Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
File:                     OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json)
Hash identifier:          P9b911Pm4ueYeI3QF5mEJzlmRHMbBnHpkbMxpPSpUEA=
Subject key identifier:   07:DB:AC:C0:39:00:A6:3C:62:E6:EB:A4:7F:A5:4B:64:6E:C7:A1:CD
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Certificate issuer:       /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
Manifest number:          0165
Signing time:             Sun 05 Apr 2026 04:22:31 +0000
Manifest this update:     Sun 05 Apr 2026 04:22:31 +0000
Manifest next update:     Sun 12 Apr 2026 04:22:31 +0000
Files and hashes:         1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: 0g3xjKjJlh0bhGLzJB7gmEItXpb6cRcDPxSaAXOMg4w=)
                          2: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: 7slcloQAeT5wyJqAjye83Okm4uzNEuS1+WoZpKS16D8=)
                          3: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: luNzOp9WQ2A7sNDC/iK8zbbGEM1p3MEBvj7zZ4BWvgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
                          rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
        Validity
            Not Before: Apr  5 04:22:31 2026 GMT
            Not After : Apr 12 04:22:31 2026 GMT
        Subject: CN=69d1e387-62d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:93:d0:61:f8:c1:63:d6:a7:4a:5e:48:ef:
                    db:02:d5:71:7e:99:85:94:75:75:b7:6b:0d:11:87:
                    63:5e:ff:b9:0f:66:21:5c:02:c2:85:6a:e9:07:74:
                    08:df:d1:82:b2:c9:ec:44:ba:d2:ee:ab:bd:0c:16:
                    c0:a2:0f:28:99:f3:67:31:f1:e2:0c:d4:ad:8c:f2:
                    b3:c0:ff:88:75:58:f4:de:ac:8a:09:28:84:7e:12:
                    11:51:64:82:bd:69:24:e4:e9:ba:89:a3:f8:8b:8f:
                    f9:49:f3:d9:81:ec:b0:c3:6b:56:97:88:c0:d7:e3:
                    dd:58:d9:f1:05:7e:bc:e4:75:40:35:04:ed:49:a7:
                    bc:ee:ed:a6:3c:10:78:c7:9e:68:93:03:08:80:09:
                    74:da:f9:f6:5c:53:11:1f:4f:bc:e7:fa:b8:3c:b4:
                    71:b0:41:ae:99:7d:50:b7:1a:ac:ea:90:b2:d3:94:
                    90:d2:2d:cc:0b:f3:6f:6b:5a:51:a2:b2:ae:d1:16:
                    5b:fc:85:c0:56:85:0b:88:46:17:7b:b4:e6:87:6e:
                    53:13:ea:83:2f:4c:4d:c9:0b:d6:fb:62:24:5b:81:
                    53:0c:95:eb:ab:2d:73:19:fc:6f:9c:f8:0d:7f:0b:
                    6a:6d:4b:25:ff:49:e0:30:c2:80:32:1c:46:67:29:
                    b9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DB:AC:C0:39:00:A6:3C:62:E6:EB:A4:7F:A5:4B:64:6E:C7:A1:CD
            X509v3 Authority Key Identifier:
                keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6f:99:fc:db:0e:11:7b:2f:db:ce:7d:2d:31:1a:3b:f0:21:
         c3:31:72:99:d3:4f:01:89:d7:d8:d5:f2:72:78:0c:dc:ba:3b:
         86:14:94:81:cf:36:8f:87:b0:ac:6c:bd:83:75:8b:f4:9a:fe:
         a2:49:86:f2:c8:46:4b:8b:a2:c3:74:24:a6:ff:8c:ae:ec:4f:
         d3:b7:a0:90:08:70:4e:8a:bd:39:1b:52:ea:db:95:ef:7f:5f:
         83:2f:8c:39:92:b0:71:40:99:9e:fe:45:ea:07:ca:ed:f1:c7:
         ec:3c:76:13:03:70:37:52:4e:14:e6:c8:5d:5e:65:08:70:c5:
         2a:7d:62:71:d9:be:ae:9a:f0:13:83:2e:82:ee:f0:52:3e:4a:
         cf:25:73:8e:08:2e:38:f4:65:cb:c3:54:a6:a3:2e:19:4f:e2:
         2e:2f:73:61:65:bd:2c:1a:e1:1d:7c:d7:e8:1f:91:fa:7a:5b:
         12:c2:e3:0b:7b:43:d6:57:02:c2:dd:ed:0b:7e:08:bf:0f:e0:
         d2:de:d1:64:f6:51:8a:c7:56:22:23:7c:09:fa:50:93:b5:e9:
         1a:28:bd:bc:a1:8a:2f:fc:e9:bf:f0:9c:42:21:4e:cb:6c:3b:
         2c:e4:79:df:42:59:f7:47:8f:4a:e7:fc:0f:29:fc:4b:c6:63:
         3b:ef:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:49 2026 by rpki-client