Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
File:                     O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json)
Hash identifier:          e5MdVPiNm8bVM8yIFYkut2m1f0ZNn3cQI/fhum3VKac=
Subject key identifier:   D8:10:A8:D6:A9:AA:A2:7B:47:D2:E0:28:12:26:5E:1C:14:7D:35:87
Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Certificate issuer:       /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Certificate serial:       0792
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
Manifest number:          078A
Signing time:             Sat 28 Feb 2026 22:01:28 +0000
Manifest this update:     Sat 28 Feb 2026 22:01:28 +0000
Manifest next update:     Sat 07 Mar 2026 22:01:28 +0000
Files and hashes:         1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: Nd06ejH/Kf9FSYX7RED1u8NYLFlQpXOG4liIdfi0wwU=)
                          2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: WiTy8cm0FJ/aEESc91vlgZl0JT8P/pFPtZ2Ry9TBveA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
                          rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1938 (0x792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
        Validity
            Not Before: Feb 28 22:01:28 2026 GMT
            Not After : Mar  7 22:01:28 2026 GMT
        Subject: CN=69a365b8-2169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:69:56:c2:0c:3e:81:57:bf:4e:f6:c2:5d:c1:
                    ef:c3:c2:cc:40:41:cf:ec:69:69:ef:df:2b:93:1f:
                    74:6d:90:ec:65:7d:63:06:96:5f:7f:7a:22:16:7a:
                    64:e1:08:ff:39:70:3d:01:1a:00:e1:2a:5b:21:bd:
                    f1:26:41:99:98:8a:74:ae:72:29:f1:4a:57:d3:29:
                    ee:16:5d:32:0f:a4:85:ad:7d:3f:98:0b:70:92:59:
                    61:4c:87:12:8b:fc:c6:05:87:3e:b6:cd:6d:f1:f2:
                    f5:8a:4e:23:71:b4:8b:ab:8b:e7:bf:da:03:c6:23:
                    28:64:d1:6c:1c:84:44:0e:36:44:56:c7:02:6a:79:
                    8a:96:76:6a:8b:76:9f:ba:64:51:de:15:86:af:8f:
                    04:62:36:ff:0d:7c:ea:cf:9b:c8:31:c2:be:84:da:
                    d5:8c:dc:97:69:ec:e4:25:d5:5a:3f:e1:36:7c:bb:
                    03:af:c7:94:c7:1a:65:75:82:1c:5f:71:11:4d:ef:
                    ec:f0:6a:16:5e:14:e5:f0:ad:b9:64:91:83:1a:eb:
                    79:a7:e9:7d:7f:ea:8e:60:9c:0c:dd:52:bf:f6:74:
                    82:45:7c:3a:0f:50:95:07:7e:15:e6:e9:6a:8a:7f:
                    04:e9:40:ea:fb:da:6d:a5:75:18:60:37:5e:ef:80:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:10:A8:D6:A9:AA:A2:7B:47:D2:E0:28:12:26:5E:1C:14:7D:35:87
            X509v3 Authority Key Identifier:
                keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:44:28:bc:11:fd:fb:3b:57:4e:ae:61:5d:31:17:7e:a6:70:
         56:65:07:e3:fd:c1:34:56:04:31:58:7c:f3:ab:0b:c8:fb:e4:
         63:e1:6c:ce:e3:ff:d2:b5:9b:38:fd:a6:0c:69:d2:77:4a:c4:
         91:f6:c4:7a:c5:fc:64:bf:3a:c9:e8:90:95:4b:db:f2:60:92:
         e8:0b:07:bf:4d:60:43:52:6f:06:79:9d:eb:d3:43:a0:54:10:
         61:6e:f2:9e:d6:4d:a7:26:87:98:44:4d:56:bc:b8:dc:ce:cd:
         f5:13:6d:54:28:b4:db:30:65:69:52:26:b4:eb:4d:25:fc:b8:
         e6:3f:ba:59:cb:43:17:e1:7f:04:1d:07:6b:26:52:b6:5f:6e:
         de:a9:87:0f:1c:3c:04:04:bb:69:25:02:b6:be:e7:36:9f:4a:
         fd:92:55:0c:ae:aa:e7:e6:df:8d:75:4d:d9:f6:5a:6a:b7:85:
         2f:7d:4a:72:ce:d7:d3:ce:d4:43:b7:01:34:2f:95:62:95:8b:
         44:bf:39:a1:f5:cb:be:25:03:52:b2:c7:22:25:0b:fe:84:73:
         07:f2:34:61:dd:d2:0c:5f:56:6a:ff:59:4d:32:94:29:2b:52:
         b8:7e:3b:9f:1f:77:8c:72:3a:39:a2:28:b7:98:1a:fc:aa:8b:
         f7:eb:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:44:00 2026 by rpki-client