Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File:                     O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier:          f/efWtFIX8eCcmNbGzAXQZdYtUFAY0pqUBnWRr5ybGk=
Subject key identifier:   06:63:05:83:3D:EF:4E:C3:D9:EC:69:93:99:9D:48:91:14:95:A1:00
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer:       /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial:       0354
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number:          034D
Signing time:             Fri 17 Apr 2026 00:52:16 +0000
Manifest this update:     Fri 17 Apr 2026 00:52:16 +0000
Manifest next update:     Fri 24 Apr 2026 00:52:16 +0000
Files and hashes:         1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: d+wvQE15u0vNdEYPHMNU1/mmbxmIZsAg8qR7mdZT2Fk=)
                          2: C78C216A070211EDB5178252C4F9AE02.roa (hash: W6FG+9qCV45ghc4JJDXwCJLeIEHXPGHuRL+5uDqENoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
                          rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
        Validity
            Not Before: Apr 17 00:52:16 2026 GMT
            Not After : Apr 24 00:52:16 2026 GMT
        Subject: CN=69e18440-3c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bb:05:34:a5:a1:48:58:03:47:75:26:52:05:
                    b6:1b:46:da:24:20:d7:15:33:21:e0:b1:f2:a1:1e:
                    b6:73:6b:fb:ff:3c:10:aa:87:f4:5f:89:28:b0:31:
                    8f:46:8a:e8:41:8d:ac:62:af:fc:3d:aa:80:92:1d:
                    80:c5:3b:28:8f:59:6c:e8:b8:c8:c2:30:45:a1:19:
                    51:ee:66:09:09:39:47:b6:4b:6d:78:5a:39:dc:53:
                    e7:df:01:3c:0d:1a:25:8a:d6:f1:2d:68:a0:d5:5a:
                    1e:fa:99:90:8c:e1:fc:e7:27:33:0b:fd:93:e5:5a:
                    86:96:8c:51:b6:bd:5f:4b:d1:47:c8:1d:66:46:ff:
                    da:4b:88:8f:0a:e2:5a:5f:18:96:20:29:14:dc:33:
                    96:58:89:8c:b2:50:7c:b1:25:aa:3e:14:91:1b:f1:
                    da:4a:b5:67:67:e8:a9:a7:92:d1:43:14:79:3c:1c:
                    96:67:73:4e:56:4e:cf:a0:33:a5:bc:45:ab:58:df:
                    f9:ec:56:d6:14:92:0d:be:29:fc:21:cc:c0:46:04:
                    53:46:5b:fe:23:6e:23:57:c6:6f:fb:02:14:52:c0:
                    22:a4:08:eb:26:a9:f2:77:0f:67:b3:25:f1:99:52:
                    fd:35:8e:92:59:65:44:00:20:13:73:8b:a9:0f:9c:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:63:05:83:3D:EF:4E:C3:D9:EC:69:93:99:9D:48:91:14:95:A1:00
            X509v3 Authority Key Identifier:
                keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:c5:f6:ef:e2:78:4f:f6:8e:69:a7:cc:8a:b6:24:eb:76:
         2e:8a:a0:cc:6d:38:9e:76:1b:4c:9e:ca:be:5f:36:2a:3b:a6:
         2c:bd:6e:ae:5f:b2:13:2f:a6:c2:9e:70:e5:4f:43:19:10:07:
         f2:00:39:05:58:a2:f5:53:f1:11:af:76:23:fe:72:67:42:2d:
         85:a5:73:7a:f0:2b:d6:c4:c9:31:87:a6:58:04:27:3d:66:32:
         da:a2:74:ba:3b:a5:d3:e4:2a:97:b6:be:88:20:c6:c6:66:30:
         36:3c:be:79:d6:6d:8c:2c:35:d9:23:dd:12:75:7e:5e:b4:7b:
         3e:59:48:17:85:50:b0:14:0b:f3:08:b2:29:38:43:6c:2d:ea:
         27:b4:8a:26:0f:2b:85:fc:02:35:e9:73:5d:ba:b0:43:f7:fe:
         e9:82:27:60:62:16:3a:18:69:06:99:68:7f:04:9f:fb:fd:0a:
         71:79:eb:0a:27:b9:00:6b:08:d7:a7:5e:b5:cc:e9:a8:2e:d7:
         72:b5:97:40:53:cc:0d:fa:c3:28:a4:77:52:ea:a0:f0:2f:03:
         61:65:1a:eb:f4:1d:f8:d0:bc:f1:a6:2a:8c:f3:43:b4:eb:fa:
         f3:cf:c1:90:0d:43:6d:57:b7:c0:04:ed:d7:ca:88:a4:6d:4d:
         74:67:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:40 2026 by rpki-client