Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
File:                     oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json)
Hash identifier:          xmU5q5410rJUw5uT0h1IBug+MB3sCHiRfloKELr8Ql8=
Subject key identifier:   F6:49:C9:77:E2:51:F6:55:DD:1D:AE:80:C6:7B:1F:C5:6B:CC:B9:D8
Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65
Certificate issuer:       /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
Manifest number:          01C1
Signing time:             Sun 05 Apr 2026 03:31:06 +0000
Manifest this update:     Sun 05 Apr 2026 03:31:06 +0000
Manifest next update:     Sun 12 Apr 2026 03:31:06 +0000
Files and hashes:         1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: f7WtkXKaJfMpC5wiAD90FkU+u8NpVnjSKt3WYSJVU+M=)
                          2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl
                          rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
        Validity
            Not Before: Apr  5 03:31:06 2026 GMT
            Not After : Apr 12 03:31:06 2026 GMT
        Subject: CN=69d1d77a-6212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:44:8e:03:fc:f9:be:e8:94:c9:01:99:3b:
                    9a:28:36:a9:82:fd:05:c1:04:d1:2d:53:3e:c7:c1:
                    37:5f:02:c0:35:fe:a3:25:60:c0:45:cc:82:6a:17:
                    70:f2:89:af:76:6f:96:95:90:23:0e:16:63:35:cc:
                    c4:24:c5:c2:43:4f:b5:6a:30:a6:80:cd:80:78:f4:
                    0b:39:11:66:dc:ec:5d:aa:0c:2a:57:62:ab:0d:96:
                    01:0e:e7:c0:46:b9:06:1b:b2:3e:db:26:44:db:ac:
                    e5:b4:11:cc:4a:f2:82:b5:43:77:72:0c:ec:13:c5:
                    7f:3c:ae:30:e8:1f:24:a1:1a:15:38:28:1b:d6:59:
                    8c:a3:61:ce:04:cb:9d:87:81:9a:f4:fa:cf:d9:e7:
                    33:2c:0d:b9:11:91:a3:52:6b:6f:b3:13:0a:8e:4d:
                    c8:fd:84:22:82:19:d5:47:36:ea:5f:44:83:3b:f3:
                    fc:ff:08:c9:8f:93:0e:9d:3a:1a:e0:65:d6:a3:40:
                    c0:2d:b7:1e:af:d6:a7:8a:7c:31:e9:2a:84:bd:4b:
                    21:7c:d5:19:78:01:57:60:a0:db:00:9e:8a:24:aa:
                    37:9f:54:d8:16:a5:8d:48:0f:ea:3f:dd:11:74:fa:
                    27:27:c8:3d:17:35:00:79:d0:1a:c3:31:4a:39:ca:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:49:C9:77:E2:51:F6:55:DD:1D:AE:80:C6:7B:1F:C5:6B:CC:B9:D8
            X509v3 Authority Key Identifier:
                keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:f1:df:a9:55:d0:91:f2:26:2d:da:76:aa:d0:b5:a8:83:
         bf:97:c2:8f:80:c9:17:cf:18:5c:ed:45:3c:75:d8:63:c9:0a:
         5f:6b:50:7e:01:72:c9:54:9e:17:ab:06:15:92:fc:a3:d1:1d:
         4c:04:21:32:38:b3:8c:12:f3:64:36:24:03:8a:b1:a0:3e:9b:
         75:ed:38:19:f2:42:c8:cd:aa:93:55:26:78:6d:45:75:db:bd:
         9e:fc:40:df:c6:08:e4:80:12:3b:39:e6:b7:b6:9c:89:b1:0f:
         70:9a:1f:93:9c:fa:69:6b:57:fb:1d:6e:3b:67:7a:57:7b:c6:
         24:63:c2:44:d6:7a:c6:db:ac:6c:a7:e7:2a:94:dd:30:af:5e:
         ec:98:c8:e3:03:ac:45:4b:1e:40:03:eb:b1:62:5e:62:2b:90:
         16:6c:2a:e7:90:79:26:d8:f3:15:7e:d9:49:ab:0b:ab:d9:c0:
         ce:45:7e:42:14:b5:27:ac:3b:d9:35:48:af:c1:75:dd:c1:dd:
         9e:26:42:e6:b8:1b:cc:f0:ec:a9:5c:a4:ff:57:e4:de:87:22:
         e8:6d:74:93:6d:a9:de:53:66:f4:30:84:77:59:a5:a1:72:f7:
         95:04:bf:4f:95:f0:4d:3e:23:71:a8:9f:b1:cb:87:d7:67:7c:
         57:a9:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:31 2026 by rpki-client