Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
File:                     o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json)
Hash identifier:          6jco3Dkh1bYhbCo7IZYBUtlsrCwPgy6EI650pjswcog=
Subject key identifier:   94:E8:20:0B:59:2F:C0:4D:35:00:24:3C:35:33:9B:D3:F0:13:F2:23
Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65
Certificate issuer:       /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
Manifest number:          0163
Signing time:             Sun 01 Mar 2026 05:58:27 +0000
Manifest this update:     Sun 01 Mar 2026 05:58:27 +0000
Manifest next update:     Sun 08 Mar 2026 05:58:27 +0000
Files and hashes:         1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: 9R00+f7q2eTQH1RzIr8PJqEx+xJL5ljEJmYrolnQqfM=)
                          2: 4A9AD51270F811F0BA070F34C4F9AE02.roa (hash: GfIBo0sJeXzYPko1KN4K0PA1n9E0Kyw46Z51n+s1ljE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl
                          rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
        Validity
            Not Before: Mar  1 05:58:27 2026 GMT
            Not After : Mar  8 05:58:27 2026 GMT
        Subject: CN=69a3d583-6240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:03:93:2a:f5:be:f2:04:99:4b:56:2c:3e:
                    a2:97:03:e8:fd:c3:6d:75:eb:9c:1d:6a:2c:8b:a6:
                    27:f1:2f:4a:b9:47:79:61:98:7c:c6:e8:3d:eb:03:
                    5b:90:e6:3d:6f:ac:bd:e5:da:b8:a8:30:b5:41:b1:
                    38:1c:08:1a:9a:e0:e6:7b:94:f1:cc:ee:8d:92:6b:
                    fe:91:dd:6d:5f:09:e6:1d:eb:8e:29:8c:35:55:23:
                    03:e7:c6:89:40:8a:83:42:ab:f5:ac:1d:5f:f7:c2:
                    3b:eb:2c:8c:d7:40:64:fe:87:bb:3f:cb:74:af:b0:
                    7e:49:85:bb:c9:e1:4e:58:52:ae:47:30:92:88:71:
                    81:4c:84:00:dd:5f:a5:57:ad:d9:bd:95:d0:ea:50:
                    3f:0d:54:9b:d7:fc:0c:95:48:b3:d2:d1:f0:c1:02:
                    47:08:06:30:2a:2a:4d:bf:5c:0a:cc:27:0d:5a:02:
                    b9:8a:df:39:90:1f:71:62:46:e7:b1:5b:11:13:00:
                    d7:44:e8:dc:ab:a7:29:9b:41:11:67:ed:b0:00:2c:
                    cd:fc:fc:46:95:e9:7a:c1:0b:1f:d4:cd:b3:ca:cf:
                    f9:46:73:1d:5a:dc:6d:c4:9f:e5:b9:f2:8f:d4:5b:
                    17:40:3e:41:21:71:e2:18:05:a3:50:89:79:01:7e:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:20:0B:59:2F:C0:4D:35:00:24:3C:35:33:9B:D3:F0:13:F2:23
            X509v3 Authority Key Identifier:
                keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:31:84:03:c9:4d:6b:dc:91:a5:39:88:d8:74:fb:61:58:9a:
         fa:b0:05:a3:b9:3e:81:a8:3b:44:65:c6:1a:8b:fe:64:1a:55:
         c9:bb:77:7e:2b:db:27:9e:41:cb:ee:f4:0b:5d:c5:68:0a:a2:
         07:c1:aa:e3:f9:68:40:47:d7:7f:b0:29:0e:b8:a2:07:d6:72:
         10:73:51:0f:b3:e7:1f:66:a5:49:ad:77:05:17:05:9a:f5:f3:
         3c:d4:03:69:c7:e9:4f:12:65:34:a6:42:65:c4:6d:ef:18:5b:
         07:2e:df:e5:c7:7b:ca:1c:1d:80:e7:62:30:87:d8:bd:0c:0c:
         73:d1:0d:45:a9:a6:4e:7a:a2:ea:8c:01:a0:ef:dd:78:98:d1:
         5d:88:6e:06:94:d6:f4:17:eb:5d:e2:b4:10:da:19:54:28:2e:
         f4:58:2e:2a:28:ac:b4:27:a3:f4:53:8b:df:59:ba:8c:42:77:
         6d:91:66:0f:ba:ac:eb:be:ad:1e:fa:67:d4:a0:89:78:8e:9c:
         c0:e6:6b:aa:22:72:c1:92:5e:c7:e6:78:fd:da:d8:9d:62:0e:
         c6:d9:60:b4:24:d4:f9:d1:20:7d:09:34:73:61:8b:89:6a:b0:
         7a:f9:c2:32:2d:44:96:1d:fb:8a:61:4f:d6:7e:71:df:81:59:
         43:ed:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:35 2026 by rpki-client