Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
File:                     OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json)
Hash identifier:          SQXUw2zUMqUu29DCUmKEppVX7qRf0sBjolMTthleCXY=
Subject key identifier:   BB:7C:3F:3D:BF:64:59:3E:DC:8C:F0:EE:65:1A:EB:83:E9:35:28:3B
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Certificate issuer:       /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
Manifest number:          01A7
Signing time:             Tue 03 Mar 2026 03:47:28 +0000
Manifest this update:     Tue 03 Mar 2026 03:47:28 +0000
Manifest next update:     Tue 10 Mar 2026 03:47:28 +0000
Files and hashes:         1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: JEabIukKsHCA7kI/tJ+W17eYe8+hfGRCSjJw4Lirx9Q=)
                          2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: ZO33tan/7WjO4vuazxAnxsvyNrqefIDo+9LACZXGkpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
                          rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
        Validity
            Not Before: Mar  3 03:47:28 2026 GMT
            Not After : Mar 10 03:47:28 2026 GMT
        Subject: CN=69a659d0-d3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4e:1b:85:8a:15:40:fa:26:69:dd:fa:37:8b:
                    eb:96:94:42:f2:fd:a4:a3:3c:ea:3b:f0:b6:b2:17:
                    a2:1e:01:8f:6f:7b:f9:cc:4f:99:19:cb:c8:e2:01:
                    cf:9d:71:97:3a:8b:9a:a4:a9:27:2e:df:5a:95:f4:
                    fd:41:af:24:d9:c3:ef:bc:b0:41:77:2f:d1:e8:3f:
                    b5:9f:09:5d:be:4d:10:2f:b1:23:64:2e:5b:20:da:
                    8b:8f:c3:d2:be:68:24:f2:9d:0f:ff:4e:2e:27:10:
                    50:1a:cb:03:80:9e:ab:0a:17:58:45:0a:9e:d0:40:
                    b6:b0:4b:a4:96:79:a9:03:86:d7:5b:48:a1:76:43:
                    01:7c:20:09:0d:27:2f:f3:95:63:b8:2d:41:90:63:
                    fe:6a:25:f5:45:73:53:62:e0:3c:a6:98:11:fe:55:
                    0c:c5:c7:65:d9:59:1a:47:80:53:da:14:04:b3:98:
                    36:df:28:f1:8a:fb:7e:eb:cf:23:54:ef:29:0d:7a:
                    08:d8:dc:58:62:0a:66:95:9f:1e:93:9c:60:9a:72:
                    8d:40:b3:1b:62:63:9c:fa:d5:3e:53:64:8c:3b:84:
                    29:d4:5c:04:12:76:30:c7:43:82:a0:1b:76:79:f5:
                    17:aa:05:6a:32:d2:53:ea:72:b5:f7:2d:14:68:5e:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7C:3F:3D:BF:64:59:3E:DC:8C:F0:EE:65:1A:EB:83:E9:35:28:3B
            X509v3 Authority Key Identifier:
                keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:23:13:42:2f:ef:22:3f:96:7d:87:47:2d:ca:2c:d9:42:c4:
         8f:ad:fb:e2:9f:a9:7a:40:00:1a:72:13:b8:90:80:ec:5f:2e:
         34:48:22:f7:2a:b4:cc:a4:93:8e:89:4a:31:82:c4:51:09:da:
         6c:0b:20:ac:e3:5c:1a:8a:88:9e:33:f0:8e:ac:13:2d:13:ae:
         d4:6b:60:b3:e0:4f:c5:87:3d:42:20:7b:f4:b0:37:a1:b8:b8:
         c9:90:85:b5:f9:13:11:15:5b:c1:5e:76:f2:52:18:c3:b3:8d:
         83:33:b1:ba:0b:0e:86:55:2d:dd:dc:cf:a5:d3:8e:d4:c3:19:
         1f:f3:ba:01:11:c8:dc:fc:2b:b6:ee:9d:81:3a:0a:25:d8:7a:
         bf:14:19:30:40:9b:40:7d:f9:b0:b8:df:f6:4c:40:0e:fd:6f:
         df:be:04:17:7c:d6:a4:0f:a8:0c:99:e5:b0:c8:ad:30:c1:13:
         97:a2:ac:53:73:b6:b4:f0:6c:22:71:7b:7e:77:54:38:88:76:
         76:27:c9:e6:1d:a3:28:f7:c1:60:79:29:02:9e:a8:8d:b6:ff:
         42:bf:5d:0c:3b:08:71:03:98:54:ac:72:8b:34:23:2b:25:9a:
         b5:1c:bb:83:89:37:f9:5b:b1:fe:36:49:09:ac:8e:29:d9:de:
         61:a0:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:05 2026 by rpki-client