Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
File:                     odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json)
Hash identifier:          Hq+Syh8EJ1EA702lJ/YBd/SvdFi+KZWQhJbuSFWQTT0=
Subject key identifier:   49:94:B5:ED:EE:29:C5:C7:10:D3:CD:36:44:F5:A8:FA:7A:C6:07:AF
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Certificate issuer:       /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial:       036D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
Manifest number:          0359
Signing time:             Wed 25 Mar 2026 00:36:58 +0000
Manifest this update:     Wed 25 Mar 2026 00:36:58 +0000
Manifest next update:     Wed 01 Apr 2026 00:36:58 +0000
Files and hashes:         1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: RJybQKKouxS8t0uJrEP5bQacypt5WuDTEZKyCa8giGs=)
                          2: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: B6PZEfx1FpWYd/cLyu0E3zqt+xcDVuPHL9C0o/8CHOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
                          rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
        Validity
            Not Before: Mar 25 00:36:58 2026 GMT
            Not After : Apr  1 00:36:58 2026 GMT
        Subject: CN=69c32e2a-7c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:16:f9:db:04:d8:c1:3e:90:ec:4b:71:79:
                    78:db:f0:be:c1:2a:06:87:76:67:28:2b:97:11:f8:
                    86:54:a4:13:7c:79:5a:63:82:bb:52:62:1a:2a:49:
                    61:b9:88:5d:19:e9:17:f6:b9:db:3f:f7:aa:8b:6c:
                    42:68:d2:23:3c:ed:0a:c9:ad:51:fb:5f:db:e9:9c:
                    3a:a3:a0:56:4a:95:b2:a1:37:d1:b6:da:ce:fb:e9:
                    5d:96:44:1b:c4:94:2d:65:16:56:85:58:72:96:95:
                    dc:b5:ac:f1:f3:82:8a:ba:ad:b4:ac:d3:c7:18:10:
                    33:c1:e5:26:f3:88:ae:a6:f9:fd:b6:e6:74:60:4b:
                    95:99:bc:ca:07:b4:76:51:c4:46:e7:bc:5c:c9:23:
                    87:da:27:b0:cd:ce:d8:c4:a0:4a:6d:2f:f3:ef:e2:
                    5d:d5:c5:89:f2:06:f1:19:9e:13:4b:de:06:a3:01:
                    63:9a:25:25:37:86:10:86:ec:75:5e:75:c1:09:9f:
                    74:f4:1d:7b:f3:b2:7c:41:2d:71:91:c9:b7:2f:db:
                    e1:17:fd:e8:9d:22:98:c8:4c:46:32:8a:66:b1:31:
                    03:80:86:cd:a0:c5:c0:b2:d9:7e:1e:b7:a0:52:ee:
                    c8:18:c6:9c:db:97:d7:ea:d8:f7:ed:fe:08:b9:50:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:94:B5:ED:EE:29:C5:C7:10:D3:CD:36:44:F5:A8:FA:7A:C6:07:AF
            X509v3 Authority Key Identifier:
                keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3e:77:b6:c7:b5:76:b3:37:8a:12:0a:1e:fb:22:9c:2c:e8:
         e6:01:13:ea:b2:4e:ca:ee:2f:8d:59:e2:90:72:33:33:14:11:
         dc:79:02:d8:35:d9:99:cb:31:95:f0:6b:f3:66:f3:41:06:47:
         05:79:48:ff:b4:7a:3a:b9:e8:82:e9:33:54:3b:37:48:fd:1f:
         27:af:8a:20:3e:eb:a2:69:bc:5d:72:a4:d7:47:d7:84:b3:22:
         27:df:8c:85:fe:3f:20:8e:23:66:6b:4b:66:f0:19:09:3e:07:
         08:db:c5:73:dd:ed:ce:c1:49:93:6b:66:2d:ce:42:27:42:3d:
         e8:03:3b:64:0b:41:f2:c4:00:d5:b1:e6:95:6f:24:8e:c7:db:
         d2:0c:8e:95:34:f0:0d:af:af:59:6e:c0:6e:56:15:42:d9:93:
         3b:8a:97:96:a5:63:81:41:1c:7e:2c:52:c2:68:7a:10:42:17:
         e7:b9:55:22:48:f8:8a:7b:93:f4:b7:7f:de:8c:21:02:2f:0a:
         7b:b3:67:cb:cd:bf:f2:13:c6:bd:fd:7b:46:db:de:6e:3d:d3:
         8a:ac:d0:bb:35:df:07:65:77:d6:e9:bf:70:b6:a9:7e:4d:55:
         fc:cf:06:f5:40:1a:85:94:7e:d3:49:3e:97:3c:4f:bc:fe:c1:
         6d:dc:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:02 2026 by rpki-client