Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
File:                     OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json)
Hash identifier:          /8XnwO5ctU0YGBBfv4errQD5tm1qnN5DFRxrh49+vcM=
Subject key identifier:   53:8D:42:57:45:62:7E:38:BC:88:B8:08:32:00:59:83:17:9B:7E:06
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Certificate issuer:       /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial:       26CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
Manifest number:          26B6
Signing time:             Thu 16 Apr 2026 15:38:29 +0000
Manifest this update:     Thu 16 Apr 2026 15:38:29 +0000
Manifest next update:     Thu 23 Apr 2026 15:38:29 +0000
Files and hashes:         1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: Pv97qnWZC9xB+NwL2RYYrHKePTAuDnb370PimxQikOM=)
                          2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: zCSyGsYCYzFeYmRqymAlfv0PUooJcKVA3RkycjZyUFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
                          rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9930 (0x26ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
        Validity
            Not Before: Apr 16 15:38:29 2026 GMT
            Not After : Apr 23 15:38:29 2026 GMT
        Subject: CN=69e10275-f1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:5b:5d:28:f5:a9:c5:74:b4:39:80:9f:9d:
                    16:d8:02:6c:da:83:54:89:b0:3f:71:82:27:43:eb:
                    31:f3:d2:80:87:c0:0e:0f:84:08:3c:fc:1a:74:a8:
                    1e:68:fd:80:da:99:f0:bc:89:4f:27:fd:60:c6:f7:
                    57:f4:c0:c7:ff:29:8e:15:7e:20:f3:70:a1:b4:60:
                    9c:53:d8:2f:f4:4a:b1:8c:b0:02:c8:8d:fd:23:f5:
                    bd:70:44:b9:a4:0b:db:5d:c3:46:67:50:14:27:f7:
                    5c:54:56:56:79:96:73:2e:f0:96:13:b6:44:af:06:
                    59:ff:53:f8:19:e7:49:ea:89:a2:0d:0a:ca:42:55:
                    9b:a2:2d:ea:df:eb:b6:f3:dd:7d:b5:f0:7f:7f:1e:
                    61:12:58:37:88:dc:7d:9c:0a:ac:a0:da:cf:ff:09:
                    9e:b5:dd:27:97:85:02:09:f5:34:4c:6b:1a:ce:12:
                    cd:eb:36:dd:7b:02:41:c0:b7:19:59:ed:5d:eb:5d:
                    34:3d:89:95:27:07:8e:1f:1f:32:c3:9a:eb:a6:ec:
                    1a:bc:b4:0c:04:a4:3a:75:67:45:60:3d:b9:fa:eb:
                    96:20:5a:93:4e:29:08:0b:c2:7a:b9:ee:70:bb:29:
                    e5:8b:ff:24:f7:f9:52:6d:ff:14:81:b9:5a:18:b4:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8D:42:57:45:62:7E:38:BC:88:B8:08:32:00:59:83:17:9B:7E:06
            X509v3 Authority Key Identifier:
                keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:8a:5b:09:2a:62:5c:45:09:5d:8f:d8:25:20:55:d5:9d:
         b1:ca:4d:5e:a5:37:ff:77:47:de:fb:d0:86:57:eb:df:0a:77:
         64:df:13:6f:0f:f3:73:5b:63:ed:3b:5f:f8:6f:70:07:df:ee:
         91:67:47:8c:98:71:50:4b:12:e1:c1:95:c6:12:67:a5:69:86:
         bd:91:5e:d2:e7:37:d0:97:75:f9:8f:9a:48:89:5a:79:6c:07:
         99:a1:2b:a8:71:cf:8d:56:dd:50:f6:bd:b5:94:8c:50:0d:2b:
         8c:07:eb:eb:46:b3:6d:24:47:67:2b:eb:bd:13:b9:0c:63:45:
         bd:6f:22:f8:7f:8e:97:4a:52:3d:84:5e:35:70:c6:e0:1c:35:
         3c:17:e8:c1:63:a2:0c:70:81:17:e0:0f:53:60:b9:01:09:94:
         76:a3:fb:e3:4e:c0:17:9c:28:21:a2:8e:2d:b6:6a:9e:d2:fb:
         3f:8b:a1:64:98:08:c6:88:24:b9:b7:89:c6:10:93:da:17:b0:
         28:19:e8:f8:bf:41:78:99:be:6b:f2:42:c2:99:45:35:54:a6:
         9f:0b:b7:96:81:c7:e7:6e:6c:e9:12:89:de:70:8a:bc:8d:60:
         a9:3e:46:23:38:ee:a0:fe:16:1c:b1:54:70:76:7d:bc:bd:92:
         1d:f0:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:13 2026 by rpki-client