Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File:                     O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier:          BphV1XXTErM5gFHk09TLYAXzxYXLtt7VbupaEYkTots=
Subject key identifier:   FE:AF:1E:6F:70:88:20:74:E4:A8:B5:F2:70:6F:80:F8:FA:3E:C6:24
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer:       /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial:       034A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number:          0343
Signing time:             Sun 29 Mar 2026 00:55:06 +0000
Manifest this update:     Sun 29 Mar 2026 00:55:05 +0000
Manifest next update:     Sun 05 Apr 2026 00:55:05 +0000
Files and hashes:         1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: oR0n3heO370qKWCwBomAtU2tuthlmMyiImWoHj3zFaA=)
                          2: C78C216A070211EDB5178252C4F9AE02.roa (hash: W6FG+9qCV45ghc4JJDXwCJLeIEHXPGHuRL+5uDqENoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
                          rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 00:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842 (0x34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
        Validity
            Not Before: Mar 29 00:55:05 2026 GMT
            Not After : Apr  5 00:55:05 2026 GMT
        Subject: CN=69c87869-f9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:48:11:12:12:57:3f:64:79:25:54:60:73:
                    42:a7:e3:f6:51:fd:8b:b4:f5:ff:c5:a7:3a:93:ce:
                    cb:4f:55:57:35:93:04:66:03:21:d9:f5:56:13:fa:
                    55:c6:fd:69:f6:78:ce:d5:f2:e1:82:ee:72:21:53:
                    2e:14:d3:b0:a0:f5:36:29:20:7d:66:c5:58:fd:99:
                    4e:52:85:04:46:35:60:d1:ef:1d:4c:aa:96:c1:19:
                    c8:f0:27:d8:f9:7a:28:1a:75:02:cf:a3:d1:ec:e9:
                    2b:03:96:40:80:29:d9:fa:2c:5c:28:17:3d:68:b6:
                    c4:32:32:4a:27:35:f0:6a:18:42:d7:b0:45:a3:30:
                    73:e2:ed:17:88:82:67:dc:67:0f:62:8b:c5:2b:31:
                    62:cf:54:fa:4a:94:28:3a:8e:06:73:ad:08:c0:ff:
                    d1:1f:50:ce:bf:36:3e:18:7f:ff:0a:c5:70:95:9a:
                    4c:4c:1a:19:71:13:a2:fe:7a:cf:00:19:ec:1c:3b:
                    4a:7f:15:fa:5d:56:60:3b:62:17:04:71:e9:cd:b3:
                    c6:b8:34:8f:13:b9:6b:d2:57:5a:27:cf:a9:a3:fc:
                    85:05:6b:e3:bc:b5:22:ac:e3:fd:cf:00:62:b9:73:
                    d6:69:02:f3:0f:a6:da:2b:a3:04:79:57:39:4b:90:
                    be:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AF:1E:6F:70:88:20:74:E4:A8:B5:F2:70:6F:80:F8:FA:3E:C6:24
            X509v3 Authority Key Identifier:
                keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:56:a0:22:3b:2b:37:ed:56:0b:0b:c8:8b:0c:e0:de:c3:7d:
         0a:6b:bb:bf:9d:0a:b5:83:0e:dd:14:65:4b:37:ce:c3:db:47:
         f1:e5:f8:72:49:d6:16:0c:fc:c2:51:92:69:31:2a:69:39:cc:
         99:42:f2:af:fa:e5:88:3c:4f:c0:51:c6:c9:ab:c7:f4:a6:35:
         30:b8:ce:9f:75:29:32:10:6e:73:02:c1:68:ef:89:3b:0c:38:
         79:28:95:9c:23:72:db:a7:69:b1:03:17:ac:bc:bd:a0:96:81:
         48:4c:b3:ba:6d:fa:b9:8f:9a:c3:56:94:ce:36:14:5e:a0:c4:
         ca:f7:4e:39:f3:d7:ed:c2:e6:d1:53:09:0b:ea:59:21:56:45:
         f2:59:56:65:54:66:24:52:a2:3c:f1:a2:2d:e6:69:44:7b:9a:
         c1:74:20:c6:b2:f8:46:42:7f:c8:a6:93:34:27:88:c0:71:00:
         6d:8d:19:40:90:88:35:63:94:df:5b:4b:db:33:4f:68:dd:39:
         92:0b:12:55:fa:eb:17:57:cf:06:13:f3:a3:00:cb:fa:ee:ae:
         91:67:64:2b:c2:fa:d3:ec:81:d3:09:3b:e6:59:89:e2:8f:b7:
         c8:5a:bb:c3:3c:be:c1:06:f1:f2:89:1b:8e:e0:41:d8:fe:9e:
         23:08:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:41 2026 by rpki-client