Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft
File:                     OvnsvEXk4pfSm6bEEfGgXIudqeM.mft (raw, json)
Hash identifier:          hK6gQl72VygxJkE/AAjTq4zVB76cOI9yAuz83YxwFiw=
Subject key identifier:   FD:48:DB:43:8A:5E:81:2E:BE:EB:93:57:BF:2E:31:FC:33:A3:0C:1E
Authority key identifier: 3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3
Certificate issuer:       /CN=A919CA18/serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3
Certificate serial:       0256
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft
Manifest number:          0252
Signing time:             Sun 19 Apr 2026 02:02:53 +0000
Manifest this update:     Sun 19 Apr 2026 02:02:52 +0000
Manifest next update:     Sun 26 Apr 2026 02:02:52 +0000
Files and hashes:         1: OvnsvEXk4pfSm6bEEfGgXIudqeM.crl (hash: j5ov2lrMTDiavb0/El2koLG37MJbToVbpyz3eiEiODs=)
                          2: 82E99F5A10FC11EF95048154C4F9AE02.roa (hash: AXhLJomVJ63tE2qeqNBzn6juE7/Pg7GMaa4t59azamk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl
                          rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA18, serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3
        Validity
            Not Before: Apr 19 02:02:52 2026 GMT
            Not After : Apr 26 02:02:52 2026 GMT
        Subject: CN=69e437cd-4b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:0e:6b:85:ae:e5:64:6b:b7:22:6d:bc:cd:
                    80:2f:5f:27:1c:30:e2:ae:5d:d4:8a:d8:b0:f1:50:
                    f2:aa:12:db:85:4f:3b:21:dd:19:7a:88:84:de:17:
                    64:99:7e:55:d9:aa:01:54:1c:c2:0d:2a:f1:87:25:
                    c8:e6:b0:c8:57:72:01:12:66:a2:78:36:19:00:45:
                    af:e3:f5:ba:5e:42:fe:cd:2e:f0:fe:b7:f4:c3:99:
                    cc:69:a8:a5:ee:0b:9d:4c:a9:7c:79:d8:60:90:a7:
                    dc:5e:d5:a6:61:d4:52:d5:5d:b9:bb:89:ed:64:d3:
                    13:f3:a3:80:be:95:e6:c9:0a:9f:73:0f:26:48:bd:
                    e1:92:14:07:59:9f:55:38:fb:7f:bb:87:1b:8c:db:
                    21:0e:a2:e6:e0:06:b0:62:ad:d1:4f:fd:80:52:2c:
                    a0:81:0c:0b:2d:4b:e1:31:80:83:8b:01:1a:af:c9:
                    e6:fb:37:d7:82:74:83:aa:f3:cb:c4:cb:2e:8e:39:
                    d4:52:00:40:85:80:d5:db:84:df:91:05:ce:17:43:
                    da:26:4a:2d:af:41:6f:6e:db:dc:1a:47:86:75:87:
                    72:41:e1:e3:d3:94:6a:21:23:b8:56:1b:c2:9e:a0:
                    fd:97:3a:18:97:dc:5a:45:37:00:05:b2:00:46:8b:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:48:DB:43:8A:5E:81:2E:BE:EB:93:57:BF:2E:31:FC:33:A3:0C:1E
            X509v3 Authority Key Identifier:
                keyid:3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c2:28:a4:65:22:ba:da:0a:ee:12:b0:01:7e:16:d9:b3:a0:
         a0:47:67:e8:36:e0:60:21:f6:fd:8c:de:b3:02:03:63:fe:92:
         08:d7:3a:7e:55:85:8f:ed:fa:bc:a6:c5:c8:64:aa:e8:7a:22:
         66:f1:1a:25:6f:5d:ea:12:8e:56:f1:82:c4:95:b2:74:af:1e:
         f1:01:75:e5:86:6c:39:69:75:3f:8d:2f:3f:22:c5:88:e1:2e:
         e6:22:21:ab:53:ea:03:a6:42:46:3e:66:91:f6:35:68:3d:41:
         fb:63:49:7e:1f:c9:4e:15:b8:b5:46:54:9a:ee:19:28:6b:5a:
         cd:c7:12:8a:ed:a4:d9:14:4d:99:74:0e:a3:d9:8b:ba:1a:ba:
         68:f6:ab:c2:21:49:22:93:3c:dc:f1:f1:d4:2b:d8:72:e2:06:
         ed:c0:73:c1:75:7f:3c:43:4a:83:40:f3:76:60:dd:9f:a0:f2:
         03:6e:70:45:48:ab:83:64:18:27:57:bb:7c:34:c0:8c:5c:b7:
         76:82:1d:69:8f:6a:c7:69:12:fc:87:31:b4:2b:a2:5d:be:69:
         81:0d:f1:5d:d1:ab:6b:e7:8e:bf:c4:be:b6:25:d4:ee:3b:13:
         84:fb:d5:e2:5b:a1:72:80:22:b5:c4:88:4c:33:fe:25:0f:1f:
         b6:32:b2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:40 2026 by rpki-client