Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File:                     oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier:          bj/3xwKsPe/m244JjH3i+0jXVg/43JWwsPRiWf9Hn24=
Subject key identifier:   15:6E:97:6A:A8:0F:13:9D:D6:24:B5:D6:C7:9D:39:18:D7:F8:46:50
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer:       /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number:          01C2
Signing time:             Sun 01 Mar 2026 23:39:34 +0000
Manifest this update:     Sun 01 Mar 2026 23:39:32 +0000
Manifest next update:     Sun 08 Mar 2026 23:39:32 +0000
Files and hashes:         1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: suighjh7kpZijHI0uUJ+A6Nn5H/w3nQZg+Wbsr+SyrQ=)
                          2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
                          rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
        Validity
            Not Before: Mar  1 23:39:32 2026 GMT
            Not After : Mar  8 23:39:32 2026 GMT
        Subject: CN=69a4ce35-f663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:40:b2:8f:22:6e:f3:25:c3:7c:1d:f8:35:
                    ec:99:69:dd:4f:77:2b:41:ce:36:98:2c:9f:73:85:
                    45:d7:ee:d4:56:32:17:a9:6e:1d:30:72:87:9d:7b:
                    b6:b3:65:40:74:58:10:2d:02:04:8b:ba:49:b4:54:
                    df:0c:a1:ad:4b:a0:89:a0:fd:7f:4a:c1:d4:3a:e0:
                    6e:35:06:16:61:62:c5:a2:f8:e7:57:33:b6:6f:37:
                    ca:6e:69:f0:6c:69:47:be:af:18:c1:f7:cd:ce:f1:
                    13:d9:30:02:e9:47:7d:52:45:e5:a5:0e:03:75:ff:
                    48:b5:5a:c2:d8:19:e7:31:c1:be:29:c6:eb:1a:24:
                    29:73:4a:aa:e8:6d:88:56:4b:8b:ad:5c:c5:72:1e:
                    ba:93:33:62:a3:d3:66:ee:63:b2:80:14:b9:eb:ef:
                    c4:a8:b6:60:0e:a9:ee:34:7b:38:81:8c:6a:5b:6e:
                    b3:df:1f:94:4b:50:b9:1f:47:31:fe:2d:f0:cc:41:
                    54:18:3d:c3:77:89:e3:6b:b8:35:be:70:f3:58:91:
                    26:f5:22:f8:ec:c4:27:f5:bb:ae:9f:62:89:e1:21:
                    9b:31:0d:aa:e2:ec:ee:d4:30:bf:aa:3f:0b:91:29:
                    b9:ca:07:0c:26:83:a7:b3:f4:17:15:67:99:49:eb:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6E:97:6A:A8:0F:13:9D:D6:24:B5:D6:C7:9D:39:18:D7:F8:46:50
            X509v3 Authority Key Identifier:
                keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:0c:55:8e:39:36:5a:30:1b:db:55:cf:dd:ee:e9:4f:52:
         0c:35:e2:02:79:60:3a:e0:4e:96:d9:c0:12:b0:02:cf:2f:71:
         92:49:b9:ed:4d:35:41:c9:73:ac:c9:d4:f4:0a:95:23:5f:7b:
         59:66:0f:f6:fe:4d:7a:bb:97:cf:32:3b:af:18:2d:9c:0b:3e:
         91:97:1f:ee:41:21:10:62:da:2e:92:b9:d9:94:8f:22:77:11:
         32:03:a6:2b:c8:94:c1:f1:95:7e:fb:21:e3:61:f6:b3:e0:31:
         2e:44:ed:e1:ba:7c:b8:d3:52:c5:58:47:d1:c3:d3:f6:4c:50:
         65:fa:ad:0e:88:f2:f2:5d:1b:3e:d9:86:9e:d9:ae:8f:f0:7c:
         e7:57:82:e5:5b:df:38:74:5c:97:e6:a0:c2:7d:90:ff:97:ca:
         4e:08:de:93:45:57:53:7f:8d:cb:3f:d5:1f:d7:b9:f6:e7:91:
         9e:70:76:04:15:6c:3b:36:50:e3:80:3b:23:cd:07:6f:32:e3:
         05:5d:a0:b8:50:5e:c5:ee:aa:6f:1c:78:5c:e2:86:61:d1:f5:
         67:25:7a:ac:91:86:d6:d5:89:02:ff:17:f1:be:5d:91:4d:10:
         74:c9:97:b5:c4:3d:55:3f:b1:14:67:58:fe:7b:82:29:3b:fd:
         b4:53:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:26 2026 by rpki-client