:9c:33:20:72:81:b6:54:17:e5:93:78:4a:62:20:b2:d9:
         ca:4d:96:ff:1b:f7:94:99:13:d5:c3:ba:f0:c6:11:db:5d:3d:
         48:a6:02:33:4a:8a:07:b9:9a:f2:18:ae:ee:23:d6:1e:8a:93:
         16:c0:da:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYwNDI2MTkzNjIxWhcNMjYwNTAzMTkzNjIxWjAYMRYwFAYD
VQQDEw02OWVlNjkzNi0zMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7WWVe3pBPfd8zddbGQwS6rmaDTtPrz69cvzoVAFAUibmo2Dzm69E2Z9lr3Es
K3LAd2jkUPZwXMfdebBQ3i4jYCP8kTUKFoQLA9Shg8F5LerOhgeqSOqqfvUAwI76
NvNTILI3spCiTGp/jDNHxfveNzDSrCe6G30VDZre+FojYhaK6jlKGcTy4PkZ7bUD
BzQqLKBdaT3+9KbR1GgxRumuN7jyoRDFhI41J/YkuRtITySC39r3ylF88tZ5wcUl
YWpbDPMFBS7+UfoStvmdJVzTuXOZfK3W//s22a/A0peCLbAsb6yG1p03CFkibwvc
U4FO5DGlcnthbsQQYC+teyNJUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZ18dSJ
Pdqqm8GOPMTwX/emylcKMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5
YVJqanA1LS1DQ1BHY3k0bVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANF1goirNytIgqH4lkOxIGhs8DNSsRUzSSa8e8zLQuoL5oNlT3NtqSkboKf59
NykjD5WkIrzJOodzUOJrtO/Uku57wlK1Lblfhz2Txs5E/qfCmNtFcP5wM8fTr9L9
2zYNdzphRBdcJ0e2KQoF5VjRA3yymWrzB9B4+U2a0XS120ZHRsGyt0C3VS7JVnGn
FIvAuNh2zbHl4ukiEvgt7bzBIx1cAMegkbTO8PiME7/ruoBO+vH0+OCNTHAMLqM3
XWpKDHmKiyUrFHqcMyBygbZUF+WTeEpiILLZyk2W/xv3lJkT1cO68MYR2109SKYC
M0qKB7ma8hiu7iPWHoqTFsDa9w==
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:07:51 2026 by rpki-client