Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File:                     oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier:          yiK1xeQiAXNifgvDt+sbs+t8DQZBH+bbpgl6ER46gS8=
Subject key identifier:   9A:86:56:B7:6F:9D:80:CC:C1:FE:C8:6C:0E:62:91:86:3C:B3:09:85
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer:       /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number:          01D4
Signing time:             Sun 05 Apr 2026 03:09:06 +0000
Manifest this update:     Sun 05 Apr 2026 03:09:05 +0000
Manifest next update:     Sun 12 Apr 2026 03:09:05 +0000
Files and hashes:         1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: H9PQJFXMfiYer0InLl2QM2YFbwRW7hb+REqNpN97jsc=)
                          2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
                          rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
        Validity
            Not Before: Apr  5 03:09:05 2026 GMT
            Not After : Apr 12 03:09:05 2026 GMT
        Subject: CN=69d1d251-9022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:95:f5:e7:d5:67:96:fa:1c:ea:7b:b9:c1:
                    dd:ae:df:d4:75:81:71:65:a2:df:8f:8c:33:c6:1e:
                    d2:dd:ed:9b:1a:0f:3b:93:c0:a9:e5:e4:6e:60:11:
                    a8:96:51:66:6a:c3:79:7b:62:72:fb:ec:2a:6c:ba:
                    c0:aa:3d:4e:a4:e8:f9:4c:d2:3e:cd:c6:12:79:8e:
                    f0:3f:39:30:0f:57:0b:07:7d:4d:db:88:76:70:09:
                    58:e3:29:8d:89:72:e8:f3:f5:00:cc:b1:41:e6:a0:
                    c2:e7:f7:5f:a9:67:a4:3c:c8:3b:80:5a:77:66:e0:
                    17:ba:67:d2:66:09:eb:c9:80:d6:f0:80:dd:3c:eb:
                    43:ff:d1:ae:de:0f:ba:e5:cc:2b:05:03:ee:61:a4:
                    22:1f:d1:95:62:e0:83:3d:e6:1a:6f:a8:65:0e:99:
                    f8:34:fc:99:46:eb:fd:98:cb:fc:7e:54:11:b1:c7:
                    1f:78:ac:32:6c:8e:2f:77:5f:8c:18:ff:5b:0f:e6:
                    a9:90:c6:37:83:6e:00:d7:a3:c1:cf:0d:ac:9d:ae:
                    b7:76:31:6f:94:a1:90:ba:21:bb:18:2a:49:13:77:
                    2f:8f:c3:0e:e9:74:2e:b4:cd:04:e8:08:69:eb:c9:
                    d8:41:0c:d5:77:64:89:4d:86:0d:90:4a:52:b3:07:
                    ec:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:86:56:B7:6F:9D:80:CC:C1:FE:C8:6C:0E:62:91:86:3C:B3:09:85
            X509v3 Authority Key Identifier:
                keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f9:f9:b1:a7:f3:89:34:be:6c:53:55:73:48:a2:a9:15:6b:
         7d:e0:2a:f7:dd:ce:50:03:2b:a7:de:f3:90:d9:fc:18:5a:7d:
         92:ee:db:66:1f:3f:73:e8:d2:cd:ac:25:7d:63:52:ab:97:45:
         8b:eb:82:1b:ad:4b:93:64:8d:b4:c6:c6:73:1f:a0:39:63:9f:
         de:6e:ea:e2:a5:e8:f7:26:6d:38:1e:89:e2:21:47:59:e6:85:
         ea:fa:81:33:68:98:97:e7:31:ab:03:7b:ce:1d:bc:a3:de:b6:
         6b:a0:19:01:b6:f6:1d:31:03:1d:cd:bb:77:e7:0c:93:13:52:
         23:14:a0:2f:b7:9a:7f:f4:0b:16:fb:37:8c:94:eb:cf:22:1f:
         5c:c7:68:da:da:54:2a:f3:b5:e5:70:34:38:99:11:26:ce:9f:
         f9:cc:a0:e9:bc:ae:c1:3d:5b:29:00:7f:52:ab:90:9f:6a:13:
         19:b3:ae:65:62:96:2b:b9:33:9b:6c:b1:95:bb:55:df:71:28:
         26:83:9b:21:16:22:d3:3b:ff:38:bd:45:b4:09:63:40:4c:28:
         fc:97:8c:23:0e:ff:b6:e2:f8:1b:92:c1:e6:4a:65:77:42:12:
         b5:f1:45:84:e4:00:e4:df:2c:6b:24:75:ac:17:6d:0c:35:d7:
         37:d5:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:01 2026 by rpki-client