Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
File:                     O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json)
Hash identifier:          c2qho4zFxK8lZSlJDDnBckqiY1UNMIxW/6BQ3lkHR8c=
Subject key identifier:   34:0A:9E:AB:36:F3:6A:3F:90:E4:D1:02:79:41:04:33:AF:82:F1:71
Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
Certificate issuer:       /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Certificate serial:       092B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
Manifest number:          0922
Signing time:             Thu 16 Apr 2026 20:08:59 +0000
Manifest this update:     Thu 16 Apr 2026 20:08:59 +0000
Manifest next update:     Thu 23 Apr 2026 20:08:59 +0000
Files and hashes:         1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: jAltqGQaZgs3HMLApm5VY35YA3r8vcko5+wmHEyelJw=)
                          2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: PcM9VvZwEtkWziWmDAYLmLOnlkBtxqnyiAkGfpwesWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
                          rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347 (0x92b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
        Validity
            Not Before: Apr 16 20:08:59 2026 GMT
            Not After : Apr 23 20:08:59 2026 GMT
        Subject: CN=69e141db-e4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:bc:72:05:c3:bf:3f:3b:ef:16:36:b9:e6:
                    45:59:66:13:b8:89:1b:ce:dc:df:fd:47:8a:fa:b1:
                    d6:d0:57:fe:2e:cc:02:c0:2c:2f:42:c0:1c:44:00:
                    e6:dc:21:80:12:57:a8:7c:e4:f9:70:fc:cc:a5:b4:
                    84:07:2a:6a:60:10:49:91:71:97:6c:42:40:9b:85:
                    90:3f:f1:27:46:76:61:68:1d:30:ba:88:21:df:10:
                    2b:bd:44:6d:62:91:33:d7:10:18:d1:86:15:98:bc:
                    42:02:10:8b:68:86:a7:49:9d:7a:e4:1b:82:a1:33:
                    15:a0:04:d1:73:16:65:15:59:e0:9b:25:4b:c5:5f:
                    e7:98:dd:d9:91:d7:4d:d9:62:7a:8e:af:cd:e3:c1:
                    45:05:f1:89:78:62:15:e6:c4:c1:5c:f5:e6:72:ec:
                    15:24:82:ff:4a:b7:5a:e5:39:73:4f:73:35:37:a5:
                    98:9e:2a:f6:51:d3:b2:8e:f8:6e:4e:e1:dc:d4:e7:
                    96:11:01:3a:2b:48:ae:04:a0:03:9a:0d:b5:ea:83:
                    bd:dc:cd:93:10:35:93:90:21:6f:78:40:18:2c:6e:
                    fa:4f:de:1e:23:78:a7:2f:eb:60:c9:34:ee:e4:b5:
                    3c:3c:f6:29:53:c0:01:ee:e0:e3:cb:22:ac:35:d9:
                    76:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0A:9E:AB:36:F3:6A:3F:90:E4:D1:02:79:41:04:33:AF:82:F1:71
            X509v3 Authority Key Identifier:
                keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c2:d0:0a:f8:2a:24:8e:34:e5:44:12:af:69:01:11:7c:fd:
         e4:89:7a:9b:95:08:92:50:ee:ff:a9:62:5f:28:04:7a:d4:85:
         8e:be:5b:32:1e:d4:6c:d0:e3:2e:2a:08:9b:15:f7:af:8f:50:
         e7:91:61:cc:f6:da:34:ce:11:c3:77:8c:96:de:ee:7b:7b:d6:
         60:4b:ef:4e:49:33:1f:b4:15:77:7f:a5:7f:0c:d3:fb:e2:fb:
         b9:e7:3f:7e:6f:1c:86:c7:fe:a8:88:78:ee:33:3c:65:73:1d:
         25:82:d3:89:24:59:de:dc:5e:fb:95:4f:e3:68:37:c8:de:1b:
         6a:2a:8d:88:89:22:01:9f:9d:13:1f:7f:5e:b7:d0:f8:e6:36:
         0d:c5:5e:23:10:61:87:b0:47:46:43:a6:20:70:66:7d:33:d5:
         2f:8f:d3:45:97:f7:41:bf:ba:3b:26:18:72:08:ce:7e:9e:70:
         18:10:e4:bd:97:7e:ab:32:05:40:14:16:4d:2a:2e:08:5e:6c:
         06:d7:3b:c0:4f:16:90:f5:a4:8e:f6:d5:21:b7:86:d1:34:22:
         12:8f:4b:af:8c:77:21:95:42:68:5b:42:dc:f5:4f:a1:fd:74:
         12:9a:b6:8f:2d:4f:09:9b:21:7e:fd:54:81:48:0d:78:1a:75:
         b9:fe:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:29:17 2026 by rpki-client