Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File:                     OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier:          h782bm5zGk0DiViVnua7D+tCtngyb1zhE+Nkz8abto8=
Subject key identifier:   6B:F1:EE:9A:D2:52:06:36:0E:AB:B7:A9:69:0E:72:DB:D5:CB:28:03
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer:       /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial:       1F61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number:          1F36
Signing time:             Thu 26 Mar 2026 16:00:29 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:29 +0000
Manifest next update:     Thu 02 Apr 2026 16:00:29 +0000
Files and hashes:         1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: eHGwDpyTJ9Bcqnl1vA23gnYR3q6ejnLQw9N+4NDPhD8=)
                          2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: brx3F+QJqCmHbyv8rdzAimZ77OckcLhAZCr5v55mHrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
                          rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8033 (0x1f61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
        Validity
            Not Before: Mar 26 16:00:29 2026 GMT
            Not After : Apr  2 16:00:29 2026 GMT
        Subject: CN=69c5581d-d6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:3a:52:75:9a:b5:d2:4b:d7:6b:63:10:45:
                    40:39:0d:27:95:bc:70:87:46:6f:a1:c8:eb:80:80:
                    4f:8e:b0:6c:a2:f1:0b:0c:af:96:a7:8a:f7:41:a3:
                    d5:bf:68:31:50:1e:33:a3:14:7f:8c:03:6a:bf:60:
                    77:2e:44:5e:93:56:4b:fb:21:05:e1:17:2c:d2:37:
                    04:88:7b:82:a8:fb:33:c5:4d:6b:8d:5c:44:0e:03:
                    d3:73:95:e7:39:5a:d0:9f:9e:9b:6a:19:40:96:06:
                    3f:5f:e2:3a:a4:f7:3c:d6:b1:ce:24:a8:27:89:9a:
                    97:52:6c:1b:00:c1:b8:97:7e:a1:c3:7b:5d:a1:cf:
                    84:0a:e2:20:b6:54:86:d0:63:a6:e3:a3:9a:b9:16:
                    14:e5:63:87:6c:69:06:bb:ba:c8:a6:b8:e5:28:5b:
                    fe:17:87:e4:c3:71:a1:63:82:72:b2:76:8a:de:8a:
                    2d:81:df:14:be:a2:91:75:53:1e:e8:c6:6a:1b:5a:
                    03:5b:ab:1d:3d:46:2f:37:ad:79:f7:2b:3b:af:9d:
                    c6:e0:31:56:c2:bd:95:9a:50:64:d0:8e:4a:df:58:
                    2d:c7:29:af:8a:51:db:bc:32:3e:65:81:5e:21:14:
                    9f:c8:11:0e:90:b1:13:12:d6:69:51:cc:ca:89:66:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F1:EE:9A:D2:52:06:36:0E:AB:B7:A9:69:0E:72:DB:D5:CB:28:03
            X509v3 Authority Key Identifier:
                keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a4:6e:35:01:27:dc:fc:25:94:91:14:ea:07:b6:15:79:28:
         ed:41:f9:9e:06:2a:01:b6:3c:28:45:d6:25:d0:5b:57:6a:53:
         0c:3d:e6:aa:c0:70:e2:6a:d9:be:3a:15:1d:03:ad:6c:93:5c:
         81:21:0f:c2:66:ac:da:83:83:1e:f5:68:00:52:61:64:6e:30:
         8b:b1:a1:e9:6d:d4:45:79:f8:25:7b:a8:fc:a8:1c:4f:92:78:
         3c:2d:2c:a3:c2:62:e5:97:d4:59:fa:a2:8a:9c:02:aa:42:f7:
         e9:7f:3f:de:e3:85:58:5a:6b:e3:02:58:1b:58:ab:1c:52:a2:
         09:91:01:69:aa:e7:73:60:06:2a:71:cb:18:2b:f3:aa:06:32:
         eb:dc:84:f7:cb:dc:ae:69:76:29:1c:e1:95:9d:80:6c:13:db:
         d8:36:7e:60:a3:81:4d:d5:37:f5:e7:bf:2d:c4:eb:84:06:fd:
         3a:ef:b8:51:59:8d:82:30:14:fe:a3:1a:3f:7c:97:79:5a:c2:
         ce:76:ec:09:25:b6:5c:af:e2:b9:27:33:98:05:0b:0d:11:80:
         4e:df:2a:71:15:ad:18:47:50:d9:4f:0a:4e:79:27:76:d0:ef:
         42:b6:40:56:29:54:89:3c:2a:65:e7:48:6a:6c:19:d0:48:a5:
         84:30:c7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:02 2026 by rpki-client