Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
File:                     OG6s-qYbi0A33DiqKAhd4xh48eM.mft (raw, json)
Hash identifier:          kxS2Aa7yam2UMwYKIM52NIc/O7jCiTOwDS4WvwmXyGk=
Subject key identifier:   B1:1D:79:D3:05:AF:B0:61:D4:60:4F:86:35:E3:DD:06:A9:88:FA:44
Authority key identifier: 38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3
Certificate issuer:       /CN=A9118422/serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
Certificate serial:       0387
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
Manifest number:          0383
Signing time:             Sun 01 Mar 2026 01:39:27 +0000
Manifest this update:     Sun 01 Mar 2026 01:39:26 +0000
Manifest next update:     Sun 08 Mar 2026 01:39:26 +0000
Files and hashes:         1: OG6s-qYbi0A33DiqKAhd4xh48eM.crl (hash: KTd533osxfv8Qn5nIJojKJ3v0vsdgp5hk945Yu0iZxs=)
                          2: 09AA16F8DB0011ECA67DA10BC4F9AE02.roa (hash: Xjk4IJVT0rrTOdheIi6ydLmAybVHV5BPXXklNZ4Q0SQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl
                          rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118422, serialNumber=386EACFAA61B8B4037DC38AA28085DE31878F1E3
        Validity
            Not Before: Mar  1 01:39:26 2026 GMT
            Not After : Mar  8 01:39:26 2026 GMT
        Subject: CN=69a398ce-8d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:58:4c:1c:17:2c:c2:11:75:5c:13:71:ec:
                    bb:0e:0f:42:5d:1b:3f:0a:0b:27:fc:22:a3:ae:58:
                    2e:b1:e4:d0:3f:eb:d5:5c:b5:13:1d:b3:4c:c4:49:
                    ef:9e:52:8d:8a:b0:e7:49:37:0c:3d:b3:6d:ca:70:
                    03:e5:72:71:d7:18:59:2a:87:71:6e:48:b6:1d:69:
                    5a:b1:c3:ce:3e:d8:ad:53:a0:9f:c7:d8:4d:40:a4:
                    c4:6f:6a:fb:bc:78:a4:aa:c5:71:0f:f4:d4:74:3f:
                    fa:0c:69:40:86:1b:8f:06:f2:ca:7e:ec:17:0e:d8:
                    61:ab:31:ff:64:6b:5a:61:60:ff:53:2d:bc:f0:c1:
                    3f:74:5c:50:f6:6b:30:45:1e:f3:b8:84:c5:3f:86:
                    a9:a0:18:b9:de:c2:2d:ad:3b:87:9b:de:3d:b5:e6:
                    52:83:74:56:94:37:c2:89:75:5c:3b:00:ae:d4:14:
                    f6:5b:1a:03:12:d5:27:80:9e:ea:99:20:98:35:df:
                    85:34:8c:5f:ba:2f:87:76:c3:2e:4e:f0:bf:a8:6d:
                    e5:62:79:10:14:cf:69:17:9c:dd:03:94:da:4e:8b:
                    63:c7:c6:65:ed:3e:2e:e5:c1:54:15:9c:a5:90:95:
                    97:82:95:58:23:81:58:c5:46:2b:61:71:3f:bf:ca:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1D:79:D3:05:AF:B0:61:D4:60:4F:86:35:E3:DD:06:A9:88:FA:44
            X509v3 Authority Key Identifier:
