Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          jg9gnHSwGH3LIQsTpPwKYzpoSJqw0LYzoWV95tz0BzI=
Subject key identifier:   97:BE:09:66:09:20:0D:94:07:02:C2:53:69:89:D7:25:31:FF:92:16
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1038
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0D59
Signing time:             Thu 16 Apr 2026 19:37:14 +0000
Manifest this update:     Thu 16 Apr 2026 19:37:13 +0000
Manifest next update:     Thu 23 Apr 2026 19:37:13 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: LN5ufNN7nqA1vfIL3eFukY7kGpdOID7ccaqrJasBlBc=)
                          2: D9419C8A39B911F1AC578A42AE833773.roa (hash: u0+vsuHh2tpscXLT4XmSu2xYWvHdbQ4hrrNQI4gBsL8=)
                          3: 65020FA2288011F1BBF58DB5A8833773.roa (hash: ZSdTfWuzS86WLzpkvNdiXv34xqzKQg41A9OfgH776Xc=)
                          4: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: vtYeDrgDVDYpydstxqGvKZDpQ+8m/h2qUkMiKDSPoy8=)
                          5: 0774AB26097511F1BFBC3642103D8C67.roa (hash: oaFE8k3gTxI2O5pWpYuOiN1BF0ZHPJb6jXRple8GvF0=)
                          6: 849E45A839B811F1B2456B00AE833773.roa (hash: rkGl/IChEpjbeZ5opw0yCmPuYzYLmWhbVDtR3KAapys=)
                          7: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: TEd4/aWDB1KLW6JK30VIuFWcMe+qda12gGy9MUlfqhE=)
                          8: 1BF6F174375D11F1989107E49E833773.roa (hash: H4nK09o1+82H4RngiTNEjazgOSGqKXL41P0ZFND+8js=)
                          9: F94772A2127711F18BE24F01353D8C67.roa (hash: Ia2OY00mHGLN5kewmPdoukAdUzDfyI0EliOAKlUSYq8=)
                          10: 6D2E74CE119511F18720E261383D8C67.roa (hash: ohbtR0bU4Nw5MTZqq0EScoDeeVXif9T0EFY44v6uECc=)
                          11: 9C1227FE164511F1992ACCC2403D8C67.roa (hash: B5QpT3KOJZjxftF1mEkAc77f38gbyfCcpBtAmGDEp3Q=)
                          12: 21C1E9C834ED11F1B3F8D4F794833773.roa (hash: XmEmU8xpSSRc2YK37j1T2ZZ21j9GH7+KqciCi6ag1jY=)
                          13: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: 24u4HBCO1KtwHfOL7e2RjvlMPalnF3UcOXpG6jE4G34=)
                          14: 1FFC18AC34ED11F1B3F8D4F794833773.roa (hash: DprVbdSlK6AE+WHK3J1hEBE2QlapEHkVAmTqFSXVgn0=)
                          15: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: z0LgFHba0FwF6fQrrQACVyXZeL4NTZdHGfqQ2uiux64=)
                          16: F85564DA127711F18BE24F01353D8C67.roa (hash: hCAu6pcHWUIMyWaWGyNp3NtigxEvvU3L+2b0LrIvarc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4152 (0x1038)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Apr 16 19:37:13 2026 GMT
            Not After : Apr 23 19:37:13 2026 GMT
        Subject: CN=69e13a6a-1f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:63:f6:63:d4:7c:88:b8:06:fe:e0:a1:e2:76:
                    10:cc:a9:16:72:32:39:4b:58:e2:16:3f:fd:21:ad:
                    47:cc:f7:4a:45:86:00:c5:df:ff:88:58:a7:48:19:
                    de:91:c0:86:e9:e9:7c:a1:69:73:62:ed:4b:36:55:
                    9f:18:92:52:3a:ac:48:0f:1d:5a:0a:9e:37:56:56:
                    51:71:5c:84:4b:c7:1c:74:f6:f0:70:a2:a3:bc:53:
                    59:87:94:14:33:49:0a:9e:58:b7:47:ab:e8:74:12:
                    9e:96:0e:e1:0e:0e:ff:14:af:d1:a5:0b:78:19:e0:
                    04:6e:7e:aa:6e:0f:53:91:7f:e2:3d:70:b6:74:79:
                    00:a2:57:55:18:c9:e4:89:14:65:16:e8:d7:75:af:
                    7d:86:ce:f5:18:b6:ca:24:51:e9:8a:6e:e4:7a:19:
                    96:0a:df:c8:d0:84:c4:db:6f:79:df:27:38:b0:3c:
                    b1:50:05:3f:72:20:e3:3a:74:09:4c:bd:b5:3a:bc:
                    40:4e:d8:47:6d:3b:f8:b1:42:6c:f1:e0:50:2c:3a:
                    46:f6:b0:3b:82:e6:c5:a0:9a:d9:40:be:a0:df:26:
                    c3:e7:72:04:e8:bb:b9:18:64:ba:9e:c7:6d:d3:e9:
                    b5:2a:58:39:14:08:48:25:59:d5:26:8f:4f:2b:24:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:09:66:09:20:0D:94:07:02:C2:53:69:89:D7:25:31:FF:92:16
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:05:46:02:81:9e:13:13:ee:c7:f8:2e:31:e6:25:80:c7:ac:
         9f:90:90:a3:ed:0a:a8:70:6e:fa:90:ec:be:32:43:15:98:f2:
         49:9e:7e:e6:6d:c8:39:62:3f:a9:1b:96:25:01:25:7c:a2:10:
         6a:2c:be:8e:dd:41:f4:45:7f:8c:c4:6a:94:d0:18:fa:08:c4:
         bb:f7:4e:c2:09:e1:31:33:f5:cf:06:85:57:1d:1d:c4:ee:ec:
         a7:c2:d8:99:a8:be:c2:11:53:cd:f9:fd:60:38:1f:b1:87:55:
         9e:dd:65:66:51:5d:9a:d4:64:80:03:e6:d3:45:bf:ff:7f:a4:
         b2:23:db:a3:3a:18:c6:be:2e:8f:16:fb:d5:62:b7:20:f4:95:
         5e:f5:9c:2f:ff:00:f8:fb:65:f6:83:0e:ad:11:bf:b8:2b:55:
         ca:79:f7:53:2d:d7:e5:7c:cf:77:16:92:fd:b2:b5:f7:66:5d:
         d0:21:fd:03:e5:18:e7:39:f6:27:a0:34:05:e2:66:d2:05:24:
         2c:71:6d:87:31:13:86:cd:08:db:75:80:5e:72:73:d6:ea:a1:
         b1:6b:9a:59:38:56:66:b8:65:5b:81:b2:d1:f4:62:c9:91:11:
         e2:6c:4c:72:10:72:66:26:c1:52:e9:a2:9b:10:5c:73:06:40:
         18:77:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:42 2026 by rpki-client