Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
File:                     OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft (raw, json)
Hash identifier:          i8g27C5ZDvxCTGg5amu6SjOI2/wEkfBRGrkSyornm0M=
Subject key identifier:   65:22:26:36:54:F5:E5:CF:2D:41:38:F7:C5:0C:42:A0:FD:D2:D6:D7
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Certificate issuer:       /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
Manifest number:          81
Signing time:             Wed 25 Mar 2026 06:57:41 +0000
Manifest this update:     Wed 25 Mar 2026 06:57:41 +0000
Manifest next update:     Wed 01 Apr 2026 06:57:41 +0000
Files and hashes:         1: OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl (hash: GThGS9z7zeEOCQfz3Pm40ZzqcUQHe2/43v4JeYGA6HM=)
                          2: A0C50F92BDD411F08AA8443AC4F9AE02.roa (hash: ysVuW5LnYi59x1lz18NXRjV3JavVPishhatCefOBZLg=)
                          3: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (hash: 377aBWt/4YjE0cdxFMi4oiB5yI0io2fUU0WHhpm9ooo=)
                          4: 5089C6286C4C11F090164A17C4F9AE02.roa (hash: PG7OBR6GyNLrIjZOfwPBfDBaGVKv/qZwCkbhTbs1CAg=)
                          5: A0454654BDD411F0A7E8443AC4F9AE02.roa (hash: V8o99dNNhmaM2c88PY3odEi8XIfBLs9AedcwcTXfAbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
                          rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
        Validity
            Not Before: Mar 25 06:57:41 2026 GMT
            Not After : Apr  1 06:57:41 2026 GMT
        Subject: CN=69c38765-5a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:e5:8b:1d:9e:ea:0c:7b:21:67:e4:ee:64:
                    38:cb:07:07:e8:76:a5:16:d5:2c:dd:bc:84:b2:fd:
                    17:20:65:fe:8c:72:78:45:d2:b8:fe:e3:79:dd:79:
                    ca:66:dc:bf:db:9d:4d:5d:1c:f1:81:26:b5:42:c7:
                    cc:7e:af:9c:77:f6:66:8b:f5:4a:02:7c:b4:04:28:
                    71:35:d5:f0:36:69:c5:5f:9d:d5:d6:0b:4e:88:57:
                    fa:17:aa:66:d3:7a:6f:d5:5e:d1:e7:88:50:03:69:
                    d6:0e:8b:a5:bf:bf:e5:67:24:26:af:09:20:67:77:
                    ba:4e:8e:37:7d:c1:a1:31:c8:37:92:fe:f2:fb:b4:
                    95:9e:a5:15:f6:00:f1:fd:0e:c5:1d:3f:7e:38:d0:
                    15:74:e0:ed:69:76:e1:0f:55:a2:66:f9:0e:ef:4b:
                    9e:77:c1:90:6a:28:06:13:db:1a:de:eb:38:f7:6d:
                    2f:1f:ab:3b:4b:c7:74:8b:93:41:04:28:cb:60:c3:
                    54:28:69:61:a5:9a:d7:3f:04:ff:e5:14:1f:63:ff:
                    87:0f:95:fa:f5:41:65:5b:d4:53:fa:41:90:86:d0:
                    11:9d:86:aa:7d:ad:c0:51:47:95:7e:b2:e8:9b:1d:
                    6a:27:b0:61:a8:6e:28:80:10:9b:71:0b:44:2f:cb:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:26:36:54:F5:E5:CF:2D:41:38:F7:C5:0C:42:A0:FD:D2:D6:D7
            X509v3 Authority Key Identifier:
                keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c0:42:13:3e:ec:45:c6:0c:a7:7b:63:f7:e6:62:ef:37:cd:
         93:33:cb:66:e3:6f:f0:ba:ec:33:c3:80:29:78:7e:a1:61:c4:
         64:0f:06:94:16:4a:0b:88:d0:f1:8b:8b:50:13:0a:0e:37:c0:
         5a:ae:9e:6f:da:b2:d3:4d:f6:7a:8f:0c:f2:22:0e:03:99:66:
         18:36:d0:7f:d6:c0:d1:5a:06:0e:dd:d3:f1:ed:43:05:7a:36:
         46:51:e4:cc:7d:26:e0:8f:b4:55:33:e4:19:f9:9e:95:76:1c:
         17:30:e0:a4:a5:e9:a4:53:a2:75:34:b6:e1:ad:c4:bd:37:c7:
         96:b2:a8:41:ec:79:46:f1:00:d9:5d:c4:17:44:f9:12:ca:f5:
         e1:27:a1:2a:bd:f7:bb:ea:0f:e1:59:32:5f:85:b0:b4:8f:d7:
         4c:d1:f6:82:8b:e7:66:ed:9e:f8:90:51:fa:2e:a5:cc:f0:0e:
         04:7b:d8:39:89:9f:a6:25:d1:93:49:7b:40:b1:68:db:22:80:
         6b:02:19:cb:03:a4:8a:39:44:a5:ad:f8:d8:54:79:12:e3:f7:
         aa:23:14:ef:a8:de:c3:2a:7b:66:fa:0c:cb:b3:d8:fc:00:2b:
         9f:12:cc:4d:35:5a:f5:89:62:45:af:17:91:ac:21:f7:58:94:
         30:e7:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:15 2026 by rpki-client