Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File:                     OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier:          NcRfPuaALDTGT+hNG6ZizsIpyeZT485JhqDmxu3gQX4=
Subject key identifier:   90:52:A1:5A:76:6A:B1:1A:F2:B3:59:B8:B9:32:F0:97:FB:E6:53:3A
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer:       /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial:       0927
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number:          157C
Signing time:             Sun 01 Mar 2026 23:47:45 +0000
Manifest this update:     Sun 01 Mar 2026 23:47:43 +0000
Manifest next update:     Sun 08 Mar 2026 23:47:43 +0000
Files and hashes:         1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: EZ3UDkJ9lrd2cx25Wzd9TNVNISvtSY23+EztjJ54Z1A=)
                          2: C766E398C0EE11EA94A1F146C4F9AE02.roa (hash: nz6BK2tL3q42Duovz5x4frsjcDOdEruuDf2p96HoPBA=)
                          3: F6EC251224E711F087B2F571C4F9AE02.roa (hash: FUlEisY5iu6kKNPK8yWaujtfsoDRwyXMQ3ZKDstAErY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343 (0x927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
        Validity
            Not Before: Mar  1 23:47:43 2026 GMT
            Not After : Mar  8 23:47:43 2026 GMT
        Subject: CN=69a4d021-29ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:b4:9b:c0:74:b8:6a:1b:db:6d:90:6e:cb:
                    cc:ae:4c:3a:02:25:e4:d9:6b:8e:79:e5:10:42:96:
                    a2:54:23:1f:f9:31:ee:72:cf:de:07:2d:95:63:66:
                    ea:bc:91:80:65:db:a9:72:6f:b1:4e:9f:67:0d:e0:
                    d5:8a:ce:0e:2e:6d:3f:5c:24:29:8f:6b:89:e4:bc:
                    3f:7c:69:b0:85:c8:16:7b:b6:dd:83:fb:89:e3:bc:
                    a9:03:d0:49:f8:4a:05:4f:1f:f5:d1:c9:6b:fe:90:
                    5e:12:70:05:94:61:48:b3:c0:c9:22:9b:7b:87:59:
                    43:c8:de:c0:79:e0:f2:93:84:e9:d8:10:ee:b1:34:
                    6d:b7:f4:7a:7b:fd:bd:01:d0:1f:f0:7a:96:d6:b6:
                    fa:60:fe:33:ac:8e:20:21:e4:98:a1:9e:cf:41:0b:
                    6a:03:05:c4:b0:07:36:e8:4f:0e:ad:d2:24:4d:68:
                    9e:d3:7b:54:e1:d8:a3:56:cc:eb:04:59:e0:c1:4f:
                    ad:21:94:54:e2:b2:ee:d0:1b:ba:8f:5a:05:69:ff:
                    1e:ec:88:4d:e3:d3:66:db:72:d1:2c:e7:cc:cf:81:
                    46:19:6c:78:ab:9a:53:ad:cc:bd:16:7d:3c:e4:eb:
                    51:35:7c:33:f4:69:12:1c:25:83:9f:b5:7d:c9:94:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:52:A1:5A:76:6A:B1:1A:F2:B3:59:B8:B9:32:F0:97:FB:E6:53:3A
            X509v3 Authority Key Identifier:
                keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:68:22:7e:63:d1:44:b2:4e:72:48:63:f8:95:02:49:2e:63:
         7b:cf:cc:27:2c:a5:77:29:ef:11:d2:97:41:ac:a2:d9:df:7a:
         24:be:93:27:f1:3a:2e:44:d0:ed:f8:6a:ed:93:f1:e8:bd:3c:
         db:19:95:80:fe:f7:71:31:59:bf:8d:2d:e8:4b:44:e3:ea:ca:
         a8:7e:0d:82:e0:87:93:de:f9:09:f7:43:28:76:c2:5e:3f:0f:
         ac:06:28:13:77:54:35:9f:89:6f:80:59:7f:d9:de:f3:08:55:
         55:dc:2a:81:89:ea:8e:fb:4b:06:37:25:2e:ba:e1:ac:44:90:
         6b:40:6b:48:6b:da:a3:59:53:96:dd:8c:9f:bd:18:9f:d0:60:
         7f:9b:be:b1:48:48:93:f0:af:9c:d9:c2:fe:d3:48:12:fa:95:
         8b:fb:93:63:06:8e:b9:db:1e:dd:c6:84:9b:96:fc:c9:8c:1c:
         0f:24:17:57:62:fd:61:ed:3a:e3:44:51:fe:e9:80:67:6a:19:
         20:c2:6a:51:5d:f3:0b:16:26:e4:d6:52:64:9d:bf:bb:cb:82:
         59:92:ee:93:f2:e7:8b:95:41:e7:23:3a:9d:8d:0f:bf:db:ac:
         96:49:a3:d9:da:f1:0e:6c:1f:8f:ba:47:a7:b1:29:97:ef:c2:
         2e:30:a4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:35 2026 by rpki-client