Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
File:                     OT6njk2TI25QcfuK_61B1iQmql0.mft (raw, json)
Hash identifier:          tgACsWV9bzmfqgEngpiuxNTa3D4U2pkevVwyaMCSXQM=
Subject key identifier:   D1:66:F3:3F:A6:A8:BB:F8:0C:B0:DB:75:C4:C3:5B:7E:B1:2F:CA:36
Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
Certificate issuer:       /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
Manifest number:          0106
Signing time:             Fri 17 Apr 2026 02:23:28 +0000
Manifest this update:     Fri 17 Apr 2026 02:23:28 +0000
Manifest next update:     Fri 24 Apr 2026 02:23:28 +0000
Files and hashes:         1: OT6njk2TI25QcfuK_61B1iQmql0.crl (hash: rjWA8/Hp1vcH0T68syCp7nSrC4Lip/9RtlJ5ZByAtNM=)
                          2: 3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (hash: wmWAheRVRUWaL+3QPLJN7sGparB+U18Ved7K/jnj6is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
        Validity
            Not Before: Apr 17 02:23:28 2026 GMT
            Not After : Apr 24 02:23:28 2026 GMT
        Subject: CN=69e199a0-0c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:95:09:18:23:f6:98:9f:6c:c1:c1:ac:2e:83:
                    09:4c:ab:c3:27:af:ab:de:0b:db:cf:39:35:a8:87:
                    53:e5:5b:f4:2f:6f:e0:5d:29:d3:8d:ca:37:60:3d:
                    b0:18:9a:9a:ff:0a:5c:f0:22:df:d6:47:c3:32:65:
                    b5:9d:53:06:f4:42:d7:fe:ed:c1:57:88:4b:2c:b3:
                    68:63:63:47:34:de:fd:8f:f4:87:5e:35:bb:5f:e1:
                    fd:34:8f:bf:17:f5:f6:c4:df:3d:15:d0:10:03:09:
                    df:fe:7e:b6:bf:40:08:29:08:5e:f7:7b:ed:5b:eb:
                    cb:d4:e7:9c:63:6a:d9:ac:ff:da:0b:38:41:c6:30:
                    44:c1:2b:a5:4a:80:5c:92:2d:25:cd:0a:4d:5f:5c:
                    84:53:97:58:5c:39:bf:5c:c0:d6:24:61:87:84:88:
                    a3:d8:1d:15:d2:eb:48:a8:88:e1:c2:90:68:2f:04:
                    42:e4:c6:08:f8:ea:a8:d8:45:e7:ca:dc:cb:52:2a:
                    49:ef:d1:33:e5:b1:7f:69:9e:de:b0:2b:c8:ce:a2:
                    c3:30:74:29:52:26:54:1d:ba:86:be:14:b2:2e:27:
                    6f:b0:51:aa:e3:8c:b1:01:a8:82:f4:cb:e2:fa:ab:
                    f9:66:16:be:26:ab:88:bd:9b:53:cb:50:32:c6:17:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:66:F3:3F:A6:A8:BB:F8:0C:B0:DB:75:C4:C3:5B:7E:B1:2F:CA:36
            X509v3 Authority Key Identifier:
                keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f6:fa:fe:2e:0c:2d:4f:46:b4:69:38:f0:e1:3d:38:b7:20:
         0c:e2:0e:7f:82:d6:46:a5:9c:eb:33:b4:0e:c7:80:4f:e2:12:
         33:89:7b:7e:b6:55:7c:f0:1d:07:69:c5:97:8b:14:46:5b:72:
         45:bd:3e:87:88:b2:36:df:15:c1:10:93:e5:52:ef:e3:b7:c5:
         30:02:54:e2:9a:c0:6d:1c:01:74:8a:d5:e8:24:b0:26:9c:7b:
         6b:80:3e:68:62:74:9c:b2:34:87:65:e5:2d:48:09:b0:6b:03:
         ef:c0:fb:e7:32:42:32:f1:1e:19:f5:30:b2:c2:e7:b0:fe:b3:
         90:f6:ba:fc:78:f9:9e:e3:d9:db:d7:70:b3:c1:34:09:f7:82:
         5c:ae:1e:43:fe:7c:6a:7d:d4:5a:c2:3f:d4:ca:e8:21:0d:3e:
         fb:3a:47:dd:18:ed:c8:38:6b:da:52:be:a1:f3:e7:81:d0:74:
         a6:52:45:4f:f2:79:d6:8d:69:18:54:6d:01:d9:f0:18:b1:70:
         40:ae:4e:05:40:cb:8f:62:11:ba:fd:73:e0:c6:e5:a3:1e:d0:
         52:df:e8:5c:e9:e0:db:15:ad:af:f5:50:f1:8b:8a:d3:59:19:
         d4:0e:11:e3:24:54:86:66:9d:cc:30:19:8a:a6:08:09:3e:23:
         e3:e1:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:48 2026 by rpki-client