Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File:                     o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier:          T4qVqgbR0E/rhnibftyz2r643wj1Vscl2OoPSeMbp20=
Subject key identifier:   BB:C5:D4:BB:AD:40:64:0F:00:F5:80:2C:D6:8F:B5:72:9C:3E:55:D1
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer:       /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number:          8F
Signing time:             Sun 05 Apr 2026 06:53:44 +0000
Manifest this update:     Sun 05 Apr 2026 06:53:44 +0000
Manifest next update:     Sun 12 Apr 2026 06:53:44 +0000
Files and hashes:         1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: BNBZADXTnAcXwqpjlTGb8mSdmTtOeHB7pAAHzaUdOq4=)
                          2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: X8cGL1QZAJHz7KDH62TgirLobR0d4YLXS1ArwiUOvzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
                          rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
        Validity
            Not Before: Apr  5 06:53:44 2026 GMT
            Not After : Apr 12 06:53:44 2026 GMT
        Subject: CN=69d206f8-383b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:ea:65:46:60:cc:aa:41:24:f1:07:84:7b:
                    41:43:c6:40:13:69:c2:61:3f:91:e1:69:f4:14:cb:
                    c1:42:e5:2e:83:05:32:c0:07:d5:9a:8b:50:68:d1:
                    83:47:4d:bf:c9:7e:d9:bb:9a:b5:0f:46:da:42:f7:
                    98:9c:99:5c:67:5f:a4:9c:70:80:43:61:43:d1:ea:
                    36:31:0e:3a:dc:1d:38:db:80:e2:c9:bb:d6:f5:95:
                    21:00:09:74:9a:9c:62:01:54:67:37:a7:a9:48:d8:
                    df:d4:ed:7d:e3:b6:84:12:14:25:38:c8:99:77:8e:
                    f2:68:ee:22:df:5e:78:9b:93:09:6c:55:3c:8f:e0:
                    98:5d:62:a7:11:36:07:bc:95:46:c0:ce:49:3c:0a:
                    04:be:b7:d4:f0:5b:01:b3:44:62:3b:3b:ba:b8:8a:
                    37:fa:94:52:47:52:aa:a4:56:92:6c:cc:ae:4c:92:
                    ab:8f:0b:90:97:d6:8b:09:0f:af:81:bf:32:47:9f:
                    e0:45:d4:da:bf:dc:ff:4c:dd:ab:f9:f3:56:15:bf:
                    7b:83:e3:93:5b:da:42:1c:3e:84:b4:9e:40:e2:b0:
                    33:79:e0:63:cb:82:95:8e:eb:07:bb:ca:15:e9:69:
                    f6:7a:cc:89:b5:8c:9c:19:b1:7e:9c:79:e6:44:1c:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C5:D4:BB:AD:40:64:0F:00:F5:80:2C:D6:8F:B5:72:9C:3E:55:D1
            X509v3 Authority Key Identifier:
                keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fe:9e:bf:27:b0:8c:7c:87:f7:53:0e:48:7e:5e:95:e3:c6:
         a8:ee:d5:54:f7:5f:e2:b0:10:64:f7:3c:67:94:a8:c3:30:97:
         74:b3:56:a7:4a:54:7c:3b:78:62:e1:ca:2d:f1:af:e2:1b:5b:
         5e:63:ff:aa:e4:dc:e2:39:23:a8:a4:dd:ab:87:7e:a8:46:6f:
         c2:a4:6e:9e:1d:ca:dd:06:42:4d:92:d5:fa:3a:00:19:49:a6:
         11:19:57:7b:4d:1c:fa:a7:65:bd:e5:e1:e7:94:76:67:ee:b1:
         f9:a6:d4:87:1a:ee:22:28:51:69:0f:fb:43:77:c4:98:8f:69:
         dc:8e:41:93:e1:13:11:be:07:ae:0c:fb:11:1e:bd:62:d5:ef:
         3e:9f:63:04:00:af:e9:f8:e0:34:eb:54:7f:a1:24:21:6c:a2:
         89:87:90:1b:1e:dd:21:37:0b:f6:ef:fc:d8:9b:7a:f7:88:65:
         00:84:41:e2:db:71:90:8b:ef:89:ba:48:85:42:08:74:db:6c:
         0a:5f:39:5c:9e:55:b3:49:93:21:19:7d:5f:8c:4a:66:a3:41:
         6e:cd:aa:3c:9e:04:da:76:0c:ba:80:24:de:5d:1e:65:30:85:
         09:dd:54:6d:8c:80:76:b3:91:ea:13:41:89:9a:c0:6a:2b:9b:
         6d:e6:75:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc3QTYxMTAvBgNVBAUTKEEzRjEwMDQ5QTM5M0FGOURDQTQ0NTk2NjY0MTY2Qjg3
NDAyRjgyMkEwHhcNMjYwNDA1MDY1MzQ0WhcNMjYwNDEyMDY1MzQ0WjAYMRYwFAYD
VQQDEw02OWQyMDZmOC0zODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr37qZUZgzKpBJPEHhHtBQ8ZAE2nCYT+R4Wn0FMvBQuUugwUywAfVmotQaNGD
R02/yX7Zu5q1D0baQveYnJlcZ1+knHCAQ2FD0eo2MQ463B0424DiybvW9ZUhAAl0
mpxiAVRnN6epSNjf1O1947aEEhQlOMiZd47yaO4i3154m5MJbFU8j+CYXWKnETYH
vJVGwM5JPAoEvrfU8FsBs0RiOzu6uIo3+pRSR1KqpFaSbMyuTJKrjwuQl9aLCQ+v
gb8yR5/gRdTav9z/TN2r+fNWFb97g+OTW9pCHD6EtJ5A4rAzeeBjy4KVjusHu8oV
6Wn2esyJtYycGbF+nHnmRBzd5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvF1Lut
QGQPAPWALNaPtXKcPlXRMB8GA1UdIwQYMBaAFKPxAEmjk6+dykRZZmQWa4dAL4Iq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzdBNi9CREVFN0I4ODVD
N0UxMUYwQTVDMzYwMzZDNEY5QUUwMi9vX0VBU2FPVHI1M0tSRmxtWkJacmgwQXZn
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29fRUFTYU9UcjUzS1JGbG1aQlpyaDBBdmdpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzdBNi9CREVFN0I4ODVDN0UxMUYwQTVDMzYwMzZDNEY5QUUwMi9vX0VBU2FPVHI1
M0tSRmxtWkJacmgwQXZnaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAP6evyewjHyH91MOSH5elePGqO7VVPdf4rAQZPc8Z5SowzCXdLNWp0pUfDt4
YuHKLfGv4htbXmP/quTc4jkjqKTdq4d+qEZvwqRunh3K3QZCTZLV+joAGUmmERlX
e00c+qdlveXh55R2Z+6x+abUhxruIihRaQ/7Q3fEmI9p3I5Bk+ETEb4Hrgz7ER69
YtXvPp9jBACv6fjgNOtUf6EkIWyiiYeQGx7dITcL9u/82Jt694hlAIRB4ttxkIvv
ibpIhUIIdNtsCl85XJ5Vs0mTIRl9X4xKZqNBbs2qPJ4E2nYMuoAk3l0eZTCFCd1U
bYyAdrOR6hNBiZrAaiubbeZ1ng==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:59 2026 by rpki-client