Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
File:                     odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json)
Hash identifier:          JgkZ+jikBJ50dMkVJpPSgp7+PT6zpdLWfxGqriQpDSs=
Subject key identifier:   CD:EF:D7:84:65:D3:CE:E6:D3:CE:51:C0:7B:83:C1:37:F6:8B:DD:14
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Certificate issuer:       /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial:       035B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
Manifest number:          034A
Signing time:             Sun 01 Mar 2026 01:50:53 +0000
Manifest this update:     Sun 01 Mar 2026 01:50:52 +0000
Manifest next update:     Sun 08 Mar 2026 01:50:52 +0000
Files and hashes:         1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: VuIRXq+bX30e7qmrJuuzuWZqA9i/jAoks0wSvE4LaFM=)
                          2: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: JOoE8cEv4QilU5Ombvm92A0+Tjd4xN4kgW5mBEFenZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
                          rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859 (0x35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
        Validity
            Not Before: Mar  1 01:50:52 2026 GMT
            Not After : Mar  8 01:50:52 2026 GMT
        Subject: CN=69a39b7d-cc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:c7:10:19:8e:f2:e8:77:31:b7:49:a9:75:
                    fd:a0:16:42:7b:42:32:b5:8e:ce:82:f6:73:25:fc:
                    d3:6a:06:e9:6e:98:93:af:01:cc:4d:64:e3:a5:bf:
                    b4:f5:2d:95:8e:8c:88:49:e5:8c:a7:49:33:fe:29:
                    60:ca:9f:55:41:33:86:88:8e:2a:3a:23:b4:b1:79:
                    2c:8d:82:75:9b:40:1a:f0:f9:66:d2:17:a4:41:18:
                    43:f6:fd:da:0f:a3:2d:c5:7c:70:2f:87:4b:3d:90:
                    bc:25:a2:e8:03:f2:2c:f2:27:62:2f:45:48:61:14:
                    df:61:b2:5b:e4:1e:b5:2a:0f:c7:63:d7:a5:92:fb:
                    fb:e5:65:53:97:2e:a6:05:f3:93:c3:f8:22:57:02:
                    11:35:ae:70:c2:74:6f:f1:b0:a7:09:81:47:da:be:
                    b2:a8:c0:2f:18:c8:f9:c9:9f:7f:cd:94:c4:55:76:
                    61:67:84:00:67:67:83:99:56:a2:70:03:ba:4f:fe:
                    6d:82:d3:97:d0:c2:73:70:58:70:a3:b7:61:f1:84:
                    20:9a:ce:d4:a7:af:73:fc:54:88:59:cb:55:ab:70:
                    29:6f:6a:c0:f6:ea:7d:11:57:bb:91:13:ee:f0:d6:
                    8e:75:5f:09:dc:5a:b4:43:c5:6c:92:bb:3e:5f:45:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EF:D7:84:65:D3:CE:E6:D3:CE:51:C0:7B:83:C1:37:F6:8B:DD:14
            X509v3 Authority Key Identifier:
                keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:0a:38:22:1b:b3:59:bd:e3:2d:72:40:50:55:67:28:8c:
         d1:3d:aa:5c:68:9b:cc:b3:57:03:2d:8f:c1:cc:20:f7:c6:69:
         47:14:26:57:10:31:d3:cb:7b:9d:23:12:41:4b:fd:8a:51:5b:
         b1:27:49:d5:8b:7b:e2:0e:ed:70:5a:75:34:3c:e2:49:3e:49:
         57:3f:89:83:23:a8:3c:fd:fd:b2:27:0d:e5:1d:ef:59:80:ed:
         b0:14:86:42:e0:a2:ea:fa:f4:a1:ad:22:b3:32:48:9f:c9:73:
         4d:13:e2:6e:14:8f:79:33:42:c9:99:32:d3:94:b1:f3:87:fb:
         6a:df:20:0d:f4:94:c6:09:5c:59:b6:1f:e8:12:30:af:17:80:
         98:f0:a1:97:80:e1:be:a7:f2:97:45:78:26:cb:86:8e:6f:30:
         62:f6:62:40:c2:21:e0:8d:31:c0:50:c8:e0:76:13:30:81:ff:
         e5:c6:71:44:1c:ef:5a:14:55:8a:39:5d:a0:a1:33:af:8d:86:
         3d:a9:e5:1d:9b:53:58:37:29:18:e4:a0:dc:0f:fe:95:4a:3e:
         c7:1c:e3:05:81:18:53:88:29:c4:12:90:c8:c2:3b:f1:b0:b0:
         07:63:96:b6:05:8c:6c:2b:19:ce:b0:53:68:08:0f:be:80:fd:
         51:c4:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:42 2026 by rpki-client