                keyid:38:6E:AC:FA:A6:1B:8B:40:37:DC:38:AA:28:08:5D:E3:18:78:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG6s-qYbi0A33DiqKAhd4xh48eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118422/3180FE2ADAFC11ECBBD53786C4F9AE02/OG6s-qYbi0A33DiqKAhd4xh48eM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:64:5e:3d:5e:a6:04:16:32:f8:f0:2f:a6:47:65:f6:c0:98:
         e9:e9:79:3e:08:78:ae:94:eb:0c:c7:33:99:31:ac:1f:ef:c1:
         df:98:67:9f:2b:3e:e3:14:b4:8f:8d:4b:8d:c9:79:1b:ca:a9:
         59:a1:cc:37:15:54:e2:9e:a6:c2:a2:64:70:d9:3c:25:54:c1:
         83:e2:56:b2:7e:51:ea:5b:44:c4:cd:b1:31:c6:03:8c:51:1a:
         f6:97:83:77:1e:83:b9:2e:9d:c6:9d:4d:11:87:8f:a7:13:c9:
         97:30:d5:ff:d6:dd:4c:1c:4e:b3:65:f9:06:ba:77:91:ff:65:
         79:8e:35:36:ed:90:0b:1f:ff:cc:95:4d:f6:d3:72:69:e2:e5:
         08:b8:78:b3:8b:3a:8d:e5:a7:a7:a7:ae:3e:bc:2c:b3:64:d8:
         f6:35:5f:de:b4:9c:60:03:f8:3a:27:aa:36:ca:d7:85:b5:94:
         69:b9:7c:5d:e3:fa:d4:5c:57:b3:fe:9a:84:82:84:0a:ce:27:
         92:dd:3f:39:05:8f:0d:fe:72:5a:a3:68:7a:d5:38:75:29:32:
         98:9c:fa:df:ca:23:b6:54:19:a2:b3:5d:17:58:77:42:61:6b:
         a6:51:c8:27:72:af:89:60:e2:92:2f:ad:c0:65:40:f1:21:de:
         3b:a2:84:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg0MjIxMTAvBgNVBAUTKDM4NkVBQ0ZBQTYxQjhCNDAzN0RDMzhBQTI4MDg1REUz
MTg3OEYxRTMwHhcNMjYwMzAxMDEzOTI2WhcNMjYwMzA4MDEzOTI2WjAYMRYwFAYD
VQQDDA02OWEzOThjZS04ZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw25YTBwXLMIRdVwTcey7Dg9CXRs/Cgsn/CKjrlguseTQP+vVXLUTHbNMxEnv
nlKNirDnSTcMPbNtynAD5XJx1xhZKodxbki2HWlascPOPtitU6Cfx9hNQKTEb2r7
vHikqsVxD/TUdD/6DGlAhhuPBvLKfuwXDthhqzH/ZGtaYWD/Uy288ME/dFxQ9msw
RR7zuITFP4apoBi53sItrTuHm949teZSg3RWlDfCiXVcOwCu1BT2WxoDEtUngJ7q
mSCYNd+FNIxfui+HdsMuTvC/qG3lYnkQFM9pF5zdA5TaTotjx8Zl7T4u5cFUFZyl
kJWXgpVYI4FYxUYrYXE/v8py0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEdedMF
r7Bh1GBPhjXj3QapiPpEMB8GA1UdIwQYMBaAFDhurPqmG4tAN9w4qigIXeMYePHj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQyMi8zMTgwRkUyQURB
RkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkwQTMzRGlxS0FoZDR4aDQ4
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09HNnMtcVliaTBBMzNEaXFLQWhkNHhoNDhlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODQyMi8zMTgwRkUyQURBRkMxMUVDQkJENTM3ODZDNEY5QUUwMi9PRzZzLXFZYmkw
QTMzRGlxS0FoZDR4aDQ4ZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqWRePV6mBBYy+PAvpkdl9sCY6el5Pgh4rpTrDMczmTGsH+/B35hnnys+4xS0
j41Ljcl5G8qpWaHMNxVU4p6mwqJkcNk8JVTBg+JWsn5R6ltExM2xMcYDjFEa9peD
dx6DuS6dxp1NEYePpxPJlzDV/9bdTBxOs2X5Brp3kf9leY41Nu2QCx//zJVN9tNy
aeLlCLh4s4s6jeWnp6euPrwss2TY9jVf3rScYAP4OieqNsrXhbWUabl8XeP61FxX
s/6ahIKECs4nkt0/OQWPDf5yWqNoetU4dSkymJz638ojtlQZorNdF1h3QmFrplHI
J3KviWDiki+twGVA8SHeO6KEsA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:25 2026 by rpki-client