Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
File:                     o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json)
Hash identifier:          PgEBVjF3lBKEWWLkFBCuXlVaUKNjJ1vKVsVSmAYTNV8=
Subject key identifier:   E0:BF:9E:23:1A:F0:28:27:B5:72:47:A3:40:12:B8:AF:A9:F0:A6:97
Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0
Certificate issuer:       /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0
Certificate serial:       0C6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
Manifest number:          0C63
Signing time:             Sat 28 Feb 2026 18:48:50 +0000
Manifest this update:     Sat 28 Feb 2026 18:48:50 +0000
Manifest next update:     Sat 07 Mar 2026 18:48:50 +0000
Files and hashes:         1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: JiDfWIP2fMZt9Omf+zsVgREOgERTbXbGsU/mZFUZhkQ=)
                          2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: A+90KeyYiY/n0OVnRGIE7w63u2Edpoh/2m4ASft1BBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl
                          rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3178 (0xc6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0
        Validity
            Not Before: Feb 28 18:48:50 2026 GMT
            Not After : Mar  7 18:48:50 2026 GMT
        Subject: CN=69a33892-a8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:23:60:d0:b4:b7:2a:0c:ca:57:6d:59:79:
                    22:5e:d4:66:4d:cc:2c:e9:7b:65:13:33:0a:b7:48:
                    29:87:38:fe:a8:3a:ed:45:ab:2a:d2:74:aa:49:48:
                    3f:4d:47:82:14:cc:e1:2d:1d:ec:ef:56:e5:e0:56:
                    4b:00:9b:c8:01:34:4c:6f:5c:f3:4e:be:44:eb:0b:
                    1c:69:d6:00:14:cd:7d:9c:e0:d3:08:e8:db:16:34:
                    4b:44:35:bf:31:cf:e9:ad:89:a4:47:cc:1d:69:46:
                    af:8e:5b:25:9a:b1:dc:58:cb:f6:b0:8f:5a:7a:e7:
                    b3:78:74:8d:28:9d:94:ef:73:58:d3:13:83:0c:01:
                    f7:02:bf:e3:9c:54:ec:a4:1d:3b:91:c3:3d:80:ce:
                    b1:23:01:6e:ec:78:a4:ec:03:9d:28:a1:5f:d8:e7:
                    20:b5:ee:2e:12:fa:2d:53:9b:38:43:fe:f3:e6:5f:
                    a7:a9:1a:a9:76:55:e5:2a:f8:15:fe:f1:6c:7b:af:
                    d6:98:52:80:36:50:03:35:02:90:5a:08:13:e6:05:
                    4e:87:b6:c7:ac:f0:64:3a:c5:66:65:3a:b5:ac:ef:
                    0f:a7:88:da:7b:b2:54:8a:ca:d7:e4:f7:cc:36:20:
                    52:c8:53:20:ab:08:93:22:70:12:da:01:77:0d:19:
                    63:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BF:9E:23:1A:F0:28:27:B5:72:47:A3:40:12:B8:AF:A9:F0:A6:97
            X509v3 Authority Key Identifier:
                keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:f6:3b:1b:ee:6c:e5:06:cd:3b:1f:95:2b:16:03:07:32:
         3d:8b:86:49:cd:16:5f:19:2a:c6:43:e3:c7:c6:ce:45:cc:41:
         78:1f:9d:97:29:77:fe:c1:4b:b2:75:f8:e9:87:58:fc:f4:a9:
         56:f6:27:fd:78:3d:15:6a:fb:e7:b8:46:d9:d5:51:f7:16:8c:
         1e:6e:30:58:8f:f6:a9:1e:7f:00:ea:1f:a7:66:ea:34:c0:1f:
         45:a0:07:e1:1c:72:8b:58:8c:6b:40:a5:dc:c9:a7:08:ad:5a:
         55:16:4a:24:44:74:05:e1:d4:22:22:7c:97:9d:66:df:1d:44:
         dc:a8:a2:90:1f:2d:20:8b:99:3f:fd:7c:0f:bb:82:54:30:10:
         eb:14:ab:90:fa:0e:04:f5:21:8c:23:60:40:6b:25:29:e4:a5:
         ab:d2:ee:0f:f8:a9:2f:cb:5f:1b:e4:65:65:f4:74:3e:cb:43:
         b3:ce:8a:8c:41:62:68:16:8c:63:f2:2c:76:09:b8:c4:45:ab:
         74:f8:d0:20:c6:cd:df:23:12:e7:02:5b:41:01:a5:9c:8f:1a:
         cd:a5:7a:8b:2b:77:37:b2:4d:8f:0d:e6:e3:85:03:26:17:94:
         9b:36:5f:a2:eb:a7:ec:84:d2:ff:9e:d6:94:5c:d4:a0:f4:00:
         63:1c:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:16 2026 by rpki-client