Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
File:                     oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json)
Hash identifier:          F/2Sh66F7ja44odSFjzxVgCfENXStmUCR3aCC9U2bSY=
Subject key identifier:   FD:36:DF:DB:C9:A2:25:92:9B:7D:8D:22:EF:BA:5D:F1:0C:B7:F9:8B
Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
Certificate issuer:       /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
Manifest number:          3B
Signing time:             Sun 19 Apr 2026 08:07:06 +0000
Manifest this update:     Sun 19 Apr 2026 08:07:06 +0000
Manifest next update:     Sun 26 Apr 2026 08:07:06 +0000
Files and hashes:         1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: OIb7qoDOwoqk2GBok7Mfe0fBl4t6HstVs3ubZRiOXeY=)
                          2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
                          rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
        Validity
            Not Before: Apr 19 08:07:06 2026 GMT
            Not After : Apr 26 08:07:06 2026 GMT
        Subject: CN=69e48d2a-9d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:57:9e:75:0b:93:89:f1:a7:6c:e5:60:2a:12:
                    b2:30:7f:56:1e:e7:5b:df:df:19:5b:ed:bf:bf:6e:
                    c6:7c:a6:aa:30:59:f7:5a:2f:c6:e7:f5:e0:7e:4f:
                    47:25:ff:8a:39:b0:b0:a9:f2:56:87:35:89:f3:aa:
                    76:6a:f1:90:f1:ac:fc:f8:8b:bd:4b:fc:08:cf:c7:
                    c3:fb:9a:cd:ff:48:4e:77:ae:e9:c0:17:ce:df:31:
                    aa:17:df:b8:a6:0e:59:e7:cf:93:82:ee:33:fa:1c:
                    ff:da:29:14:d7:04:72:c7:34:87:02:29:c1:32:61:
                    39:7a:7c:7d:5c:4c:6f:b7:29:7e:da:cc:d4:4c:72:
                    90:12:06:0b:85:83:11:cc:40:50:c2:78:02:ed:b3:
                    fd:36:9e:69:33:73:c5:d2:2e:71:ff:bb:2c:08:79:
                    a4:0d:0a:3b:af:78:b9:b7:49:98:5c:89:28:ec:25:
                    32:24:33:b6:d3:89:54:83:b5:e0:79:eb:35:ca:dd:
                    28:fa:c1:ba:81:ad:26:24:77:24:c6:63:09:ac:18:
                    ba:20:6a:48:59:ad:1e:53:d9:8a:a4:27:3f:ef:22:
                    2e:9d:18:a0:5e:6f:4a:29:46:4a:3c:0e:e5:ab:5b:
                    90:c9:e5:dd:65:67:83:5c:88:a1:25:0d:6c:76:5f:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:36:DF:DB:C9:A2:25:92:9B:7D:8D:22:EF:BA:5D:F1:0C:B7:F9:8B
            X509v3 Authority Key Identifier:
                keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:98:22:bc:49:3f:57:f4:54:9c:3f:d2:1f:6d:98:78:04:39:
         74:9a:f6:60:0a:82:49:3d:93:3d:da:c9:fd:16:4c:eb:6e:9f:
         2b:ba:d0:29:db:24:b0:66:25:5b:8e:40:ac:fc:39:2e:75:42:
         bc:cb:cd:21:a5:74:47:e8:7e:c9:47:1b:90:d3:9d:77:84:06:
         a3:2a:31:60:51:ad:8d:f8:24:74:d5:6f:4a:61:dd:7e:1a:62:
         c7:f9:01:10:1e:44:26:fc:77:a2:9e:00:19:7c:77:86:de:65:
         5f:25:e6:f6:fa:04:18:0f:10:29:17:32:a9:d2:e0:ac:1d:43:
         e0:ff:bc:41:e0:5b:d5:78:d3:b4:9d:70:80:54:01:32:56:35:
         54:0e:16:b7:47:34:5b:e7:7f:70:e0:ae:4d:60:84:fe:f6:00:
         0a:3d:9b:2e:2a:48:c7:e6:3d:e0:7e:08:79:b4:7e:f1:95:c0:
         5e:13:56:57:48:b6:30:be:23:a2:69:d0:5c:35:35:d1:45:7a:
         97:b5:4c:6e:d2:50:b9:28:3b:4c:92:4b:e9:32:01:3b:e3:5c:
         1d:8c:ae:3e:be:37:54:71:55:11:53:f5:79:e0:0c:8c:20:fe:
         b6:8e:c0:7e:0a:92:b2:79:7c:ee:ba:b8:41:c7:85:19:8d:e3:
         19:ef:c3:58
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RThGNjExMC8GA1UEBRMoQTFBQTJBMkM1NkU2NEE5RDlCQkFBMzM3QjZENkFCMzYx
NzJEMzY4RjAeFw0yNjA0MTkwODA3MDZaFw0yNjA0MjYwODA3MDZaMBgxFjAUBgNV
BAMTDTY5ZTQ4ZDJhLTlkOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/V551C5OJ8ads5WAqErIwf1Ye51vf3xlb7b+/bsZ8pqowWfdaL8bn9eB+T0cl
/4o5sLCp8laHNYnzqnZq8ZDxrPz4i71L/AjPx8P7ms3/SE53runAF87fMaoX37im
Dlnnz5OC7jP6HP/aKRTXBHLHNIcCKcEyYTl6fH1cTG+3KX7azNRMcpASBguFgxHM
QFDCeALts/02nmkzc8XSLnH/uywIeaQNCjuveLm3SZhciSjsJTIkM7bTiVSDteB5
6zXK3Sj6wbqBrSYkdyTGYwmsGLogakhZrR5T2YqkJz/vIi6dGKBeb0opRko8DuWr
W5DJ5d1lZ4NciKElDWx2XzqRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/Tbf28mi
JZKbfY0i77pd8Qy3+YswHwYDVR0jBBgwFoAUoaoqLFbmSp2buqM3ttarNhctNo8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFOEY2LzNENkQ4RkYwRTdB
RjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJtU3AyYnVxTTN0dGFyTmhjdE5v
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvb2FvcUxGYm1TcDJidXFNM3R0YXJOaGN0Tm84LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF
OEY2LzNENkQ4RkYwRTdBRjExRjA5QjA2QTM0MjUzNkY1NkJDL29hb3FMRmJtU3Ay
YnVxTTN0dGFyTmhjdE5vOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBLmCK8ST9X9FScP9IfbZh4BDl0mvZgCoJJPZM92sn9Fkzrbp8rutAp2ySwZiVb
jkCs/DkudUK8y80hpXRH6H7JRxuQ0513hAajKjFgUa2N+CR01W9KYd1+GmLH+QEQ
HkQm/HeingAZfHeG3mVfJeb2+gQYDxApFzKp0uCsHUPg/7xB4FvVeNO0nXCAVAEy
VjVUDha3RzRb539w4K5NYIT+9gAKPZsuKkjH5j3gfgh5tH7xlcBeE1ZXSLYwviOi
adBcNTXRRXqXtUxu0lC5KDtMkkvpMgE741wdjK4+vjdUcVURU/V54AyMIP62jsB+
CpKyeXzuurhBx4UZjeMZ78NY
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:15 2026 by rpki-client