Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
File:                     byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft (raw, json)
Hash identifier:          ud+rb0ZhUOsJHF15NYE9MIM3xv0AXL7Q6O/6lX+9CHk=
Subject key identifier:   19:91:9F:E9:15:2B:21:6E:06:FD:93:5E:D1:BD:04:29:07:B9:06:24
Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
Certificate issuer:       /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Certificate serial:       0C74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
Manifest number:          0C5F
Signing time:             Tue 24 Mar 2026 18:33:10 +0000
Manifest this update:     Tue 24 Mar 2026 18:33:10 +0000
Manifest next update:     Tue 31 Mar 2026 18:33:10 +0000
Files and hashes:         1: byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl (hash: IqeFJPfxX2kuoRBjh3Y8nG2Rgm/bVjV4G1JnTV8r0Nw=)
                          2: 54B32544D84711EF81BD1E0BC4F9AE02.roa (hash: vcHivrKD7BbPR/+Swjca2Occnz6uKqKRaWP0Izv5nTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl
                          rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3188 (0xc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111926, serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
        Validity
            Not Before: Mar 24 18:33:10 2026 GMT
            Not After : Mar 31 18:33:10 2026 GMT
        Subject: CN=69c2d8e6-a478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:10:c9:1f:c4:28:28:bf:05:00:1c:8f:75:
                    93:2e:45:aa:e9:d1:ca:ae:74:f9:15:52:4d:4c:50:
                    8f:88:23:e5:73:2a:a2:63:eb:d8:39:df:dc:ee:c9:
                    11:f1:a8:04:3c:71:e9:9b:cc:46:af:80:bd:72:14:
                    b4:bb:b5:29:bc:9c:a3:89:31:07:0f:dc:06:89:15:
                    32:04:72:42:7c:db:06:01:37:35:94:7b:da:b1:e5:
                    8d:aa:d6:3b:a1:b9:1c:38:4e:e7:eb:4e:27:7c:8c:
                    cf:33:57:81:8c:04:ab:0b:e9:0e:07:64:9a:81:5f:
                    d7:64:0c:b5:2a:b9:6c:ec:7b:10:d5:03:00:3e:75:
                    2c:c2:25:ff:ad:2b:07:3f:56:07:c1:f5:20:b3:c2:
                    68:cd:6b:05:ca:a0:4d:9e:d2:ea:7b:f5:6a:e5:33:
                    0d:7b:1b:7b:7c:5f:90:06:46:0a:1b:d7:5e:18:b0:
                    b0:d3:42:b6:be:5f:37:8d:91:3a:93:81:c4:1b:7e:
                    b2:6b:d4:9f:fc:b9:d1:6a:87:36:b2:95:ba:c4:c8:
                    c4:c3:4c:f4:ce:48:2e:4b:b1:31:49:e9:e5:00:21:
                    69:e3:85:50:df:3f:2a:90:7d:ca:16:7c:58:d5:a0:
                    96:de:6a:09:97:75:d0:e5:02:bd:8c:02:3f:1f:8e:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:9F:E9:15:2B:21:6E:06:FD:93:5E:D1:BD:04:29:07:B9:06:24
            X509v3 Authority Key Identifier:
                keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:95:9b:d5:6e:cc:4e:3f:25:40:d8:13:31:6e:c8:86:5d:31:
         33:67:49:15:a2:3f:36:61:8e:8f:96:64:1c:d6:99:f8:30:8c:
         73:46:92:02:82:06:51:00:62:1f:88:b6:a0:79:a5:e2:91:79:
         e1:70:cc:2b:2c:70:54:99:7e:bf:17:78:69:a3:1a:83:3a:bc:
         03:15:ce:a5:96:ef:b4:f5:b5:ee:c5:d8:50:6b:b2:32:c9:84:
         70:fa:b7:40:8b:37:71:55:10:12:4b:d2:b2:30:9e:c0:38:a5:
         10:42:4b:78:a9:5a:0d:db:b4:ba:de:82:db:55:89:f7:26:92:
         13:f4:d3:df:97:c2:0d:1a:f7:6c:7b:31:65:85:3b:4c:e0:ee:
         5c:9d:2d:4b:11:81:c3:c6:35:cd:df:63:34:12:15:c0:f6:fb:
         72:aa:4d:65:59:a8:cc:ff:d7:8a:7b:0e:e7:7d:33:8d:b7:e1:
         d6:6c:96:cf:5f:d5:a5:f8:69:e3:b0:b3:d9:97:6e:ee:23:33:
         09:af:c4:93:b4:00:3a:e8:17:ec:fb:28:09:61:c1:db:53:43:
         c3:f2:98:80:91:1b:fd:f2:e3:7c:02:98:25:4f:d6:20:df:d9:
         0b:4d:46:f1:d5:ac:82:95:89:8f:24:89:81:35:fc:41:78:5c:
         3b:37:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:56:28 2026 by rpki-client