Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
File:                     OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json)
Hash identifier:          3tZFxLEsl511iN6c5bE9U7kzfth4+8WbZgDJIkdKR+0=
Subject key identifier:   8D:71:61:F3:9D:AE:C4:ED:58:03:A0:4B:63:B0:C7:88:37:FF:E3:49
Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B
Certificate issuer:       /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
Certificate serial:       1840
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
Manifest number:          1834
Signing time:             Thu 16 Apr 2026 16:28:06 +0000
Manifest this update:     Thu 16 Apr 2026 16:28:06 +0000
Manifest next update:     Thu 23 Apr 2026 16:28:06 +0000
Files and hashes:         1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: 5z7SMTZZpm7zjDx8orbjT4cXlAQ4w5dpbOi7MbVP2os=)
                          2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: 7JNmlbMqJmYKkSRMUqjjlP0pR2Q9I21oeD7RxmLV6bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl
                          rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6208 (0x1840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
        Validity
            Not Before: Apr 16 16:28:06 2026 GMT
            Not After : Apr 23 16:28:06 2026 GMT
        Subject: CN=69e10e16-26cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:12:2f:d0:fa:3f:d8:1e:ed:05:fe:68:24:
                    c4:94:dc:a9:94:b4:86:6c:fb:60:79:45:a2:0c:19:
                    63:74:ec:b4:ad:ba:31:4f:62:7d:35:2c:a2:d8:40:
                    1f:68:e9:04:73:38:b7:56:89:86:f5:2f:96:6e:77:
                    87:6f:14:70:4a:aa:9d:79:76:0d:1b:8a:6a:f3:42:
                    6a:86:ec:9b:85:f3:e7:8d:39:6f:eb:f5:aa:91:41:
                    6e:5b:93:48:0b:bd:70:c9:16:74:53:52:d0:f3:f2:
                    c3:05:2e:ed:8c:10:a8:59:37:0f:9a:35:9f:cb:2e:
                    39:cd:6b:a7:7d:4a:04:5e:46:e7:65:03:88:08:9b:
                    d7:b6:2e:bb:4b:8b:1e:99:20:d3:b2:ff:04:9b:eb:
                    0c:13:3c:ab:4d:e1:ce:d1:5c:9b:92:72:9e:9b:16:
                    3a:72:6d:1c:0a:7f:07:97:f7:e6:e1:01:a0:ec:99:
                    8c:b2:a7:60:e5:c9:91:be:85:ff:ee:26:47:57:c7:
                    de:a7:be:9c:41:d2:8e:ed:bf:ff:70:c9:c6:9d:b2:
                    ed:5b:02:ef:8e:2f:ea:0e:7b:ac:34:e5:0f:6f:19:
                    6e:ad:6e:19:43:3a:a1:22:71:09:f3:31:e2:fc:77:
                    8c:ad:93:41:02:62:13:ed:1a:d2:d3:2c:d7:46:4c:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:71:61:F3:9D:AE:C4:ED:58:03:A0:4B:63:B0:C7:88:37:FF:E3:49
            X509v3 Authority Key Identifier:
                keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9b:ee:40:59:50:58:3a:57:7b:a7:28:8e:f5:ea:e1:8e:ee:
         6f:b6:a8:f4:39:e8:fe:a4:18:be:70:7a:73:ba:bf:05:ec:97:
         a9:29:88:33:21:a8:51:cb:50:17:a3:bf:9b:5d:1c:64:61:5b:
         83:8c:b7:5b:db:94:28:5a:d2:e2:13:08:2a:ce:fb:fe:09:6a:
         f2:95:89:6b:34:80:12:1b:d2:3c:96:8a:74:7e:1f:2b:b0:9e:
         58:a2:0a:9a:64:d7:21:56:8e:22:fa:6a:10:31:2e:2b:65:72:
         6f:20:62:60:ba:d8:d2:4c:e6:02:e8:e2:5d:0a:87:a9:33:b8:
         23:d3:17:25:02:b0:a1:71:59:e6:26:1f:52:c4:0c:9e:f6:0d:
         d2:f8:80:f7:db:d3:25:67:09:a7:ad:11:9b:bb:b7:70:ef:d8:
         ad:63:03:2f:20:77:63:b3:2e:6f:c8:22:66:aa:ec:35:7a:4b:
         0e:ae:e6:ba:6d:4f:15:5d:e2:bd:fd:17:0b:e7:0e:7b:c0:9b:
         f7:19:85:43:c9:aa:9f:e2:65:69:87:72:31:0c:e9:de:43:88:
         a7:df:16:3a:4e:75:16:34:4d:bd:e4:8e:90:a8:c0:23:16:77:
         92:98:d8:89:31:54:79:7f:03:df:32:98:cd:64:b4:fb:73:a6:
         c0:98:da:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5
ODlDRjU2MEIwHhcNMjYwNDE2MTYyODA2WhcNMjYwNDIzMTYyODA2WjAYMRYwFAYD
VQQDEw02OWUxMGUxNi0yNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn0gSL9D6P9ge7QX+aCTElNyplLSGbPtgeUWiDBljdOy0rboxT2J9NSyi2EAf
aOkEczi3VomG9S+WbneHbxRwSqqdeXYNG4pq80JqhuybhfPnjTlv6/WqkUFuW5NI
C71wyRZ0U1LQ8/LDBS7tjBCoWTcPmjWfyy45zWunfUoEXkbnZQOICJvXti67S4se
mSDTsv8Em+sMEzyrTeHO0VybknKemxY6cm0cCn8Hl/fm4QGg7JmMsqdg5cmRvoX/
7iZHV8fep76cQdKO7b//cMnGnbLtWwLvji/qDnusNOUPbxlurW4ZQzqhInEJ8zHi
/HeMrZNBAmIT7RrS0yzXRkwkjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1xYfOd
rsTtWAOgS2Owx4g3/+NJMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF
QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ
SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABpvuQFlQWDpXe6cojvXq4Y7ub7ao9Dno/qQYvnB6c7q/BeyXqSmIMyGoUctQ
F6O/m10cZGFbg4y3W9uUKFrS4hMIKs77/glq8pWJazSAEhvSPJaKdH4fK7CeWKIK
mmTXIVaOIvpqEDEuK2VybyBiYLrY0kzmAujiXQqHqTO4I9MXJQKwoXFZ5iYfUsQM
nvYN0viA99vTJWcJp60Rm7u3cO/YrWMDLyB3Y7Mub8giZqrsNXpLDq7mum1PFV3i
vf0XC+cOe8Cb9xmFQ8mqn+JlaYdyMQzp3kOIp98WOk51FjRNveSOkKjAIxZ3kpjY
iTFUeX8D3zKYzWS0+3OmwJja2g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:12 2026 by rpki-client