Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
File:                     O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json)
Hash identifier:          vaLhI0DFdYouWRvmEClR71IkWeAC4fFxqFQK/QcHRW0=
Subject key identifier:   55:F9:3E:D4:00:44:A5:A6:90:E6:B9:40:88:C7:7C:39:CE:D8:84:85
Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Certificate issuer:       /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Certificate serial:       07B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
Manifest number:          07A7
Signing time:             Thu 16 Apr 2026 21:24:48 +0000
Manifest this update:     Thu 16 Apr 2026 21:24:47 +0000
Manifest next update:     Thu 23 Apr 2026 21:24:47 +0000
Files and hashes:         1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: H3tMzRLFCxpZuoqD/GNEL7sXKz1FfBBjqccKEG6ImP8=)
                          2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: By7/GJ4vrsW+p6nlCrl+Q0fqyxwGg35EjwhrqyWk25M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
                          rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1971 (0x7b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
        Validity
            Not Before: Apr 16 21:24:47 2026 GMT
            Not After : Apr 23 21:24:47 2026 GMT
        Subject: CN=69e153a0-6e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:ee:5e:32:bc:c4:49:bc:b2:6a:99:75:bb:
                    7e:db:c1:8f:a5:db:67:ad:28:16:8f:2e:b0:3e:7a:
                    e3:b2:aa:5a:11:71:d7:b8:bf:bf:d0:8d:18:2f:c0:
                    2d:a8:71:d4:96:f6:9c:06:c3:3d:85:b7:02:20:1f:
                    b6:eb:42:d1:b9:ae:ed:49:08:e4:13:5d:ad:b6:b8:
                    db:d2:79:fd:e0:ab:5d:8b:61:e2:3b:8e:db:00:de:
                    e4:06:dc:2f:d1:e2:b2:22:e8:7a:21:c1:03:c4:57:
                    74:e5:a7:1d:8f:b5:59:72:45:2a:26:d2:88:46:53:
                    ac:36:49:71:c1:82:36:ea:cc:4c:e9:6b:22:61:d7:
                    1b:50:05:7f:17:05:b8:c5:b5:c6:d1:3e:f8:73:23:
                    77:83:44:67:de:1d:6b:42:f0:b3:d0:d4:a3:4b:30:
                    5f:e7:35:2b:f8:c4:de:20:63:57:9d:7f:f4:37:d9:
                    e6:0c:6f:5e:cf:7b:c3:03:59:fb:db:a5:2f:04:40:
                    bd:9b:73:90:37:2e:d3:a6:61:8b:3e:2b:ea:f3:17:
                    bf:a3:31:bc:ad:41:65:0d:f0:98:ab:ec:86:fc:b9:
                    22:f8:f8:fb:81:bc:cb:46:97:bf:8b:53:0b:c1:9f:
                    8d:47:0a:41:91:bb:b3:f8:ff:90:3c:1b:e7:27:6d:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F9:3E:D4:00:44:A5:A6:90:E6:B9:40:88:C7:7C:39:CE:D8:84:85
            X509v3 Authority Key Identifier:
                keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ef:19:07:6c:bd:09:b8:d2:b7:23:dd:43:8e:47:7b:19:09:
         b9:52:85:22:55:bb:d4:aa:5f:89:98:da:0b:1d:8a:35:5b:a5:
         81:10:0e:c8:76:fb:5b:62:48:9d:df:f6:6e:ae:4b:3a:f3:45:
         08:04:dc:3d:78:5d:d5:64:e7:c0:3b:a6:f8:68:6c:55:8e:62:
         5d:82:5c:63:9e:5d:d1:79:23:6a:97:a1:b3:0f:5f:a7:02:54:
         ab:38:0c:fa:3e:a5:2e:50:0c:ec:cb:59:aa:1d:26:e4:78:ba:
         1a:a4:68:de:04:bf:4a:86:f7:5e:91:1b:09:70:7b:be:e1:f7:
         f0:80:ed:d0:bd:3d:f6:bd:a5:64:02:b3:ac:b8:52:38:84:13:
         10:6e:3c:14:9b:07:32:38:b1:a6:11:3f:2e:f0:f9:c6:22:d3:
         1d:8c:37:28:7b:6b:a4:38:26:07:36:cf:d5:a3:0b:be:f7:11:
         01:a6:97:d6:4b:a3:85:b8:e6:77:1e:d7:c0:90:08:d3:36:3e:
         40:84:5a:9f:1e:b3:a4:61:4f:90:7e:89:92:0c:7a:71:20:fa:
         07:0e:07:3a:88:e8:f7:bc:45:09:d6:46:6d:45:82:67:cf:aa:
         eb:0c:9a:55:12:0b:1b:89:ad:22:2b:01:94:ba:64:85:9f:de:
         28:95:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:54 2026 by rpki-client