Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File:                     oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier:          8h4m7P5OhVbQiJV8n3qztcRpuD7+9dtTVpZD6CxFbAE=
Subject key identifier:   F3:5C:F9:BE:6D:B7:E2:52:78:22:11:F7:EE:EE:81:27:E6:5C:D8:55
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number:          0213
Signing time:             Mon 02 Mar 2026 11:38:22 +0000
Manifest this update:     Mon 02 Mar 2026 11:38:22 +0000
Manifest next update:     Mon 09 Mar 2026 11:38:22 +0000
Files and hashes:         1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: SwspZgjxCRpGwQyxViFTfmceCD0U8ECeJvdePvNNWHE=)
                          2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: k+dog8xYCDbvQISDCzANlp1URQHH5+0FGUiTGUQ/+MA=)
                          3: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: BYrT3gSpcFGf66F7OgOWFpwB6S9uu2bRl3KZJFEG7yU=)
                          4: 49FC44B0162A11F18FE9298B373D8C67.roa (hash: R7i2wINlOt7SeQns86jhCdT1p2Hh0s8++plJe6v+zKs=)
                          5: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: wUmrURd/1BjfBH6f7MyGfeZya3xCTYfDafUNIl+rKO0=)
                          6: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: h7BGEXdT8/fJrbtPEuzFrIHw8A3Ou1Gq593O22LjGdE=)
                          7: BA917E94D65F11F090E652930BB43E13.roa (hash: 4wRkQ2HciJJaW6c/wbWf1lLtY3RIHkE/fK+1Eii/r6E=)
                          8: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: Q8t2w5Bm1s2xc9u7zUHx3tOoqfxW1aDc4bjuc++C4OA=)
                          9: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: +F6+Kdo4UMUeEVd3rJTRenZVLka+775uqmL3KcaRYis=)
                          10: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: DTPQtprWS1asx+9dy98489mAliPdZ8NJ5NrMYvQZjdY=)
                          11: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: bTEfr6e3UYTJtEKaPYWG9RTqbYRlEbEpek9SXbZLbzk=)
                          12: FAC35354610611EFB6324A30C4F9AE02.roa (hash: MGWYl6jAGMEWuZAwwqj4daUxlHs2nlJcqeKspxAgpmM=)
                          13: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: RTqg2OCl0LqycU7qMptZ5Map6Fo5tJ4chjvgrZEsq9k=)
                          14: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: qsvf0Wviztrgpdzbp+Cc9P5Q6xcagz546uIcx9HEnws=)
                          15: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: dnF+y2zzWkZBb9zE5OkhyJUIlUqOH1249DrB3ACuXqc=)
                          16: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: HPRG3Br1Z7/8i0RZTaXdt0D3jVwVisBRSTFO73V9j6o=)
                          17: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: 2Q8RbjE4mHztepKARc4PS5hTmcTmIbeZgaFHVD5zDkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Mar  2 11:38:22 2026 GMT
            Not After : Mar  9 11:38:22 2026 GMT
        Subject: CN=69a576ae-53e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:4f:69:8b:74:e6:99:f8:a5:12:0c:fe:f8:
                    b3:79:c3:42:3c:f9:a6:ae:ff:ce:d1:fc:f4:ec:ab:
                    87:77:8f:54:6f:8f:94:45:97:2b:85:a4:25:23:43:
                    ef:e3:74:8f:2d:fa:c2:96:65:c3:c1:db:9e:3a:6f:
                    d5:b2:4b:fc:8a:53:d0:ec:e3:8c:26:50:f4:f3:5b:
                    8b:ba:89:4f:26:b8:bd:0c:cd:de:b5:80:ae:2b:f4:
                    cd:7f:e1:e6:09:b3:3b:a2:0f:23:25:3e:72:ef:72:
                    2d:5b:b7:8e:42:7d:eb:c9:ad:36:cd:16:03:47:13:
                    60:d7:7f:1e:2d:d7:c6:e6:0a:c7:8e:ba:3c:12:a8:
                    f0:ff:a5:e3:3f:c5:f2:07:c5:46:7c:c0:93:ab:0d:
                    42:d1:39:dd:c5:41:b6:d7:e6:39:e3:9b:85:4b:a4:
                    48:98:c3:9f:0b:bf:6f:7b:2a:6a:a2:b6:ae:f7:65:
                    21:67:b6:bf:18:37:2b:16:91:ec:98:57:da:66:f0:
                    3f:22:20:47:56:e7:d4:ca:09:90:1a:55:46:6c:f5:
                    42:1d:6f:4f:d5:b0:fa:68:52:49:e2:39:b1:9d:c4:
                    65:c2:74:77:94:6f:db:61:35:cb:72:be:2c:77:79:
                    80:85:54:d9:0b:08:6c:89:e4:6e:d1:b7:3f:75:5c:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5C:F9:BE:6D:B7:E2:52:78:22:11:F7:EE:EE:81:27:E6:5C:D8:55
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:d2:f8:5e:5a:4b:9e:c5:64:b7:67:dc:cb:a2:12:55:bb:
         a4:00:8d:d8:4e:cf:9c:a6:21:f0:e9:57:47:47:a0:3f:68:5f:
         0b:33:df:e8:a1:54:ac:8d:7d:2e:48:6e:5a:ce:e8:11:a8:b5:
         de:d1:f2:85:04:1e:6a:66:69:5b:dc:18:13:8b:8f:b1:a1:c7:
         7f:ca:16:18:53:b8:c3:0b:24:57:28:63:0f:03:e2:e9:0e:6b:
         64:8a:48:3e:a4:01:fa:30:36:ff:fa:0e:43:29:66:49:f2:4b:
         63:77:f7:26:f0:29:de:62:62:22:9f:65:7e:45:fb:02:31:8a:
         64:e7:ad:a1:06:2f:96:7f:81:06:42:83:98:8c:a4:bc:e9:92:
         6b:59:f1:21:f5:32:3e:fb:13:19:80:de:dc:85:2b:33:30:7f:
         4c:59:f0:f0:86:ae:fc:86:3b:8b:10:5a:f1:d9:1c:fb:86:92:
         53:7a:1a:1d:1f:c6:14:d6:2d:12:aa:50:3d:d3:c0:a0:a1:e2:
         1d:c7:ce:36:99:9c:b0:41:a9:e5:24:2e:3e:6d:c1:f1:95:30:
         7d:e9:ba:ea:9c:5a:7d:e1:2b:cd:65:86:59:91:cc:f1:b1:3d:
         7c:cd:96:77:8e:cc:d2:e9:f1:74:59:46:96:63:f2:fe:c0:1f:
         c7:b9:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:32 2026 by rpki-client