Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
File:                     OWpdnmemeQypf7kxMEtE57CoIc8.mft (raw, json)
Hash identifier:          61xuIi89St1nIizdmm87gVp03Io0S/QaNue/w9fqb7w=
Subject key identifier:   03:DA:15:E1:F5:B7:9A:F8:D9:74:0A:43:3F:2F:82:8D:05:48:68:35
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Certificate issuer:       /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial:       098A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
Manifest number:          097C
Signing time:             Sat 18 Apr 2026 19:56:25 +0000
Manifest this update:     Sat 18 Apr 2026 19:56:25 +0000
Manifest next update:     Sat 25 Apr 2026 19:56:25 +0000
Files and hashes:         1: OWpdnmemeQypf7kxMEtE57CoIc8.crl (hash: WnaYmxF7NGlYhDx31ySVmu9rYqSeh/Oj6Wl9gSOgy1o=)
                          2: 442D6434B14411EAB852C134C4F9AE02.roa (hash: QBiEx/z4c5cHhrl64Oepa+eFGSvIU2xC33E8Shlw0tk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
                          rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 19:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442 (0x98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
        Validity
            Not Before: Apr 18 19:56:25 2026 GMT
            Not After : Apr 25 19:56:25 2026 GMT
        Subject: CN=69e3e1e9-6137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:f7:b3:d9:19:d4:33:9b:f3:8c:96:08:17:
                    69:8f:97:20:aa:e9:09:f8:c2:fb:60:11:47:90:af:
                    9c:24:cd:6f:b0:69:31:62:4a:39:c6:10:04:22:1f:
                    a4:55:90:43:e3:0d:79:1c:6e:d6:e1:79:38:13:5b:
                    68:81:7f:8c:46:45:8a:b8:11:e2:f5:3b:ea:54:15:
                    44:3c:80:20:3c:e5:9d:43:0b:0c:ad:8d:04:8c:a8:
                    f0:70:16:0f:e2:e7:19:6c:62:14:5a:62:cd:02:ab:
                    3c:29:a8:2d:f1:ce:97:fc:68:64:10:4e:46:80:95:
                    f3:2a:6b:ac:bc:4e:4f:16:d6:d4:64:d1:35:0a:c0:
                    a9:36:8d:3a:75:51:0b:27:20:ed:db:5f:c2:59:ab:
                    cb:67:ce:bc:37:a9:54:e3:f5:c9:02:bd:72:f3:03:
                    fd:9c:67:d2:04:d2:4d:04:38:9f:57:00:7d:c4:e8:
                    4e:9b:c2:7e:5f:00:1d:7b:aa:46:15:1c:14:ac:47:
                    6d:89:ad:e3:62:8f:1e:db:c7:57:f7:12:57:4c:aa:
                    6c:f5:e0:13:b9:e8:81:b4:4d:35:33:b0:e9:df:18:
                    60:8f:b0:cc:6b:6e:36:a4:32:cb:d9:51:60:f1:6c:
                    b2:96:c7:2e:aa:91:ff:26:63:1a:92:8d:63:b9:c0:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DA:15:E1:F5:B7:9A:F8:D9:74:0A:43:3F:2F:82:8D:05:48:68:35
            X509v3 Authority Key Identifier:
                keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0f:e5:ab:f0:ff:53:91:ba:09:3f:2b:ef:d9:e0:a7:cc:1b:
         6d:b0:9e:1e:04:bc:d9:a8:9b:59:2d:34:f0:5d:3c:ff:02:a9:
         95:eb:39:4b:fa:58:f7:64:c0:78:68:b6:8c:ce:60:e3:73:9c:
         98:3b:11:8b:b9:17:a3:49:9e:d1:3c:4d:58:45:48:c5:90:14:
         cc:22:65:09:63:85:b9:b0:c9:38:24:ae:ca:d6:fa:9e:c7:4b:
         c6:28:b1:c0:cd:21:6e:c4:4c:3d:2e:f6:96:94:7f:3b:b0:80:
         06:25:37:e7:71:b6:2f:7d:ad:7b:73:7d:2f:bd:0c:8b:28:df:
         f0:21:e1:6b:f5:c2:f2:e0:8c:0c:c7:75:cb:8e:59:ee:e3:df:
         4f:71:4a:36:0b:49:6d:f3:25:54:ae:b5:a3:39:a8:52:aa:51:
         a1:a5:3e:b8:37:b6:bb:d6:92:7e:05:72:3e:c9:ca:92:ec:87:
         14:d9:49:9b:e5:aa:f1:4c:16:14:18:07:ce:29:b9:45:00:27:
         6a:74:c6:ea:99:50:bf:3d:d1:86:7d:f8:a3:72:a1:48:dc:7a:
         d8:60:00:3f:c3:99:75:f0:8d:a5:3d:59:48:7d:4f:54:b7:d1:
         e6:81:95:b6:da:02:02:4e:d6:21:43:fa:e1:e9:51:81:a3:e8:
         45:25:7d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:40 2026 by rpki-client