Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File:                     Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier:          L3i5Aq/0W26HSSzWWqnquWOnWeNYmAZMeRqL/hZiVuI=
Subject key identifier:   02:DE:18:61:6E:67:C3:24:0D:E6:59:99:7E:45:6E:8B:09:9C:BA:84
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer:       /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number:          038A
Signing time:             Sun 01 Mar 2026 01:19:07 +0000
Manifest this update:     Sun 01 Mar 2026 01:19:06 +0000
Manifest next update:     Sun 08 Mar 2026 01:19:06 +0000
Files and hashes:         1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: brzBd+Z1OEzYjsjGOou5KosWlV/ztZuTbS3C2p5ZCKw=)
                          2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: Utn78ATYCOJD2s8KH2tHbQkxop0M2VDIkapS9+XLIf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
        Validity
            Not Before: Mar  1 01:19:06 2026 GMT
            Not After : Mar  8 01:19:06 2026 GMT
        Subject: CN=69a3940b-0f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fc:16:cd:43:b7:78:d2:19:5e:bb:a8:d9:91:
                    93:0f:a2:0e:77:c3:e9:20:1c:34:64:48:f4:b8:47:
                    dc:eb:0b:d6:6b:9e:60:d9:e7:78:56:d0:87:f5:bc:
                    3b:ca:11:ca:af:c4:03:81:e6:93:e0:00:fc:04:b0:
                    e3:55:b0:1d:d8:48:75:63:0a:d9:73:1d:49:94:18:
                    0a:03:64:65:1b:52:fd:58:1a:2f:52:20:59:0d:cd:
                    fc:ea:f2:08:68:72:13:81:76:f8:55:be:24:d0:ea:
                    b3:93:c3:26:33:0d:7b:9b:18:dc:25:10:d5:c3:32:
                    a2:c3:b5:c1:c6:07:ee:a6:90:c1:83:bd:da:db:57:
                    7b:10:0b:52:3b:fe:56:ff:f3:5f:4b:e5:38:66:07:
                    c7:5d:f7:b6:11:81:ae:4d:7e:36:fd:d4:d1:21:93:
                    82:31:ac:53:09:86:d8:bc:46:0d:32:2d:79:10:76:
                    a7:39:0e:d7:97:9d:30:48:3d:63:75:73:bc:b1:2b:
                    ec:4f:35:08:0e:9b:d3:4e:d7:a7:11:f8:be:69:4c:
                    a8:4b:e2:ee:7d:7c:93:f0:19:51:4f:c4:cc:e6:ec:
                    63:8a:dd:ee:d8:0d:52:6c:0b:3e:f3:5f:9d:8c:80:
                    c0:b3:b4:26:d7:67:42:a7:17:5d:cc:83:0b:a4:c3:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DE:18:61:6E:67:C3:24:0D:E6:59:99:7E:45:6E:8B:09:9C:BA:84
            X509v3 Authority Key Identifier:
                keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2b:b7:cd:96:4c:42:1e:61:96:c7:08:c3:23:2b:d1:3b:99:
         62:bf:b3:a7:02:78:75:04:db:61:73:f9:5d:ac:58:87:55:64:
         fd:0c:db:a7:e6:5f:fe:5a:8b:4e:bb:2d:40:5f:8c:c5:8c:ee:
         dc:5b:00:99:5e:f2:19:71:1b:f1:c9:01:c7:06:74:ca:60:ff:
         b0:1e:cc:f9:3b:9d:2b:c4:1f:d7:50:80:cb:d9:08:7a:59:03:
         78:79:ef:4f:b5:6a:2f:eb:22:77:db:b2:b2:f9:c7:c2:a1:9c:
         cc:e5:76:a0:e4:29:be:52:ce:ae:a9:3f:e3:e4:39:28:1d:bf:
         be:2f:a2:90:de:d2:4c:26:d9:9a:63:5c:b5:03:a4:c5:83:97:
         e2:19:6f:78:29:13:fb:68:a7:b9:88:69:8f:01:36:69:03:46:
         a8:67:e6:4e:4d:e2:46:e2:ab:ed:27:8c:d0:75:ab:d5:7e:58:
         57:d4:ed:f3:2b:8c:fb:f3:7e:fd:dc:b4:9b:4b:a1:93:0a:0b:
         d1:08:58:44:09:c0:56:1b:58:48:79:36:13:30:1d:76:ae:0f:
         58:ed:62:98:f2:8f:e3:f8:ab:7c:3c:4a:bf:08:a4:15:d9:47:
         74:96:02:bf:85:c0:a6:19:15:5c:1d:11:96:c5:d7:d0:c8:f6:
         7a:dd:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:54 2026 by rpki-client