Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File:                     owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier:          A+xS5ExZSq1vbW9iEblnf1KWFkfE4FCpKh+EXNDQ6aw=
Subject key identifier:   34:AB:9A:3D:5E:D5:32:06:32:8D:53:BC:8D:1B:08:F4:F3:BC:A4:EC
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer:       /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial:       0D0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number:          0D02
Signing time:             Tue 24 Mar 2026 17:58:55 +0000
Manifest this update:     Tue 24 Mar 2026 17:58:54 +0000
Manifest next update:     Tue 31 Mar 2026 17:58:54 +0000
Files and hashes:         1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: n1XHk7CVFVkH9rgnat39d1dyplkpJUavCaln2W2wbz4=)
                          2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: p/HN4+cYHb4pXYatqROBo401SMy00O/P6+sd+OS9rlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
                          rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3342 (0xd0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1
        Validity
            Not Before: Mar 24 17:58:54 2026 GMT
            Not After : Mar 31 17:58:54 2026 GMT
        Subject: CN=69c2d0de-3ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:6e:f7:fa:3a:1b:de:9c:5c:80:66:ba:d0:
                    df:1e:91:54:d7:4c:50:b3:1d:14:1b:eb:37:da:c2:
                    d6:22:ae:6c:5f:fe:a0:ce:d4:0f:83:de:16:89:8c:
                    ac:01:30:92:ac:d5:7c:ef:1d:33:6c:8e:c0:e7:0c:
                    00:c9:f9:e0:2a:e9:c3:94:83:ec:dc:c0:f3:ad:8e:
                    a4:82:88:2f:1d:91:5d:fe:f6:65:0b:c5:6e:3f:85:
                    3c:47:17:81:71:87:2c:8d:50:de:ff:78:ae:4d:d4:
                    b6:7e:f7:e1:39:11:90:37:40:66:01:4d:08:a7:eb:
                    13:98:00:54:41:50:93:2a:87:11:60:33:ca:a5:38:
                    e1:4c:ca:06:69:8e:2e:ad:82:f6:2a:8a:23:6a:64:
                    65:c1:22:4a:3c:97:a5:c6:bb:93:89:31:38:61:22:
                    2c:dd:5a:e5:78:3e:08:c1:ea:6e:9c:3a:31:de:55:
                    6f:7e:93:f5:19:86:6a:ef:41:c8:1b:47:3a:f2:63:
                    f5:4c:0c:0a:30:d1:c2:b4:bb:0e:72:98:29:14:d3:
                    20:ff:e0:34:12:04:b1:1e:6f:dc:b5:4d:d5:59:d4:
                    c8:cc:d9:ef:d3:b6:64:a2:0a:44:5a:1d:f2:a2:c5:
                    be:6f:8d:17:7d:c7:93:63:09:b6:c3:c7:d9:66:dd:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AB:9A:3D:5E:D5:32:06:32:8D:53:BC:8D:1B:08:F4:F3:BC:A4:EC
            X509v3 Authority Key Identifier:
                keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:36:6f:01:d4:ae:f4:59:4c:60:b3:a1:c4:e3:63:fe:06:48:
         39:c4:ae:58:2a:0f:21:32:c0:55:cc:e0:72:df:cf:71:96:f2:
         02:3b:da:92:4f:bf:ba:58:8c:69:46:87:6e:4e:ed:1b:60:5d:
         ae:9c:0f:23:04:36:8a:4d:ca:6b:fa:34:82:38:5b:50:4d:1d:
         2a:f3:4c:ed:2b:f2:54:e5:26:19:c0:91:27:41:95:dc:b5:1e:
         0e:9a:c4:40:ea:20:75:3a:96:ce:c8:3f:d2:25:8d:3b:a8:42:
         e0:31:04:e4:36:ee:b9:5f:41:24:c7:9c:45:03:b0:25:cc:cf:
         67:c3:6d:b6:4a:25:0b:c2:21:19:85:ce:9f:a0:02:cd:d9:06:
         24:8a:ae:80:75:62:6c:c7:8a:3d:42:fa:db:7d:13:37:51:c2:
         19:ac:81:78:68:27:64:ab:09:94:4c:6e:36:ef:d3:7c:cb:c6:
         e7:f6:6c:bc:4e:f3:d0:bf:66:bf:77:e8:1d:7b:62:b6:86:08:
         c4:93:a3:e1:f2:1d:86:cc:ba:4e:15:bf:02:f1:3d:c2:1a:bb:
         79:c3:03:3b:24:07:a7:8e:5e:fa:fd:92:bc:3b:6e:6a:30:01:
         a0:2e:45:d0:d5:ba:1f:d7:ee:27:47:f2:59:02:3d:8d:3e:3c:
         46:a9:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:24 2026 by rpki-client