Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
File:                     oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json)
Hash identifier:          6/hMmYwaLeE9mKHRkNC7bfNKtO5H04+TMl1P2w6uZD4=
Subject key identifier:   87:65:5E:99:71:8D:CB:92:3D:1B:BB:64:D2:B4:81:9D:3D:C0:2A:66
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Certificate issuer:       /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial:       03C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
Manifest number:          03BC
Signing time:             Sun 01 Mar 2026 01:28:50 +0000
Manifest this update:     Sun 01 Mar 2026 01:28:50 +0000
Manifest next update:     Sun 08 Mar 2026 01:28:50 +0000
Files and hashes:         1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: W6Dc9GRDMJBQY4h9JkZSVEU5k9wseiTgF3ltVBSpHCw=)
                          2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: 4rLlw7arW1sP5IbnNCTRGWNEvfDKutT79yaN5ySnrBc=)
                          3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: dkZcQ/A932iJ1dN4/qgrPfW8ADl8k2VS3zXyLTEFE+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
                          rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
        Validity
            Not Before: Mar  1 01:28:50 2026 GMT
            Not After : Mar  8 01:28:50 2026 GMT
        Subject: CN=69a39652-cf46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:f2:18:87:1e:75:7c:b1:43:b9:79:13:ae:
                    86:89:c9:8e:14:c0:61:e1:9b:97:fd:d5:ec:36:1b:
                    b5:91:79:9a:53:c3:d9:db:a7:38:1d:ae:8b:35:e4:
                    92:51:1d:c0:41:14:f7:00:b7:a7:ed:11:82:ed:0e:
                    d2:fc:2d:5e:e3:d9:61:9b:26:db:96:a8:23:bb:11:
                    42:98:24:21:f1:24:31:48:f1:10:b2:cc:5c:94:38:
                    07:f5:8c:5e:db:63:0b:ce:ac:62:ef:11:5b:1f:72:
                    36:1c:23:22:73:d9:77:3c:c5:44:f2:d0:e0:14:21:
                    f4:b7:0c:7a:04:e0:34:06:76:bc:82:a3:f3:24:80:
                    76:26:a0:3f:ca:6d:95:d2:65:86:62:c9:40:de:f2:
                    15:7c:2c:96:f7:ef:66:8a:d4:9d:d7:cd:46:2e:de:
                    ae:d6:36:af:5c:e4:a4:e4:36:13:c4:cd:c4:cb:32:
                    a1:e8:fe:07:d6:a7:28:b8:82:6c:55:9f:ff:6c:04:
                    0d:18:10:7d:80:6e:8d:53:db:23:0a:92:51:99:30:
                    34:36:dd:4b:4f:01:5b:77:2f:dc:cd:60:18:38:3c:
                    dc:f7:d5:7c:bd:bb:fd:47:cd:b2:9c:1b:41:39:68:
                    4a:e8:56:15:e9:b2:68:51:4b:7a:a1:5a:fa:99:65:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:65:5E:99:71:8D:CB:92:3D:1B:BB:64:D2:B4:81:9D:3D:C0:2A:66
            X509v3 Authority Key Identifier:
                keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:56:54:d1:6f:18:2a:d5:ee:4f:9b:28:5a:f1:69:2f:40:9c:
         c8:63:27:81:95:72:f4:67:9c:42:7e:f2:63:b3:ff:27:7d:82:
         0a:7f:2a:ef:fd:30:d0:cf:2b:ef:41:1c:ff:7f:25:92:71:31:
         9a:22:2c:c7:7f:e6:4a:57:2a:0e:99:ea:48:2e:8d:85:cc:97:
         ca:93:43:bd:7f:8c:a2:00:74:4a:e5:0f:9c:ea:26:45:4d:27:
         27:5e:d3:8a:1a:b8:54:48:06:c4:f6:65:64:c3:2b:20:37:1c:
         8a:7f:6d:92:7f:f9:31:46:ab:b6:0f:71:6f:3d:e1:cf:08:eb:
         be:cb:0a:22:32:0e:99:98:9a:22:15:0f:99:0a:75:39:20:93:
         a3:b5:57:8f:81:86:2b:90:c4:c9:ba:21:66:40:af:7a:4d:da:
         fb:d1:bf:02:37:b0:43:3e:66:11:78:8f:a3:e5:7e:f8:3e:5a:
         9e:20:49:2b:32:c4:94:6a:98:00:58:e8:4b:7d:ef:b6:1e:55:
         97:f5:96:b8:50:54:94:27:af:6d:dc:c7:51:38:c1:ef:17:cc:
         ed:9a:53:0c:62:62:54:d0:aa:ae:23:11:bc:3e:89:47:f8:62:
         3b:6b:4a:7d:2e:52:6b:24:30:33:78:ed:d2:cb:86:0a:ce:8f:
         8e:a3:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:50 2026 by rpki-client