Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
File:                     oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json)
Hash identifier:          prvAnke2YHXMK7i5RDJ9UdgokHthYgy82KMzR59hTzI=
Subject key identifier:   FA:67:C8:02:B0:71:F4:A8:9F:7C:1F:25:07:93:59:37:78:5F:64:1E
Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
Certificate issuer:       /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
Manifest number:          0185
Signing time:             Sun 01 Mar 2026 05:28:22 +0000
Manifest this update:     Sun 01 Mar 2026 05:28:21 +0000
Manifest next update:     Sun 08 Mar 2026 05:28:21 +0000
Files and hashes:         1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: TCGaMD+Vge/MT60Bln4brdgKNRIIcnBT94mhkq2BwbU=)
                          2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: d2K+InZzs4yuUY7A0gQ/z4AXxA9If9lELXrXKBGG5jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
                          rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
        Validity
            Not Before: Mar  1 05:28:21 2026 GMT
            Not After : Mar  8 05:28:21 2026 GMT
        Subject: CN=69a3ce76-7a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:b5:ef:a0:d1:6d:79:d2:16:e7:be:eb:f5:
                    02:3e:ba:84:a8:fb:b9:17:bb:f7:c0:7e:b6:ef:92:
                    bb:da:54:98:7b:f4:6a:f8:9e:59:1b:2a:94:e0:b6:
                    c0:db:b2:40:e9:7c:3b:72:ee:d2:8d:21:a0:ff:16:
                    c8:1c:92:c7:3c:74:af:a8:ad:d7:fb:3a:d6:61:45:
                    b7:bd:2a:39:5b:14:b3:af:af:bd:42:63:94:a8:58:
                    2b:18:d0:a0:f8:79:ef:dd:91:68:25:71:c1:ef:bb:
                    98:14:23:94:eb:bf:c1:05:00:d8:2d:75:cc:b7:9c:
                    00:0f:37:d9:cb:5c:73:6b:88:26:9f:a0:3c:05:67:
                    41:f6:3a:32:02:37:c8:73:08:2a:bf:37:22:f1:5f:
                    d2:ad:54:52:60:2b:5f:d6:65:ff:ec:11:b5:ef:b9:
                    b2:37:ba:0a:de:31:1c:ef:08:06:1b:b0:4d:c2:68:
                    d7:26:8e:f2:a7:fb:52:44:6a:40:5b:df:b9:be:7d:
                    0e:05:f9:8a:ac:11:2e:aa:ab:67:41:6d:2a:9c:91:
                    3f:9d:92:a2:8d:59:b9:7b:1a:e3:b5:a3:f9:0f:46:
                    e1:92:8a:80:b8:da:f4:98:90:94:81:a2:35:39:98:
                    db:74:36:44:a8:1b:6c:c4:3d:4b:16:02:53:11:79:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:67:C8:02:B0:71:F4:A8:9F:7C:1F:25:07:93:59:37:78:5F:64:1E
            X509v3 Authority Key Identifier:
                keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:16:40:43:41:66:5d:0e:50:b2:d5:50:54:fe:54:6c:2a:9e:
         28:9f:d2:9a:55:78:ba:17:b4:a4:aa:20:41:cd:de:2e:79:8c:
         29:53:35:d2:e3:6d:a3:77:5c:1b:90:2d:49:5c:46:5b:16:d1:
         80:a3:71:8d:b0:55:fd:4a:72:e6:10:d6:17:1b:51:92:3e:3c:
         68:a9:61:29:bb:7f:c7:1d:19:8a:e9:b0:83:b8:6a:e5:0d:66:
         74:8e:2c:98:9c:74:3d:5f:70:1f:49:e6:2b:7a:4b:13:91:c8:
         64:7d:6a:00:20:bc:50:87:97:68:5c:f2:2c:2a:cb:26:d6:af:
         94:3e:ec:2e:a6:db:f3:19:af:96:4d:f0:ad:10:af:d6:56:8b:
         b7:75:59:e6:7f:d9:51:25:b2:7a:51:ff:0d:66:01:5b:74:dd:
         b4:35:4c:0a:8d:80:d5:74:dc:40:61:1d:fe:4a:6b:1b:26:80:
         a2:08:24:d9:13:70:ca:c2:f5:89:00:7e:bd:98:8b:19:2c:74:
         3a:f4:87:8b:32:39:47:9d:42:ec:12:60:97:d4:f9:da:34:52:
         11:cb:b4:d1:76:9a:8c:47:1b:b5:32:ef:01:fb:45:13:d6:4e:
         fa:5a:18:43:45:f5:16:c1:b5:c4:44:12:c5:ff:9b:00:71:2e:
         ea:76:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:11 2026 by rpki-client