Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
File:                     OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json)
Hash identifier:          ToztNTuvh6HuOu4fOsGqIY/ki2vDnzzCXH9hEJ7GhIY=
Subject key identifier:   E8:68:E5:A3:56:F7:67:4A:8F:E6:48:10:D1:F2:03:C6:3F:16:D6:02
Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
Certificate issuer:       /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
Manifest number:          0236
Signing time:             Sun 01 Mar 2026 23:48:38 +0000
Manifest this update:     Sun 01 Mar 2026 23:48:37 +0000
Manifest next update:     Sun 08 Mar 2026 23:48:37 +0000
Files and hashes:         1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: hnN6TEteAsJCTIsgwrYg0TNEeWsym9EdaaVFpBe02Vk=)
                          2: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: i7fPg095F7w1Gp8Ev4N5gXFYKYbqtFZ/mtpgHv4F5ww=)
                          3: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: xhoAB8F3nbGTu7WfpGnVkOCBQJhj/jWvO8tM9P0b/FE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl
                          rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
        Validity
            Not Before: Mar  1 23:48:37 2026 GMT
            Not After : Mar  8 23:48:37 2026 GMT
        Subject: CN=69a4d056-7de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:eb:2c:ba:9a:42:4b:a8:a0:1b:5a:9d:ef:
                    35:1a:cf:99:18:03:8d:3e:e1:e4:e5:f1:df:5b:cc:
                    3c:4e:fc:1b:cf:96:9b:b4:8d:77:13:eb:8b:4e:a7:
                    91:52:2e:14:14:7c:2d:98:a7:57:02:a1:5b:a6:a3:
                    fc:ae:5e:52:f4:01:82:63:d7:51:b7:2f:68:62:85:
                    c3:5c:15:01:4b:3c:49:e1:6a:65:f5:bf:0d:c4:a8:
                    e7:eb:51:e4:d0:47:b7:9f:bf:09:f1:81:41:41:5d:
                    af:75:e3:5e:4e:81:79:5b:df:ed:6f:dc:9f:15:52:
                    1c:03:5b:4b:87:f9:7d:14:e9:cd:78:f5:57:ef:7e:
                    aa:fe:a3:79:ec:73:4a:4a:31:8f:16:ad:b1:bd:68:
                    33:24:7d:50:bc:2e:74:43:ee:9e:9d:95:47:6b:35:
                    c2:41:d4:c7:fe:97:ed:b8:03:98:91:fa:11:1e:9b:
                    da:2c:bd:bd:0f:72:98:3c:73:22:ec:6b:33:4e:25:
                    61:33:38:07:2b:f2:e5:3f:fb:cb:2b:83:32:7a:53:
                    0a:58:82:ec:5c:ad:23:d7:6e:86:d6:61:a5:ec:83:
                    d0:c8:58:23:e1:cc:68:9f:66:e8:eb:19:4d:83:3b:
                    60:58:09:ff:81:09:33:c2:1a:01:26:14:6a:8b:7b:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:68:E5:A3:56:F7:67:4A:8F:E6:48:10:D1:F2:03:C6:3F:16:D6:02
            X509v3 Authority Key Identifier:
                keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b7:0a:39:1e:ca:30:a5:9b:70:2f:ad:7b:84:b5:1a:04:1e:
         17:ef:98:6d:4a:8e:7b:3b:b4:ff:b7:ee:2b:12:0d:c3:03:e5:
         74:82:59:d9:ca:12:44:bd:08:c6:6e:41:77:8d:03:5f:fc:67:
         a2:a6:28:b9:01:4d:43:10:ee:38:60:54:88:69:2e:66:9f:ce:
         d1:6d:bf:fe:9d:c7:2d:5a:0a:63:51:e4:51:e4:f6:a7:f1:b2:
         a8:9b:77:c2:30:d6:bb:db:a2:50:c0:3b:23:e7:72:d5:cc:7a:
         57:53:27:f3:43:7c:53:c8:7e:32:64:ea:07:ff:90:89:1a:76:
         1b:18:2a:9e:97:31:6e:9f:0b:c1:80:26:8f:02:17:ca:27:28:
         a2:52:32:9d:4d:4a:05:96:20:4e:a6:6c:b2:36:05:4b:5a:0d:
         30:a1:3f:de:6f:b0:c7:f7:12:ca:9f:84:75:68:f7:fc:3a:69:
         e2:9b:cc:87:e2:2d:e4:c6:08:19:64:93:e3:6b:c6:07:4f:2f:
         04:71:9f:29:d3:17:bd:9b:00:55:be:15:71:1e:4a:79:13:d3:
         4e:33:92:97:5d:89:b3:de:7b:a8:27:1c:68:9f:8f:31:16:67:
         d5:9a:57:7e:cd:58:4e:fb:5f:f2:35:ac:a8:4c:15:af:09:f8:
         c6:a3:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:28 2026 by rpki-client