Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
File:                     oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json)
Hash identifier:          J3OwxtXUfHld7v/24rfV2URX2deyn9E8lYr9d8Y7KP0=
Subject key identifier:   94:E8:03:A8:D6:23:30:92:89:C2:E3:C3:C1:1A:4E:2B:19:2E:8F:EB
Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC
Certificate issuer:       /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
Manifest number:          01FC
Signing time:             Sun 01 Mar 2026 03:53:05 +0000
Manifest this update:     Sun 01 Mar 2026 03:53:05 +0000
Manifest next update:     Sun 08 Mar 2026 03:53:05 +0000
Files and hashes:         1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: deg02HkD8+So3DwgQJZ9bKkbGHc2Cglydlq6S2kUmLY=)
                          2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: Vb+7f3M9pS78Ueu7sOSJnfqQwVI3CakBS3Vn6Okli7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl
                          rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
        Validity
            Not Before: Mar  1 03:53:05 2026 GMT
            Not After : Mar  8 03:53:05 2026 GMT
        Subject: CN=69a3b821-e2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:92:dc:a8:06:d9:dc:45:38:04:f2:c5:91:
                    71:c0:eb:19:49:03:d2:b9:24:d1:53:e9:25:d4:9b:
                    af:34:a5:56:54:e7:28:ca:cc:ff:25:ad:94:2c:92:
                    0c:8a:8d:36:19:17:5b:5a:e3:da:20:35:e0:ed:18:
                    7e:fa:73:ee:7a:42:4a:a7:aa:9b:0d:dc:1d:be:1a:
                    47:98:e3:af:2a:de:9f:63:06:d3:0c:bd:87:47:6d:
                    52:07:86:a8:17:d8:8c:49:34:9e:6e:d8:4f:59:ce:
                    28:c9:e9:95:a5:cf:32:77:cf:2d:b0:1b:ba:c2:dd:
                    76:0e:05:e0:3c:27:d7:e8:44:36:2d:b5:93:06:c8:
                    ab:32:ae:f2:d9:e2:8d:10:b5:04:03:e2:01:ab:c6:
                    9c:01:14:15:d8:de:7a:c4:aa:4b:63:12:f2:ae:0e:
                    11:0d:7b:5d:62:1f:16:35:89:a2:1b:bb:4d:56:e9:
                    0f:78:d6:14:8e:c0:d2:d9:f6:cc:39:84:52:12:48:
                    7a:39:38:1e:d3:b4:05:d2:9b:7e:13:99:88:02:cd:
                    3d:e2:3c:10:ec:eb:c1:4f:f6:31:7d:db:e8:d5:fa:
                    d3:59:03:e2:59:d8:72:ce:aa:3e:7a:b6:98:07:f1:
                    d9:82:93:ce:44:1c:a5:54:89:6c:0d:57:bb:81:99:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:03:A8:D6:23:30:92:89:C2:E3:C3:C1:1A:4E:2B:19:2E:8F:EB
            X509v3 Authority Key Identifier:
                keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:43:06:98:dd:47:1c:39:e0:5c:fd:eb:bc:89:c8:9f:5e:5c:
         23:00:f1:33:e9:72:63:89:5d:49:34:8b:b8:14:f3:86:dd:2d:
         20:32:c2:69:b5:c1:83:17:70:85:4d:f7:da:c9:de:7e:ab:48:
         85:57:e7:73:50:3a:e4:5b:c7:45:85:46:9f:77:ac:52:99:69:
         15:25:2c:ea:71:dc:f5:fe:ea:d7:52:b7:e3:53:1b:3b:35:18:
         b6:4d:f4:81:73:e3:7a:21:bc:ff:ea:45:19:a8:ab:10:35:ff:
         0c:49:1f:e4:c7:7b:a0:6e:0f:66:b5:15:65:d5:e5:68:fe:bd:
         2b:28:08:18:0e:26:78:a7:b6:77:2d:e7:90:16:1a:36:df:5d:
         d4:dc:b3:53:b9:9b:91:23:cd:24:26:53:32:97:d3:99:f0:ea:
         56:d4:1d:18:17:61:ec:71:d7:35:90:69:61:42:83:b8:ca:3f:
         01:15:96:6e:ac:79:d2:6b:77:d2:f2:d9:1c:dd:d2:98:a2:9a:
         e5:80:a4:d5:67:b5:b1:37:8a:48:64:51:03:8b:e8:22:27:3a:
         93:ad:5f:22:76:7f:93:90:6d:1c:29:be:4e:ec:fa:16:98:3f:
         f3:0f:d2:10:c0:ab:0e:9b:c1:20:d4:83:75:0d:20:72:fe:20:
         f1:d9:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:48 2026 by rpki-client