Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File:                     oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier:          bomXUgBtaIhM795JNmh2aAYdAGQfdOylleMmhH4CPhQ=
Subject key identifier:   A4:F5:25:FE:64:A9:FB:57:9F:F6:07:66:6D:BF:54:A6:7F:F3:D9:F6
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number:          038D
Signing time:             Mon 02 Mar 2026 00:20:38 +0000
Manifest this update:     Mon 02 Mar 2026 00:20:34 +0000
Manifest next update:     Mon 09 Mar 2026 00:20:34 +0000
Files and hashes:         1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: c0Efag0bd9uUmboJfbmUp+Y3eUqSomgHTWehF85kUtk=)
                          2: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: o5WlhFegrunl298udJ6RMR3PSjbICpygcszPCkIxPQQ=)
                          3: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: LdPaVpIHiFCviJ4atJWEzsKTvmcrhcuE0nckBT360kM=)
                          4: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: ceAxo9+Fdyi5P0HsH2wnjJofUWLA3mwVeu0l0LHg0Tw=)
                          5: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: 9yLq1fcTY/+ONs/+aAdKdKRJn1+ep6hUevFi1Yok7fo=)
                          6: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: SGksm6VTqM61tXFsVwhp+M8haNtlkDq4gGqjHiqh65E=)
                          7: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: GpFi4qWfLH3/Bor9liB/z27o/eFfVUNzo/Spgg2Kwhc=)
                          8: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: HZqCvdeGHsP/6NvJbld74YoHrCzB+uyqkSUL6rM4Krs=)
                          9: B111111288B411EF80480527C4F9AE02.roa (hash: ERFGJsSUFqUqUH2+aB83gavANEDKi02Z8fvMs7VPc/s=)
                          10: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: eZ62tcC+oCrr0OwV7JhPtt2KQGPwxM8cNygG2lJcXC0=)
                          11: F2F59366E93211F0977E0D6F386F56BC.roa (hash: mJMHg3iUauwTmfzAX67ctynfw2aWN8PZsnA4LlIG7Ko=)
                          12: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: jzliHD9p9VBPFQH3cs9dpYZduyBWUj6S6T4IuIvTvCc=)
                          13: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: eynEZAFOoFMy/xuYyuLdNHt4VeaWDqCeHNzL/ERhSTY=)
                          14: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: v+IMCk1QKXV1myDls8FZGCVLQkvmM82UNEFppPlEWlM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Mar  2 00:20:34 2026 GMT
            Not After : Mar  9 00:20:34 2026 GMT
        Subject: CN=69a4d7d5-7ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:f4:f4:64:44:98:47:4c:80:bc:ed:ec:6c:
                    25:f0:15:7f:05:14:82:b1:2d:b3:f5:04:dd:af:cd:
                    d9:51:34:6f:b7:2a:c0:ae:55:35:d1:41:79:ff:1b:
                    52:fa:54:ae:8c:f4:2f:79:2d:d1:a0:77:84:e4:f0:
                    bb:0b:cc:3c:39:a2:a3:94:90:59:d3:a4:60:44:be:
                    3f:93:1e:cc:3b:71:7e:04:4b:3a:93:4f:f4:22:ea:
                    dd:44:ad:51:c6:d7:f7:2f:3a:61:a2:cb:0a:f1:08:
                    bd:c1:0a:97:d0:b4:15:d0:1e:61:0b:ee:1a:30:c2:
                    2c:88:52:f2:cc:84:21:3a:3c:ae:db:42:54:05:5e:
                    a9:17:01:fb:48:c0:c5:35:66:3b:56:5f:37:b3:c6:
                    be:fd:e3:d1:ad:47:01:8a:df:48:61:60:dd:57:84:
                    74:d6:13:2a:6e:57:8e:04:8b:23:ad:10:8c:88:32:
                    32:e1:2a:07:d0:fc:4d:ac:b1:7d:79:e0:39:71:80:
                    7b:46:16:5e:07:80:ab:a5:76:88:ff:0b:0a:26:06:
                    a5:5e:b9:d9:1a:67:4b:f3:b0:da:40:48:1c:aa:37:
                    ae:64:5a:e2:46:f2:8c:c3:d1:41:46:ce:1a:b5:ef:
                    48:f0:95:30:e6:97:e7:a8:d6:b1:5c:1b:1d:1d:7b:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:25:FE:64:A9:FB:57:9F:F6:07:66:6D:BF:54:A6:7F:F3:D9:F6
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7f:76:c0:97:e0:e8:36:74:b3:c0:fe:48:90:62:f4:0b:7c:
         62:21:03:a2:de:2e:3c:e2:07:fe:93:a3:88:53:31:df:20:22:
         76:6f:9f:16:37:7e:6b:df:bb:72:9d:74:b1:45:2d:de:41:6c:
         2e:98:b2:74:e8:e5:32:f9:f4:da:8f:45:e5:b1:97:b8:2c:c2:
         0e:d2:57:24:0d:e7:98:96:db:38:4b:c5:34:8d:89:10:66:6d:
         58:dc:1c:cf:b6:0e:6d:0a:2f:69:34:02:58:74:e2:e0:3f:44:
         30:25:cc:c6:ec:b0:3d:9c:9b:c5:16:bc:a6:1b:fe:0b:23:7a:
         e7:f1:ac:aa:2b:35:c1:7d:07:51:6f:ab:77:1b:17:7a:93:92:
         5b:0c:a2:8e:51:7b:c9:85:7c:7a:25:c2:03:57:cf:f4:a7:9f:
         33:7c:92:f0:7b:cf:ab:0d:1c:bd:34:fd:34:bf:42:54:2c:30:
         8e:b2:18:76:00:ac:ea:4b:d5:3e:91:e3:3a:6c:01:c9:e8:55:
         63:68:df:c9:c5:b3:72:50:95:e0:a1:9b:e5:39:c1:1f:c6:76:
         30:39:66:cc:4b:73:5d:fc:d5:0d:21:7c:82:28:84:d1:9d:67:
         5d:4c:8b:01:a7:cb:83:cc:84:a5:29:c2:13:a0:c9:26:9c:39:
         4f:40:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:09 2026 by rpki-client