Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File:                     ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier:          j0q6B7Vbd+UOzlI5gonLPwfGVLID4eMJkGtuGQcgRqU=
Subject key identifier:   73:94:5C:F6:52:BF:A0:6F:71:D0:62:B5:52:7D:B1:FC:B5:0B:61:6C
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       0382
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number:          034E
Signing time:             Wed 25 Mar 2026 00:43:33 +0000
Manifest this update:     Wed 25 Mar 2026 00:43:32 +0000
Manifest next update:     Wed 01 Apr 2026 00:43:32 +0000
Files and hashes:         1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: oC9SWNtKoWzfxLQto+k1jMSgF9ZQMe11W/mjaeITcp4=)
                          2: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: GQFU2SsTLAwSW2hwAuyStmN7C3ILGi9PMKMwLmksl+I=)
                          3: D84149CCEBAB11F090F576B05F6F56BC.roa (hash: 3GizWDTB/+ZAJYuEqA1GEBMiAzMJTBKziwTY9IY/fK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Validity
            Not Before: Mar 25 00:43:32 2026 GMT
            Not After : Apr  1 00:43:32 2026 GMT
        Subject: CN=69c32fb4-4da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:34:cb:a9:f9:80:20:77:14:d5:22:e1:08:
                    19:9b:1f:3c:6c:25:08:ba:40:dc:50:14:11:6e:17:
                    17:88:7a:8e:4a:f1:10:76:55:ba:1c:ec:a1:0c:38:
                    59:e2:12:4a:57:a4:33:5f:70:33:20:a3:f3:4d:82:
                    5f:08:7d:e9:58:4d:9c:6f:fd:6f:6b:35:1d:a9:83:
                    80:6b:80:a1:4d:1a:b3:00:fb:3f:dc:51:e4:e6:be:
                    e0:8a:c1:a0:e1:6a:88:90:71:32:f4:66:4f:fd:ca:
                    4e:49:35:15:ab:e1:ae:c5:66:2f:b5:60:26:3b:72:
                    e8:69:ef:4c:c2:9b:0c:8e:ff:87:21:3a:87:32:c8:
                    64:54:f1:cf:1a:be:95:ca:fb:d5:80:7c:85:a2:28:
                    b1:f2:f4:7b:e7:18:e1:58:45:2b:63:2a:9d:90:ef:
                    11:99:e3:ec:31:72:4f:8c:5b:e3:d2:dc:ed:cd:b3:
                    e9:b8:ba:13:ef:c7:fa:a9:c1:a5:89:42:b1:32:5e:
                    31:ac:50:89:3d:c9:8a:8b:f6:fe:39:3e:a7:16:5c:
                    56:3a:77:bf:f3:35:ed:35:d0:4c:8f:9f:d6:00:2e:
                    9a:4b:7e:9d:72:cc:ac:70:06:4b:12:84:a3:59:ed:
                    30:8b:31:20:3f:6d:bb:e7:7f:0c:de:d8:91:51:80:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:94:5C:F6:52:BF:A0:6F:71:D0:62:B5:52:7D:B1:FC:B5:0B:61:6C
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:4c:08:8e:de:51:0b:16:ec:a8:b3:94:86:6d:7d:6f:cd:
         32:89:3a:ab:37:70:1e:43:eb:fe:65:1f:cc:d5:61:08:34:95:
         3a:68:c0:a2:eb:18:59:b4:a8:93:97:98:d4:05:fe:36:a4:7c:
         70:3c:35:66:a8:b1:23:f8:50:c8:c0:4d:f6:99:10:58:8c:c9:
         09:3e:98:e2:af:09:c8:f5:bf:4c:e5:c4:9f:99:d4:c7:81:08:
         92:8a:61:6b:5a:19:c1:57:26:a5:3a:a7:9d:64:09:47:73:9f:
         7e:ab:7b:5c:fe:ca:47:af:70:86:c1:54:97:e0:4e:ce:17:10:
         c9:87:c1:e3:d5:87:c1:d4:c7:ec:3b:6c:18:04:6b:6d:27:25:
         7d:b8:50:61:ff:62:ad:96:b8:0d:bc:7d:cd:39:c2:b0:39:89:
         81:b9:db:47:46:2e:d1:3d:b0:c2:ac:3b:0c:a0:19:82:23:89:
         5e:9c:e5:b9:10:53:b6:0f:86:24:a8:3f:d6:b1:f6:af:f0:36:
         5e:54:f2:bf:58:41:71:b7:88:8b:9a:88:98:dd:c2:14:0e:f0:
         d7:2d:ad:a0:ce:e4:d0:e0:90:61:6b:f0:0e:18:41:db:b6:50:
         06:3a:16:47:a5:01:2a:7d:70:61:92:9f:41:da:70:3a:e0:02:
         28:76:a3:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5
RTgwRUREMzUwHhcNMjYwMzI1MDA0MzMyWhcNMjYwNDAxMDA0MzMyWjAYMRYwFAYD
VQQDEw02OWMzMmZiNC00ZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlbU0y6n5gCB3FNUi4QgZmx88bCUIukDcUBQRbhcXiHqOSvEQdlW6HOyhDDhZ
4hJKV6QzX3AzIKPzTYJfCH3pWE2cb/1vazUdqYOAa4ChTRqzAPs/3FHk5r7gisGg
4WqIkHEy9GZP/cpOSTUVq+GuxWYvtWAmO3Loae9MwpsMjv+HITqHMshkVPHPGr6V
yvvVgHyFoiix8vR75xjhWEUrYyqdkO8RmePsMXJPjFvj0tztzbPpuLoT78f6qcGl
iUKxMl4xrFCJPcmKi/b+OT6nFlxWOne/8zXtNdBMj5/WAC6aS36dcsyscAZLEoSj
We0wizEgP227538M3tiRUYCe0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHOUXPZS
v6BvcdBitVJ9sfy1C2FsMB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1
OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253
VlhCeXhITXl1QnFlZ08zVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZtFMCI7eUQsW7KizlIZtfW/NMok6qzdwHkPr/mUfzNVhCDSVOmjAousYWbSo
k5eY1AX+NqR8cDw1ZqixI/hQyMBN9pkQWIzJCT6Y4q8JyPW/TOXEn5nUx4EIkoph
a1oZwVcmpTqnnWQJR3Offqt7XP7KR69whsFUl+BOzhcQyYfB49WHwdTH7DtsGARr
bSclfbhQYf9irZa4Dbx9zTnCsDmJgbnbR0Yu0T2wwqw7DKAZgiOJXpzluRBTtg+G
JKg/1rH2r/A2XlTyv1hBcbeIi5qImN3CFA7w1y2toM7k0OCQYWvwDhhB27ZQBjoW
R6UBKn1wYZKfQdpwOuACKHajhQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:15 2026 by rpki-client