Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
File:                     oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json)
Hash identifier:          nCnfE8WAfHzFYhfz8U9C/IjEpTNYQbwvvwQiKW8Cz9Y=
Subject key identifier:   AC:78:C5:32:A7:EF:7F:3B:5D:B8:F1:EA:C6:73:E3:F7:C2:D3:E4:4B
Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8
Certificate issuer:       /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8
Certificate serial:       0902
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
Manifest number:          08F4
Signing time:             Thu 16 Apr 2026 20:14:49 +0000
Manifest this update:     Thu 16 Apr 2026 20:14:48 +0000
Manifest next update:     Thu 23 Apr 2026 20:14:48 +0000
Files and hashes:         1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: qnjjyetxgsDIsLiGjC3g+buw9jWbvce1GkTdlt5Ct8o=)
                          2: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: 98ZkktjEG5UcpZ+62L+FMtyVbWw3U+wo66D3y1LVDbc=)
                          3: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: LBI8hg+mFJHVQGhzgV+/ZIEdKoubXQfOtyPv3gGNmjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl
                          rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2306 (0x902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A093A, serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8
        Validity
            Not Before: Apr 16 20:14:48 2026 GMT
            Not After : Apr 23 20:14:48 2026 GMT
        Subject: CN=69e14339-a748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:cb:c1:52:ac:50:27:0e:a9:9a:ae:10:f0:
                    e8:0b:b5:fe:f7:b3:32:ac:51:78:26:f4:99:95:11:
                    06:a3:97:03:8d:4e:11:bd:21:c9:16:4c:f5:4f:a1:
                    39:64:d3:01:ea:e9:d0:39:f0:ef:e3:80:90:86:9e:
                    9c:67:fe:17:9f:2c:28:c4:25:3b:b1:58:02:63:eb:
                    4c:4d:16:02:ee:13:ea:fa:7f:0f:57:b1:22:91:64:
                    59:95:fa:a2:b5:01:1a:4d:f5:40:3a:17:4a:26:48:
                    bd:25:82:bf:99:ef:db:df:de:8e:23:38:0e:39:74:
                    7c:5f:09:42:fd:23:38:fd:35:01:fa:f1:c5:87:ba:
                    3f:3a:35:96:47:19:77:e9:94:de:45:35:13:6b:ef:
                    88:83:06:d4:f2:7c:dc:db:8e:89:38:48:df:47:a4:
                    2e:ec:12:2b:60:b8:9c:91:67:44:68:f6:50:4a:e6:
                    bf:b9:03:35:29:23:41:fe:e5:46:4a:cc:1c:86:37:
                    bf:7f:87:f9:b9:6c:e1:2e:a7:ef:26:ff:da:68:61:
                    65:19:25:a8:21:b5:8f:90:b3:d1:be:49:0d:7f:3f:
                    1c:02:85:e1:9d:db:9e:51:31:43:63:86:f3:db:ce:
                    86:9d:de:a1:41:b7:61:a8:5f:79:b3:e3:61:3d:6e:
                    ab:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:C5:32:A7:EF:7F:3B:5D:B8:F1:EA:C6:73:E3:F7:C2:D3:E4:4B
            X509v3 Authority Key Identifier:
                keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:73:6a:99:59:79:8b:19:a7:d5:a6:a9:48:ce:13:2c:bf:
         fb:fb:33:dc:a8:f6:cb:65:22:cd:99:7a:9c:a7:13:b1:84:b6:
         4a:c9:0f:6d:53:0d:8d:7a:00:6a:a8:5a:31:c1:55:c8:92:2f:
         19:c0:ef:bd:1b:51:ec:bf:9a:9b:39:eb:d5:03:f6:d8:76:f1:
         83:74:26:63:8e:c7:2f:dc:ec:75:02:99:50:11:3f:c8:a1:5a:
         80:50:19:57:81:02:eb:d3:fa:79:7e:27:b8:6a:93:4a:2e:67:
         76:bb:43:b5:95:9f:14:b1:06:79:bd:fb:ce:09:61:74:cd:9d:
         86:bc:f1:12:4f:97:36:c0:9f:8f:04:2a:72:3f:51:26:52:86:
         f0:37:99:1a:4f:54:24:a2:9a:6d:f8:eb:81:be:2d:5f:02:22:
         df:2d:ff:1e:72:41:0f:b0:d3:4b:73:6a:8e:5b:6a:7a:9e:57:
         77:7d:2d:1b:9b:20:e0:04:d9:ed:12:ce:16:9e:0a:fd:44:f8:
         57:8a:df:6c:3d:82:1b:16:7f:67:ea:3f:76:da:6f:d9:2c:cd:
         db:90:f6:47:a1:75:c3:64:25:62:16:0e:e0:37:22:b4:bd:3e:
         c5:b3:77:ef:ca:23:6a:42:3a:2b:d8:25:6e:d4:fa:76:92:a3:
         ec:67:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:43 2026 by rpki-client