Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
File:                     -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json)
Hash identifier:          dIfQHLntKmS78iscdEKPi/q+qBFXJNzS1OvDWtMfQTc=
Subject key identifier:   0A:7B:FC:BF:07:D4:9B:C4:E9:43:EB:DB:14:56:11:F5:74:DC:A6:58
Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
Certificate issuer:       /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Certificate serial:       12F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
Manifest number:          12D8
Signing time:             Thu 16 Apr 2026 16:59:07 +0000
Manifest this update:     Thu 16 Apr 2026 16:59:07 +0000
Manifest next update:     Thu 23 Apr 2026 16:59:07 +0000
Files and hashes:         1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: emRqAT153Wcex6cu3KFX6jh4nKmkHd6EUdc8Nt26V3U=)
                          2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: ENmiPhNmvPrhbRyvAeBKsSY9zQmQ1uUazbQzc4bFAXc=)
                          3: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: h19/MR9hkMVPGpl7f/+5Vxrt7msI3muNoOIhYt+wOkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
                          rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4853 (0x12f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
        Validity
            Not Before: Apr 16 16:59:07 2026 GMT
            Not After : Apr 23 16:59:07 2026 GMT
        Subject: CN=69e1155b-f49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:29:ed:46:9e:fb:3c:6f:61:75:ee:47:65:4f:
                    3a:a1:1e:2b:9a:c8:1a:e6:6f:40:43:07:87:ff:37:
                    5a:2f:b9:f3:52:ef:78:ea:40:6d:06:fa:9e:2e:a8:
                    60:c4:2c:c5:a1:19:73:f2:11:08:16:5c:c2:cb:f4:
                    4c:e3:6c:a5:4a:dc:09:ed:9d:6b:24:d0:24:29:2a:
                    4c:8c:9d:96:86:33:84:6b:e1:96:88:b0:41:7e:d9:
                    ca:fd:9a:1e:06:0e:f3:96:68:65:d0:ad:97:ef:7d:
                    2d:fa:c6:ab:25:87:fe:26:08:b0:88:ac:9b:06:2f:
                    5f:bb:8b:ac:f5:b4:5c:76:34:50:76:df:90:45:ca:
                    fb:16:fa:df:0b:f7:44:c0:ec:be:26:ec:3e:b3:ed:
                    1e:0a:fa:87:54:5a:a8:57:7c:e1:73:b2:c8:f7:cf:
                    9b:bf:12:d6:1e:d7:d2:6a:1a:16:c8:3a:be:1e:54:
                    f8:1c:9d:30:9b:18:1d:ee:a1:fc:e7:26:93:2f:82:
                    59:25:c4:57:eb:62:30:3e:6d:09:66:3e:42:2c:4e:
                    50:6c:29:92:be:d0:31:28:ea:a5:c9:fc:f0:5f:d4:
                    40:de:4c:b5:d0:08:0d:af:f2:a8:c5:33:ca:d8:f1:
                    5b:e5:cf:16:00:4e:47:cf:9e:c0:00:97:a5:92:e8:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7B:FC:BF:07:D4:9B:C4:E9:43:EB:DB:14:56:11:F5:74:DC:A6:58
            X509v3 Authority Key Identifier:
                keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:94:96:bd:64:55:b1:21:50:89:db:98:d6:39:d0:0d:31:fa:
         01:4a:71:e1:b8:2e:93:8d:16:e2:20:e7:3c:df:af:64:65:a0:
         a7:fa:48:21:2e:f7:ad:a5:46:ec:94:9f:80:95:be:0c:5d:e7:
         b5:78:da:4d:22:88:9f:ff:38:08:1d:e0:cc:ff:24:6d:5c:d4:
         c6:e6:12:e0:25:ff:3c:55:9b:3b:53:ac:01:1e:10:b4:57:50:
         8a:42:14:38:49:2b:fc:cc:c4:7e:8e:c4:7b:47:f2:ea:12:83:
         f4:91:86:29:97:54:ef:35:55:de:7e:bd:55:c0:35:3b:b6:eb:
         7c:cf:56:ae:8e:41:60:59:4b:53:65:89:62:2c:8d:0f:06:18:
         d6:0e:4b:2f:a0:83:a5:48:47:c9:32:c2:3a:e4:7f:5f:cf:da:
         ee:d9:82:47:8c:50:12:a9:5e:c7:a1:38:01:7b:8f:88:23:6a:
         07:02:41:e7:12:42:9f:9d:8d:df:68:cd:6b:e2:5c:37:18:42:
         5e:48:09:ac:16:77:55:0f:f5:39:24:77:a9:e2:c9:2f:19:e8:
         90:54:b6:36:35:fd:58:d6:dc:cc:44:f8:c0:f4:b1:bb:4d:b6:
         29:d1:01:9c:ca:4b:b5:01:bb:88:a1:e2:32:26:5e:12:69:8d:
         08:b3:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:40:35 2026 by rpki-client