Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File:                     OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier:          URurT1XKwD5aaaOFxpsNqJMP6GXSSsSFiIeHl5zb0aA=
Subject key identifier:   4B:F5:91:6F:E4:64:75:B9:B4:90:46:79:A2:D2:B8:BE:B6:5E:ED:E7
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer:       /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number:          0162
Signing time:             Mon 02 Mar 2026 01:09:03 +0000
Manifest this update:     Mon 02 Mar 2026 01:09:00 +0000
Manifest next update:     Mon 09 Mar 2026 01:09:00 +0000
Files and hashes:         1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: CMmTugop0wE/ebf95Vrp/hPAJCtoUH0DBvv3XcOwt4g=)
                          2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: W7D/CE6bwRnzbpMvwdGdNhRCXEBo9prgW8s4Z6/gD9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
        Validity
            Not Before: Mar  2 01:09:00 2026 GMT
            Not After : Mar  9 01:09:00 2026 GMT
        Subject: CN=69a4e32f-9140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:af:5d:3e:36:30:a1:21:3e:85:97:7d:c2:
                    58:7d:26:fb:73:5f:b2:b5:eb:bd:92:d0:dd:03:85:
                    93:c7:44:17:fe:1c:c8:2f:76:51:70:d1:1a:99:48:
                    f1:22:5b:5f:3e:cb:da:87:e2:ac:7a:69:d7:73:19:
                    f1:dc:fb:54:53:bf:27:86:a8:cc:c0:22:04:85:1d:
                    e5:71:c4:23:8c:1d:2e:fe:5c:7f:b4:f4:13:c3:75:
                    97:6e:c9:8a:39:a8:0a:7a:13:7f:ac:3c:e2:6b:b0:
                    a4:70:2c:18:3e:68:92:ab:6b:d4:f2:a9:34:29:31:
                    b1:53:df:88:ec:cb:ce:a1:2b:eb:67:8b:48:b3:76:
                    2a:94:41:92:bc:53:09:0c:29:e0:31:e9:9e:84:ac:
                    40:bd:7a:30:b7:07:83:5f:dc:a4:f4:ba:3a:11:6a:
                    9a:53:b2:51:ed:ea:4a:6b:01:6b:7c:89:2d:96:e6:
                    81:5e:7e:77:3b:06:00:9a:8f:49:b1:e5:48:1e:00:
                    08:5f:76:4d:6c:1f:d9:a5:91:0d:6b:c2:ec:f5:87:
                    d0:9c:7d:3b:80:66:35:f0:dd:ec:40:f5:9c:38:c3:
                    a2:58:46:c1:2e:75:45:b0:7e:3f:6e:e3:a6:93:dd:
                    b8:de:ba:28:00:61:bb:11:82:1d:70:62:4f:a6:2a:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F5:91:6F:E4:64:75:B9:B4:90:46:79:A2:D2:B8:BE:B6:5E:ED:E7
            X509v3 Authority Key Identifier:
                keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:88:18:13:db:dd:32:77:23:9e:e7:94:77:b1:2c:14:5d:
         aa:1a:93:42:44:3f:d3:22:5c:25:97:55:88:b1:1c:55:df:fb:
         39:a5:68:28:5d:3d:2f:a3:85:5d:78:6b:31:0b:59:1c:69:66:
         9b:d5:dc:bf:a4:a2:96:fa:87:e6:46:5d:49:56:eb:fd:ce:58:
         0a:86:ce:e3:c9:97:fd:92:00:4b:37:84:18:b9:89:b5:c8:34:
         7b:ba:c0:7d:05:b7:ab:0d:5d:e6:a1:ca:21:77:64:60:c1:58:
         2b:e6:3b:df:59:d0:eb:4c:b4:67:13:8a:f0:10:f4:be:f5:30:
         e2:ea:e5:8c:17:8b:e6:c5:6b:5f:c1:03:e2:63:58:5f:4a:81:
         c4:40:d5:fd:8a:71:ae:17:75:a0:40:19:a8:ab:88:18:8a:0f:
         3b:6e:04:7f:dc:89:89:46:73:bf:14:10:d6:7d:86:56:8e:00:
         e6:42:81:b0:4e:d8:8b:f6:31:71:5a:ba:d0:39:1e:e3:d4:3c:
         74:40:e6:2f:7e:fe:b8:df:bf:29:01:02:ec:05:9c:39:05:00:
         ed:c0:50:6d:6f:9d:b2:35:cc:8e:99:28:e4:71:42:33:0b:9d:
         93:3e:37:19:c6:fe:9a:c4:be:4c:eb:ed:6f:1e:4a:a0:43:34:
         45:32:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:53 2026 by rpki-client