Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
File:                     oUDUgGrgz2DnP-FYvyQvOag60AU.mft (raw, json)
Hash identifier:          86McoTTL86PZA0IHTgkL+p1i2E/ZuzlpInbmmutxrG0=
Subject key identifier:   45:98:B2:BF:44:31:08:97:2F:DC:F2:FF:4C:DD:FF:7D:D9:29:BE:6F
Authority key identifier: A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05
Certificate issuer:       /CN=A91E1B78/serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
Manifest number:          AB
Signing time:             Sun 01 Mar 2026 08:30:49 +0000
Manifest this update:     Sun 01 Mar 2026 08:30:48 +0000
Manifest next update:     Sun 08 Mar 2026 08:30:48 +0000
Files and hashes:         1: oUDUgGrgz2DnP-FYvyQvOag60AU.crl (hash: ZPJdlzgtQN/W5Kol+xYiaPLjB7j6yIzeJ8ntJetl11k=)
                          2: 47131A44145511F082FDAA7AC4F9AE02.roa (hash: KRXQ/nIe6qIQX4FIAyZgmnH6TG8Z6ozQ/0cuJMBVjRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B78, serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005
        Validity
            Not Before: Mar  1 08:30:48 2026 GMT
            Not After : Mar  8 08:30:48 2026 GMT
        Subject: CN=69a3f939-1216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:f1:d7:b4:ef:ea:cb:4a:3d:7d:dc:5b:76:
                    61:6c:0a:a7:52:46:b4:b6:e7:f5:29:29:bb:19:e9:
                    ff:08:2a:df:56:69:d8:b1:e5:dc:d7:e7:e7:90:29:
                    d5:17:79:05:09:e2:1c:32:ab:b1:25:d4:ee:0c:00:
                    f5:49:5a:47:7b:e3:2d:ca:00:2a:c7:d5:46:bf:55:
                    47:99:44:6f:cd:24:9c:0c:3e:fc:b4:5e:d8:f4:09:
                    8f:04:ae:c4:7f:85:93:60:8a:74:74:80:ad:9e:51:
                    c0:05:b1:74:aa:41:30:fb:c4:74:b1:ce:2d:61:f4:
                    79:22:65:0e:0c:7c:1d:ca:13:9a:b2:fc:cd:99:aa:
                    7d:d6:4c:dd:85:93:45:e3:29:4d:db:3b:ff:fe:b5:
                    35:c3:42:8a:6a:3b:14:48:c7:0c:05:bf:d5:99:97:
                    0a:80:80:1a:df:2f:3e:90:21:98:3a:44:07:85:80:
                    d9:a2:9a:47:a6:96:4d:3f:6e:b5:33:d7:cf:7c:db:
                    cf:20:24:65:27:8d:43:48:0b:8d:93:c3:5a:3b:39:
                    2f:c6:a3:3f:e8:4b:b8:f4:54:ac:98:d2:6a:95:49:
                    0e:88:ee:4a:0a:f7:a6:ac:81:6e:4f:e8:56:ac:26:
                    b6:92:de:a2:38:c8:96:63:84:4a:3f:e3:be:71:fe:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:98:B2:BF:44:31:08:97:2F:DC:F2:FF:4C:DD:FF:7D:D9:29:BE:6F
            X509v3 Authority Key Identifier:
                keyid:A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:bf:5e:ac:a6:09:84:ad:49:46:20:6f:32:35:65:74:37:97:
         91:da:8d:f2:2e:4a:c4:c3:ca:db:8b:a6:71:5d:89:14:08:c1:
         00:70:6a:a9:35:12:71:d6:6c:35:96:46:e8:82:a1:65:95:cf:
         25:2d:c8:d1:96:11:76:b1:31:d0:cb:9c:07:0a:16:f8:6f:de:
         07:89:fb:cd:6d:9f:82:0e:3d:1b:40:05:7e:ba:8a:91:e3:9f:
         02:e4:88:26:1e:db:37:39:eb:fc:29:5b:37:35:36:9d:7c:ee:
         e3:6b:d9:b3:cf:e0:35:dd:da:f6:6d:ac:0a:3e:b0:c8:78:17:
         95:34:42:7e:fc:25:ae:37:81:f5:5b:3d:d8:f1:38:6f:69:c1:
         c3:a3:97:a8:cd:57:98:d4:bb:ea:74:cb:3c:d1:2b:85:44:02:
         74:7f:cc:36:95:5c:46:4a:e3:ff:47:20:0c:87:ef:fd:26:08:
         b3:11:23:34:a2:12:68:d9:18:11:f5:31:08:1a:17:7e:0e:47:
         44:d9:67:ef:e0:fd:5b:95:a0:62:32:34:f3:fd:04:56:a8:22:
         b9:a1:3e:bb:d6:a8:c0:b9:bb:c9:ad:33:fb:a8:9d:e6:2a:85:
         6c:f1:50:eb:55:3b:31:6a:0b:da:b3:a5:a1:45:f4:51:1f:0c:
         6d:3e:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:59 2026 by rpki-client