Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
File:                     OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json)
Hash identifier:          Xw2vw/Ah2ROftTnFMc6GKkyS1qJHIIk+l+TUBGbgVDc=
Subject key identifier:   21:B6:7C:33:5F:B8:59:BF:8A:27:08:01:33:DC:10:C7:F7:E4:08:D4
Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
Certificate issuer:       /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
Manifest number:          0115
Signing time:             Sun 05 Apr 2026 05:19:43 +0000
Manifest this update:     Sun 05 Apr 2026 05:19:42 +0000
Manifest next update:     Sun 12 Apr 2026 05:19:42 +0000
Files and hashes:         1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: RjADCW9QXN27lIU+ZuB69By35VpO10bYbsDLmwhF7bk=)
                          2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: dKI7uA/SKO3RusYnEdr0A/ZscE+vPWKaXvZ4/iotjxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
        Validity
            Not Before: Apr  5 05:19:42 2026 GMT
            Not After : Apr 12 05:19:42 2026 GMT
        Subject: CN=69d1f0ef-e253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:f3:1b:9a:6c:d5:ff:79:6d:74:1c:6a:ab:
                    06:43:ce:c7:97:e5:a0:51:af:33:73:2b:93:8d:6f:
                    ef:df:90:19:e3:d8:33:5e:2f:3f:61:fa:b2:9e:fd:
                    ab:53:06:8f:90:38:b9:3d:d5:c6:a3:c5:fe:6d:a1:
                    52:0a:34:f0:2d:a7:0b:ab:af:0a:b7:9f:e4:20:21:
                    53:80:a8:7e:db:b9:7e:cb:a1:c4:ec:98:29:36:96:
                    f2:0b:68:3f:3e:9f:b0:41:bf:7e:3a:5a:f8:56:76:
                    f4:23:14:48:f5:7f:97:98:cc:80:c1:fb:b9:27:ff:
                    45:c9:c7:24:bb:3f:e9:1b:05:84:9c:2b:1e:39:76:
                    c3:c5:47:9f:8d:a1:ea:2a:f2:6f:e6:be:16:43:05:
                    d3:73:cb:db:58:97:39:72:0d:7d:6b:44:67:99:98:
                    60:82:0b:4b:a5:8c:1c:1d:45:af:02:3d:4e:4a:7f:
                    28:49:f0:66:fb:86:4e:8c:cd:ca:25:96:97:df:1f:
                    65:1a:19:2b:85:20:af:44:1d:26:55:70:93:a8:e8:
                    50:02:d0:bd:fe:8c:ed:39:c2:91:75:f8:18:58:f4:
                    64:b4:9d:91:ea:f0:8f:22:c6:d8:8b:f0:12:36:11:
                    1b:20:48:98:2e:cd:5e:14:bb:bf:c8:07:5b:d6:c4:
                    3d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B6:7C:33:5F:B8:59:BF:8A:27:08:01:33:DC:10:C7:F7:E4:08:D4
            X509v3 Authority Key Identifier:
                keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:d6:90:67:1b:9a:c9:87:be:49:6b:29:2f:3f:85:80:8f:
         31:ab:b7:30:a0:46:48:46:98:fa:2c:8f:bf:1b:3a:9a:c6:0d:
         ce:e1:07:85:73:cc:70:b4:63:97:6a:b2:dc:15:40:43:1b:fe:
         51:10:1c:1b:31:88:f8:d0:e5:fa:1b:83:d2:22:45:b1:03:16:
         d1:e4:dd:f4:64:d4:ed:56:db:b4:4f:73:ee:a3:e2:d8:42:ad:
         cc:94:2e:7a:98:c4:e3:18:33:93:c0:25:54:9b:26:22:a8:dd:
         e5:21:70:42:de:09:38:c9:21:0e:b2:4c:76:b8:dc:44:57:42:
         bf:52:7e:d2:74:cf:fa:81:55:30:d8:14:af:99:e2:92:f7:96:
         e2:f0:00:e2:50:57:95:6e:5a:24:60:0c:73:2a:77:7c:26:f5:
         6f:80:b8:ef:06:c2:fb:07:33:f2:89:63:dd:b5:55:86:13:0c:
         17:e2:11:cf:f6:bd:f0:fd:60:f9:e9:1a:27:05:f9:ae:f4:17:
         c9:93:85:e3:27:73:fe:ac:35:2d:4a:43:97:4f:9e:ad:77:f9:
         9d:b0:90:a4:9e:32:7c:76:20:f1:53:a0:ea:2d:b8:d7:4d:a5:
         80:cc:3e:7b:94:60:c5:76:d2:b4:f0:7d:b8:c6:47:55:bc:2e:
         05:24:99:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ4OEYxMTAvBgNVBAUTKDM5NDNENDI2MTU3OUNERTBFODJBMDVDQTJBQjU0QjM4
N0JBNTE5MzMwHhcNMjYwNDA1MDUxOTQyWhcNMjYwNDEyMDUxOTQyWjAYMRYwFAYD
VQQDEw02OWQxZjBlZi1lMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1WvzG5ps1f95bXQcaqsGQ87Hl+WgUa8zcyuTjW/v35AZ49gzXi8/Yfqynv2r
UwaPkDi5PdXGo8X+baFSCjTwLacLq68Kt5/kICFTgKh+27l+y6HE7JgpNpbyC2g/
Pp+wQb9+Olr4Vnb0IxRI9X+XmMyAwfu5J/9Fycckuz/pGwWEnCseOXbDxUefjaHq
KvJv5r4WQwXTc8vbWJc5cg19a0RnmZhgggtLpYwcHUWvAj1OSn8oSfBm+4ZOjM3K
JZaX3x9lGhkrhSCvRB0mVXCTqOhQAtC9/oztOcKRdfgYWPRktJ2R6vCPIsbYi/AS
NhEbIEiYLs1eFLu/yAdb1sQ9vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCG2fDNf
uFm/iicIATPcEMf35AjUMB8GA1UdIwQYMBaAFDlD1CYVec3g6CoFyiq1Szh7pRkz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri84NEE1QkM4MDkw
NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXplRG9LZ1hLS3JWTE9IdWxH
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDg4Ri84NEE1QkM4MDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXpl
RG9LZ1hLS3JWTE9IdWxHVE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQO3WkGcbmsmHvklrKS8/hYCPMau3MKBGSEaY+iyPvxs6msYNzuEHhXPMcLRj
l2qy3BVAQxv+URAcGzGI+NDl+huD0iJFsQMW0eTd9GTU7VbbtE9z7qPi2EKtzJQu
epjE4xgzk8AlVJsmIqjd5SFwQt4JOMkhDrJMdrjcRFdCv1J+0nTP+oFVMNgUr5ni
kveW4vAA4lBXlW5aJGAMcyp3fCb1b4C47wbC+wcz8olj3bVVhhMMF+IRz/a98P1g
+ekaJwX5rvQXyZOF4ydz/qw1LUpDl0+erXf5nbCQpJ4yfHYg8VOg6i24102lgMw+
e5RgxXbStPB9uMZHVbwuBSSZrA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:33 2026 by rpki-client