Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File:                     oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier:          uvszy9+sUKZgOAcz313v8Q38w3KL6QY64b2ZgizdKGU=
Subject key identifier:   A7:A6:CC:A1:E0:64:64:41:1E:0C:A8:33:80:C1:C7:3C:11:37:BE:6A
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer:       /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial:       0810
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number:          07F9
Signing time:             Thu 16 Apr 2026 21:09:32 +0000
Manifest this update:     Thu 16 Apr 2026 21:09:32 +0000
Manifest next update:     Thu 23 Apr 2026 21:09:32 +0000
Files and hashes:         1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: AUOJHmhCqLi9bTaCLaqqLZZccOl5x37d87MwiwxuFi0=)
                          2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
                          rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2064 (0x810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
        Validity
            Not Before: Apr 16 21:09:32 2026 GMT
            Not After : Apr 23 21:09:32 2026 GMT
        Subject: CN=69e1500c-d722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:e7:f2:d2:d6:a1:40:00:5f:00:23:4a:fd:
                    ac:62:d0:6d:c1:d0:76:bc:9c:f0:fe:f7:4b:c0:1b:
                    4b:39:47:83:3e:20:6e:c1:02:37:f9:14:6f:d9:51:
                    49:8f:0e:e8:25:f4:98:f0:51:04:f8:e0:d2:81:ae:
                    88:b5:a4:17:ac:18:58:7d:45:cb:b4:c7:91:1c:c0:
                    3e:ef:62:2b:d9:79:50:94:f7:8a:46:ea:92:3c:63:
                    fb:cf:13:a2:0c:65:c0:18:eb:3f:26:1b:b3:ce:5a:
                    a2:7f:8f:a7:4f:31:1a:6b:cf:74:30:a1:f9:54:2b:
                    48:4a:6a:01:bc:47:88:17:d0:89:66:1e:f0:8c:db:
                    33:f7:15:39:ef:b3:9b:b4:db:c5:57:e9:0a:fe:d2:
                    e0:33:75:9a:73:52:17:29:f9:22:3c:b0:7a:2c:b1:
                    ab:59:31:e1:29:70:b3:42:b6:45:5d:cc:26:72:1a:
                    76:e6:2c:e4:df:71:6f:c7:15:38:70:9d:79:c3:e4:
                    86:90:ae:27:a3:dc:e0:c0:d5:72:13:aa:78:dd:89:
                    0b:9b:a2:4f:a4:9c:96:c5:ec:97:52:ac:7e:63:cf:
                    90:5b:9f:dd:1f:17:c7:38:48:c1:ef:ea:a3:81:10:
                    24:6b:9d:db:cd:46:75:ff:87:c5:c7:94:92:27:6a:
                    bf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A6:CC:A1:E0:64:64:41:1E:0C:A8:33:80:C1:C7:3C:11:37:BE:6A
            X509v3 Authority Key Identifier:
                keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3c:93:db:65:ef:fc:90:af:6e:99:21:76:85:8b:0c:26:4d:
         34:4f:c2:13:cb:d6:1a:e4:2b:4d:21:90:99:f4:58:9f:ff:15:
         8e:77:14:d6:d0:6a:e2:a4:94:61:fa:d9:11:51:36:f5:80:91:
         06:53:1e:31:bb:6a:ee:3c:32:06:ef:e4:b5:29:7c:ad:af:d6:
         2e:fe:70:0c:00:ad:cb:2b:b5:fa:56:de:cc:a9:a4:3e:73:f2:
         a2:b0:a4:2a:64:35:f2:8f:d8:21:10:d7:57:d8:04:de:3a:c0:
         68:a4:d1:46:1b:20:ee:af:ec:33:37:6d:35:e7:2a:39:55:0e:
         67:cf:f1:26:32:5e:e2:c9:76:cb:10:b1:5e:15:49:1f:9a:31:
         91:ce:e5:ba:3e:5c:58:b8:ff:d5:68:4e:04:0c:7b:de:98:59:
         91:98:d5:7e:e4:96:dd:dc:a9:50:47:4d:96:69:5f:f3:4c:82:
         5a:ce:6f:b9:a3:e6:5f:39:a2:2a:7c:74:e7:82:a0:2d:2f:d6:
         12:8a:7c:80:a1:8b:65:3b:b8:76:f8:50:55:38:bb:e3:eb:8c:
         ba:af:ff:ac:93:e5:3d:2b:97:c6:af:e0:4c:ff:75:6a:78:9d:
         65:4f:6d:93:41:fd:b2:97:b8:ef:8f:74:67:76:23:4a:95:a0:
         4b:7a:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:12 2026 by rpki-client