Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File:                     i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier:          4hCYIM4NQys9v87GF6ZHjf2J9qh5pENBo5xKJ/KwSaQ=
Subject key identifier:   09:01:12:C0:C9:6B:1B:3E:DD:53:79:B0:48:61:BD:F9:5E:0C:4A:84
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer:       /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number:          010A
Signing time:             Sun 01 Mar 2026 07:03:46 +0000
Manifest this update:     Sun 01 Mar 2026 07:03:45 +0000
Manifest next update:     Sun 08 Mar 2026 07:03:45 +0000
Files and hashes:         1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: KT2ZfoFkbEoRcndBE/LUYf+0+XsNAIaNWw1j1/ZcAEA=)
                          2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: sJiJ1naY/4cR2Pgo/DEru8iJf9KG6T1eb6PbQmIPhNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
        Validity
            Not Before: Mar  1 07:03:45 2026 GMT
            Not After : Mar  8 07:03:45 2026 GMT
        Subject: CN=69a3e4d2-fe24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:fc:2d:d7:ee:29:28:8e:a8:60:45:8f:d0:
                    73:de:ba:87:09:f4:32:52:fb:3a:76:5f:44:be:0b:
                    3c:cb:e7:8b:25:6a:76:37:4c:af:83:35:b6:15:f1:
                    3d:85:2a:32:08:e9:12:62:4c:c9:5e:7c:24:fa:ef:
                    0f:e8:62:36:08:c0:dc:06:97:16:9f:dd:ba:3c:65:
                    5a:5c:29:8d:f3:1d:0f:ac:ab:01:d5:be:7a:e4:35:
                    09:a2:87:55:b2:68:88:68:35:43:39:db:c7:c3:c3:
                    a4:00:ae:14:c0:d5:06:55:3f:f6:1b:63:60:24:3c:
                    b3:2a:bf:cc:eb:7d:53:6c:44:84:44:08:6a:88:5a:
                    28:a8:aa:05:15:1c:55:37:ef:d0:05:f5:13:4f:77:
                    42:a9:20:4e:38:1c:53:91:3f:f1:e7:6c:e5:91:58:
                    23:c1:29:32:bb:bd:fb:0c:9a:77:4e:09:f3:82:27:
                    90:9b:a4:65:33:22:0d:27:a1:b9:53:05:a1:03:d7:
                    1d:15:69:9d:a6:de:33:52:c1:73:ee:72:a2:fe:ea:
                    e2:d8:36:df:94:b1:0f:15:3e:38:39:38:f4:72:1c:
                    e8:17:78:2c:30:42:6a:d5:e9:27:24:d2:22:55:2f:
                    f3:6b:5a:98:32:b2:e6:ab:3a:09:62:ee:4d:45:a6:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:12:C0:C9:6B:1B:3E:DD:53:79:B0:48:61:BD:F9:5E:0C:4A:84
            X509v3 Authority Key Identifier:
                keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:30:58:fc:ce:e2:28:c3:e8:b7:b3:27:13:88:95:60:f2:d5:
         3b:24:66:cd:cf:ce:e3:c7:7e:0e:61:9a:62:66:e7:5c:9b:1d:
         fb:f0:fa:bb:8a:1e:bb:33:7e:c6:6a:91:ed:f4:38:b6:28:3f:
         31:fa:ab:66:b4:ac:43:4a:62:a6:9f:40:7e:1e:08:e7:d8:c5:
         90:98:19:fe:b8:fb:67:f2:ad:11:06:c4:f1:64:97:28:0e:ff:
         aa:88:29:17:50:e9:23:76:38:3e:eb:13:b7:a2:f0:9f:9e:64:
         88:d4:1b:d0:d6:93:41:b1:1d:aa:39:7d:10:6d:c3:dd:d4:16:
         97:30:de:7d:72:55:eb:3a:20:f3:94:a9:57:f9:dd:79:fb:86:
         e1:0b:be:5a:12:32:bd:b7:7a:ae:a6:3b:b4:d2:c9:4f:f3:56:
         45:a4:91:c1:cf:e8:cb:d6:a1:4a:34:54:c2:50:b0:63:03:b1:
         c7:79:6a:ec:b8:9a:d6:43:2c:43:7e:a1:b4:71:1d:d9:24:50:
         5d:a6:47:69:43:37:ea:74:70:c0:dd:83:27:1c:97:f0:3b:3c:
         72:26:f4:ca:5c:f6:0d:4a:c5:4f:ba:a5:53:4e:6a:57:1e:3c:
         25:9f:94:bb:35:ae:17:1d:fa:16:de:f3:fc:75:a7:e4:5e:48:
         29:5f:de:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:29:42 2026 by rpki-client