Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
File:                     P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json)
Hash identifier:          PvTc2D7C0h/1ddD0wrAjzMs9LVymluV3kGadlVNQ5tA=
Subject key identifier:   9A:DD:5B:9C:AC:A6:D3:C8:31:C4:16:3B:9E:59:AD:35:C5:6C:D2:71
Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A
Certificate issuer:       /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
Manifest number:          015F
Signing time:             Sun 01 Mar 2026 06:03:13 +0000
Manifest this update:     Sun 01 Mar 2026 06:03:13 +0000
Manifest next update:     Sun 08 Mar 2026 06:03:13 +0000
Files and hashes:         1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: 3lRmy1XBCURQlbQIivF4bRZn8HtIW5ucX+gHHDm+RAs=)
                          2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: sT0cMmz3LwTY9msFrBTT0GIkbrL7Fs7LTvjg3aLQ9/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl
                          rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A
        Validity
            Not Before: Mar  1 06:03:13 2026 GMT
            Not After : Mar  8 06:03:13 2026 GMT
        Subject: CN=69a3d6a1-3a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:91:48:1b:04:bb:54:fe:ab:46:b2:47:4e:
                    47:78:1e:93:d6:a8:6b:0f:f3:70:29:a6:48:72:4e:
                    bf:56:bd:b0:42:e4:59:b1:0e:14:7a:60:45:bb:f6:
                    98:1f:6e:e6:04:89:01:ff:3d:65:dc:e8:45:4a:78:
                    1b:23:37:e1:26:44:85:38:ea:82:3d:76:8e:08:db:
                    68:31:24:9e:08:a5:d0:32:9f:a2:be:e2:de:95:b5:
                    57:11:40:37:37:ad:68:9a:a3:27:b0:51:de:df:ca:
                    fd:8f:88:25:9a:d7:99:a0:c7:f4:3e:10:4e:32:7a:
                    35:e0:ad:3d:b9:73:dc:9b:0f:e5:01:00:1d:21:55:
                    8c:19:14:64:1b:72:34:ed:c7:9c:58:10:02:8b:75:
                    e9:12:78:b4:59:5e:88:fc:a2:c3:ab:af:33:b0:41:
                    f7:de:11:05:c8:d7:a9:d3:5a:20:7c:e1:14:88:fe:
                    d2:2d:dc:24:66:c7:d7:55:ac:b7:f6:f6:f4:a6:24:
                    ed:a5:0c:6c:64:82:4b:7d:a1:72:de:bf:4e:27:5c:
                    d1:a9:59:fd:8d:a2:1a:25:83:96:80:02:20:b3:c1:
                    dc:a7:dd:ce:dd:72:4d:e5:6a:66:b1:fd:91:0a:e0:
                    50:fb:dc:d3:d3:cd:65:10:be:24:03:c9:26:af:cb:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DD:5B:9C:AC:A6:D3:C8:31:C4:16:3B:9E:59:AD:35:C5:6C:D2:71
            X509v3 Authority Key Identifier:
                keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:07:43:c0:f8:a2:5e:98:0f:ce:7f:81:60:1f:93:8d:f1:57:
         05:fc:6f:bd:08:5d:b5:48:7a:16:d8:f2:d4:ea:78:51:b8:86:
         c0:a2:2a:29:8d:b2:b1:9d:4f:4a:2c:b1:08:fb:39:cd:b1:0e:
         1b:07:fd:aa:c8:92:d9:fc:37:94:f8:00:ef:3f:2f:1c:41:40:
         c0:be:f0:70:43:d2:cb:78:1d:65:3d:85:e5:9b:45:c0:26:64:
         3b:fc:fd:ed:91:5e:48:af:bb:4b:46:fd:a4:04:b8:4d:91:ad:
         1d:3d:fd:0f:14:b0:90:9d:48:c2:e1:5a:04:7c:77:50:6e:41:
         5f:7c:af:f2:6e:85:4a:e5:3c:31:de:01:a6:36:9e:96:d2:8e:
         d4:5b:49:87:86:0c:8e:eb:ed:a4:d6:df:3e:a6:ce:2b:8d:b9:
         4c:ea:9d:d3:51:3a:87:aa:d9:04:38:f9:8f:69:81:5b:e8:48:
         f2:33:92:92:97:56:86:7a:4f:cc:0d:10:20:7f:8f:83:f1:c2:
         0d:1e:2d:61:45:68:14:ee:76:ab:96:ac:8f:44:21:07:f9:71:
         9e:a8:2a:70:63:20:3b:9d:17:4c:ff:2c:1c:49:86:f6:0c:3d:
         70:0d:68:f5:aa:ae:9b:eb:a5:50:f8:29:85:bc:aa:40:b6:b5:
         54:88:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:52 2026 by rpki-client