Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
File:                     oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json)
Hash identifier:          NKEak1vZhb+72gH9XrJ9pIhmTGcEIG7Yxq+TEpTXyMs=
Subject key identifier:   45:CF:5B:67:CB:10:28:68:7D:A2:9F:0B:68:12:A6:45:CB:CF:1F:7A
Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC
Certificate issuer:       /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
Manifest number:          020A
Signing time:             Wed 25 Mar 2026 02:21:14 +0000
Manifest this update:     Wed 25 Mar 2026 02:21:14 +0000
Manifest next update:     Wed 01 Apr 2026 02:21:14 +0000
Files and hashes:         1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: bFIYzdiw230cJ0dZPHganlH9XMmt5Rqxw8x+esie6xM=)
                          2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: bQjm4G+Xbuc3BrxcneYGH9ivdneUdSDZ8ioYNeVkHc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl
                          rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
        Validity
            Not Before: Mar 25 02:21:14 2026 GMT
            Not After : Apr  1 02:21:14 2026 GMT
        Subject: CN=69c3469a-8115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:f2:63:ac:c2:cf:2f:f2:e4:11:20:d7:b8:
                    ce:c7:68:ac:31:e6:d8:0e:4f:52:39:ec:45:57:d3:
                    26:5a:05:05:14:d3:59:aa:2f:7a:1d:34:74:b7:53:
                    fb:f9:1e:38:bc:90:43:5e:9d:70:d2:65:55:27:0a:
                    e5:3b:6d:c1:21:f3:dd:cb:a7:0c:58:01:6d:ef:db:
                    a1:70:dc:d0:a3:af:d7:16:d9:a6:f7:99:eb:f5:b6:
                    7f:d2:87:19:dd:14:17:42:7f:c1:9f:0b:99:3a:3b:
                    a8:fd:1c:9e:64:c9:8a:cd:3e:55:9d:a5:21:bf:39:
                    6e:1b:83:01:5a:08:20:96:67:bb:49:bd:f3:cd:52:
                    1c:46:2e:22:06:a8:d6:06:eb:d4:26:39:6b:30:00:
                    54:22:a6:69:d1:e5:7b:bf:b3:e6:de:f0:d4:6e:ac:
                    05:e6:fc:4d:45:2c:c9:1d:4d:92:61:37:eb:c5:de:
                    99:51:0b:a7:7c:2d:dd:7a:a1:29:4c:66:4f:01:b6:
                    83:9a:e6:f0:33:77:a0:d0:64:99:81:7d:17:18:02:
                    1e:ac:ea:86:f0:6e:42:d6:dc:bc:94:74:15:0e:93:
                    da:67:8b:65:ce:7b:3f:4e:37:4a:43:6b:38:e0:52:
                    36:80:ba:d3:a6:55:e7:7e:95:97:0e:b2:9b:a0:b1:
                    58:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:5B:67:CB:10:28:68:7D:A2:9F:0B:68:12:A6:45:CB:CF:1F:7A
            X509v3 Authority Key Identifier:
                keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e5:01:d1:00:98:40:60:af:df:d6:ae:3d:a4:f9:fa:2e:f7:
         57:d8:b9:cc:53:65:5c:29:b1:6b:da:75:13:c4:9c:8b:b1:cd:
         d2:2d:5c:2e:64:4b:2c:05:3a:1c:2a:c9:a7:8c:1d:5f:d9:c3:
         71:5a:07:0d:41:c6:e1:8f:7d:ac:01:8f:bb:12:16:da:da:98:
         59:a0:2a:5f:a6:99:03:79:eb:5c:ff:ed:e7:5f:ec:38:96:a4:
         28:47:7e:08:af:c8:7d:9c:ef:5d:af:88:a2:3a:b0:87:68:18:
         d1:eb:bf:b7:e2:12:5c:38:a5:1a:68:d4:1c:b0:0b:b3:fd:c0:
         78:39:a3:3c:98:2a:d9:a4:26:da:9e:dd:c7:98:8c:1e:73:4a:
         8e:3b:26:38:5b:2d:3a:1f:4b:90:0a:2c:53:14:d3:f8:53:2d:
         67:f2:7f:e9:a3:32:3e:5c:44:0c:13:27:8c:98:0d:0b:42:c5:
         d3:34:55:16:5c:33:48:38:24:b0:30:64:60:81:7a:92:d6:04:
         78:70:b8:5d:aa:89:fa:f2:8d:68:2b:4c:75:e0:15:da:a6:d9:
         81:a4:02:81:ef:65:68:d9:f9:a5:65:82:22:ae:50:4c:59:d3:
         df:d5:ab:b0:ff:78:60:75:37:bf:5e:93:47:94:fe:1f:c2:50:
         53:7b:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:53 2026 by rpki-client