Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File:                     oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier:          0r8Shhk4i8+LUWrI/Hz8UufXhsMi2IWa2NQjPanGXGI=
Subject key identifier:   40:48:15:22:AD:F3:5A:6B:BD:34:40:CF:5F:D0:03:76:F2:5D:A3:F9
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer:       /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number:          8C
Signing time:             Sun 01 Mar 2026 22:25:46 +0000
Manifest this update:     Sun 01 Mar 2026 22:25:45 +0000
Manifest next update:     Sun 08 Mar 2026 22:25:45 +0000
Files and hashes:         1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: 448X2Ws71xieGNBuv3JMd16SGpSLnQeg+f/KwbjXNIU=)
                          2: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: M8odrWp11xwPayPr1xVWIoKWwAfvrI8IVkAjTpLwwzk=)
                          3: C24679DC741211F0808A8240C4F9AE02.roa (hash: mnmEShTfHHr8jkJu+tgWkb3qWqXauPwn9ZXxFrRpLlE=)
                          4: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: 2iUKMhz07cGysLco5d1V7oMpfZkixvqFHBDyH/7WAK4=)
                          5: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: V0mFWyb8wDT9djSAbQ4T53u6v/WrYdwA1bskEFmhhp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
        Validity
            Not Before: Mar  1 22:25:45 2026 GMT
            Not After : Mar  8 22:25:45 2026 GMT
        Subject: CN=69a4bcea-e629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:d1:cb:c7:9a:b6:62:64:ad:44:f5:7c:f1:
                    08:5a:0c:8a:d5:fe:b7:3e:7a:b0:86:af:68:2d:f3:
                    0d:71:dc:21:20:cd:39:90:d6:72:0d:a4:5d:01:2f:
                    90:61:c2:ce:c8:79:8f:08:f1:7c:67:70:ea:34:38:
                    56:ce:b0:b5:4e:9b:52:79:df:b7:1e:8e:31:a6:e3:
                    d3:2d:f8:8c:7a:90:3c:89:b8:a6:19:ab:94:11:de:
                    1b:ae:6d:b6:5e:31:d1:04:06:06:26:0a:ac:d6:b9:
                    d1:a4:78:06:4b:62:ab:c3:ff:b2:30:11:b8:77:d2:
                    c2:3a:f4:ad:42:b8:f1:12:ed:17:e1:19:75:dd:f0:
                    3e:43:85:cc:c5:d2:43:68:15:b4:d9:7a:54:45:c8:
                    75:87:d0:ba:0f:f6:67:44:6d:ac:a3:07:4c:f6:bf:
                    fb:9f:ec:77:05:e9:a4:a9:39:d3:52:da:0b:df:09:
                    08:fb:f9:0e:8b:16:3a:30:8d:10:f7:d6:ab:16:fe:
                    19:e7:e6:84:76:61:df:4e:57:b7:4d:d5:d6:45:ce:
                    72:f9:cf:19:71:1c:9c:91:8e:d8:33:3d:65:c4:56:
                    3c:e1:0e:84:6a:b8:be:1d:82:6a:cd:f1:7d:af:3a:
                    45:27:83:d8:36:4c:b1:87:1c:b1:8b:29:0e:b4:df:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:48:15:22:AD:F3:5A:6B:BD:34:40:CF:5F:D0:03:76:F2:5D:A3:F9
            X509v3 Authority Key Identifier:
                keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:63:f1:97:ec:1f:b0:e3:9c:c3:68:2c:2d:06:4a:80:1a:
         77:55:39:d2:14:22:e3:26:39:0d:91:0d:40:ef:84:7b:e4:b1:
         33:0c:e3:11:a0:a5:3e:de:ff:4c:bd:29:78:83:bb:ac:e6:c5:
         33:36:4a:b4:0e:3a:c7:3c:62:95:a5:d5:a7:47:12:cd:2d:b7:
         2c:88:f6:a2:0e:09:99:e7:41:ad:ca:2d:62:4e:6d:dd:de:bc:
         c1:c9:74:29:89:0e:b1:c5:76:03:cc:e2:20:fc:0f:ca:99:b4:
         e4:89:1f:5c:12:2c:29:e7:69:16:f3:a3:3d:00:95:ec:78:df:
         5b:69:ad:ba:d3:31:e7:fa:c7:78:5d:fe:23:50:38:e5:29:2a:
         f0:af:03:ab:e6:6d:17:aa:fa:e2:33:66:da:65:b7:be:c1:23:
         ca:25:fc:4a:1f:3c:a4:13:89:82:24:73:b4:3e:af:31:87:4c:
         a3:6c:8c:00:21:d4:98:22:0a:de:05:bc:c9:ff:e5:70:e7:32:
         d5:f7:b1:59:a4:c2:74:45:68:df:3d:16:b1:6b:50:65:44:f2:
         b2:18:d0:fd:4a:7e:e1:7a:f5:d8:e0:fb:91:3c:30:50:7b:e0:
         d6:f8:5f:87:02:bd:19:90:64:66:3a:60:f9:17:e7:3a:e4:63:
         4a:8d:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:02 2026 by rpki-client