Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File:                     8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier:          HztI6F9PpzEQKwO0TjouBRU9yx6kcoYVZJgW4YzjjoE=
Subject key identifier:   00:CC:19:E4:85:17:2B:34:5D:C6:53:8F:7F:7F:A2:5A:B5:AA:D2:83
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer:       /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial:       0A11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number:          0A05
Signing time:             Thu 16 Apr 2026 19:45:10 +0000
Manifest this update:     Thu 16 Apr 2026 19:45:10 +0000
Manifest next update:     Thu 23 Apr 2026 19:45:10 +0000
Files and hashes:         1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: 9aqZwbn87kVDzGwIGyALBjYpVDmZ51RMYNAdk+RK2tQ=)
                          2: 81FC4E285E4211F086D4C383C4F9AE02.roa (hash: 09ch9+vd4QfEZEJO6GInYZKohO1LNoyU522s7mqfo0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
                          rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2577 (0xa11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
        Validity
            Not Before: Apr 16 19:45:10 2026 GMT
            Not After : Apr 23 19:45:10 2026 GMT
        Subject: CN=69e13c46-d118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:d9:39:7a:96:a6:a8:0f:eb:23:7a:1f:31:
                    6d:72:bc:dc:dc:16:65:37:96:a1:35:69:25:7e:88:
                    1f:34:c4:e5:59:85:39:b1:c5:f1:10:7f:08:70:b1:
                    c4:f1:a7:20:7d:7f:8e:c5:a3:31:fb:c2:c5:ea:ca:
                    ce:0c:a0:1c:56:5d:c3:07:9d:4a:a5:9d:a4:92:0c:
                    2e:3d:31:97:db:97:c0:4e:d9:bd:99:3b:46:54:3f:
                    0b:ab:d0:82:c6:6f:07:ce:cc:35:0c:ed:e2:bc:95:
                    35:c2:e8:39:72:a0:a1:1c:3a:95:86:ac:b2:fb:23:
                    de:46:7f:b7:b3:6f:83:ed:54:ae:ac:b2:a7:06:a4:
                    28:f7:20:a3:8e:12:d9:e2:44:7b:ab:b5:38:e7:7b:
                    55:94:0d:65:fc:44:e9:c8:13:4b:3c:b1:7c:ae:ac:
                    32:f5:7b:2d:76:d1:ed:1b:ec:50:0d:b6:85:15:e4:
                    2e:f1:bf:95:5a:49:0c:c3:8a:7d:d1:51:6d:fd:9c:
                    eb:89:a2:cc:1d:21:46:15:b6:fb:16:d1:f4:5a:33:
                    c4:ce:dc:ce:c6:3b:7a:14:c6:d4:4a:2d:6d:37:fd:
                    29:47:6d:ba:31:31:e2:97:24:9d:34:b0:45:a7:cd:
                    3a:93:9a:38:ee:bb:83:10:fd:c1:02:93:28:14:44:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CC:19:E4:85:17:2B:34:5D:C6:53:8F:7F:7F:A2:5A:B5:AA:D2:83
            X509v3 Authority Key Identifier:
                keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bc:c7:af:46:35:1f:7e:e1:4c:e1:ca:0b:58:69:ae:bf:2e:
         6c:bd:0c:ae:11:c8:d9:f1:73:82:2f:87:99:32:19:da:84:b1:
         0c:5c:13:7a:9d:7b:11:d2:d5:15:58:21:47:23:c0:9f:b1:d2:
         87:b5:3a:7b:33:3a:a6:a5:71:55:dc:76:f3:fc:b4:b5:58:b7:
         ca:09:24:20:4c:08:77:c2:5c:a6:6b:a8:ed:a2:72:70:76:f5:
         44:67:14:9b:7b:bf:de:e8:d6:a5:73:e5:8c:31:d9:a2:26:0e:
         e3:82:1b:e2:15:3c:fb:92:bd:c4:17:1e:74:3e:28:af:dd:94:
         3b:a8:9f:f3:81:8d:99:49:27:d7:18:6e:0f:b0:6c:74:7a:b1:
         12:e6:a4:b6:56:03:2a:17:4a:7c:13:e6:d6:75:7e:9b:a4:7b:
         13:eb:47:6d:88:39:2f:97:a3:04:63:9e:08:b0:05:8f:36:5a:
         dc:dd:3c:27:0a:52:a5:e3:28:db:85:e2:69:01:46:89:94:bc:
         bd:0c:a5:0c:07:2e:23:32:5a:f3:65:22:e7:e1:b1:4f:af:39:
         79:d5:8f:fc:76:75:8e:09:b6:e9:dd:1a:72:55:19:f2:8d:65:
         f3:37:c0:6f:db:70:7a:39:b7:89:c5:4e:cb:a1:c4:90:b2:47:
         cf:38:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:17 2026 by rpki-client