Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
File:                     oBoPBuMQs4EwEx14gpcL8WLdDWY.mft (raw, json)
Hash identifier:          JdZdPdooQcJR09AXRCeyY54te68p2TfJlxiDors0LqU=
Subject key identifier:   0F:1D:0F:9D:B0:2A:33:8D:2A:5E:78:3C:76:E0:84:57:78:1F:2A:0E
Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66
Certificate issuer:       /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
Certificate serial:       03D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
Manifest number:          03CA
Signing time:             Wed 25 Mar 2026 00:15:27 +0000
Manifest this update:     Wed 25 Mar 2026 00:15:27 +0000
Manifest next update:     Wed 01 Apr 2026 00:15:27 +0000
Files and hashes:         1: oBoPBuMQs4EwEx14gpcL8WLdDWY.crl (hash: /bTz9kFYu/KqBwvtxA3aMSPKRiw34pT9C5JMHdIXdUs=)
                          2: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (hash: QpiN7xo5vbbiecoxrdRCGbnh2zridFdffb3erbBLZ/w=)
                          3: 39952E50C6CB11ECB185E43EC4F9AE02.roa (hash: aRlYf5QuJuURu55O+1viI4YkKaPRp6ELm5Cv+jOPlLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl
                          rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66
        Validity
            Not Before: Mar 25 00:15:27 2026 GMT
            Not After : Apr  1 00:15:27 2026 GMT
        Subject: CN=69c3291f-1ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5c:3b:05:f9:1d:27:41:af:13:89:14:db:bc:
                    83:3e:5f:a1:aa:82:77:09:98:1a:f6:ab:90:47:19:
                    72:34:aa:69:35:88:74:66:39:80:99:c2:ac:5a:d5:
                    3d:5b:e4:63:68:92:d5:13:30:72:ae:19:a7:24:10:
                    64:03:f4:1b:7f:bd:35:57:c6:d6:20:11:86:77:66:
                    12:27:1c:69:b0:0e:81:d2:2e:28:2b:87:0c:9c:94:
                    8f:d3:3b:cd:7f:56:6e:23:54:f3:69:6c:1b:76:bc:
                    e7:82:b0:dd:99:e6:8c:78:d8:ea:94:b5:fe:af:04:
                    49:9a:4f:e1:2b:06:43:35:2e:90:b1:ca:30:b3:5c:
                    18:5e:f9:6a:72:e2:07:ff:0c:30:1f:ee:eb:aa:76:
                    b0:af:64:4e:7f:74:36:d5:12:bd:a5:c0:7a:c1:00:
                    a0:7c:44:09:6d:9a:74:d8:39:1e:14:10:14:11:80:
                    a4:c0:ed:d9:0a:f1:53:d7:fa:ae:de:c5:5e:90:38:
                    fd:35:4c:56:11:ce:2b:06:11:48:e4:72:27:0d:84:
                    f1:9f:f4:56:fd:cc:c5:3b:53:1f:4e:88:8b:69:d7:
                    38:06:57:98:65:bf:d4:59:a8:db:30:ba:94:3f:9d:
                    88:34:13:77:38:36:46:bb:b2:10:2e:30:27:70:34:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1D:0F:9D:B0:2A:33:8D:2A:5E:78:3C:76:E0:84:57:78:1F:2A:0E
            X509v3 Authority Key Identifier:
                keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7e:72:7c:1d:72:bf:e1:6c:4c:3d:8e:8b:73:2a:00:e3:fc:
         2b:e9:ca:27:8a:21:ac:8f:48:52:aa:32:2d:aa:fd:6a:5a:81:
         1b:e5:7e:5e:e0:20:d4:7f:c5:6d:13:29:4b:5a:70:57:1a:f8:
         60:aa:cf:39:5e:0c:fd:34:36:90:d8:bc:75:4f:af:1d:58:0c:
         6f:02:0e:1b:f2:fe:60:cd:2b:2c:99:5b:aa:39:cd:ad:6d:d2:
         e8:4f:f1:f0:0a:e6:cf:40:03:09:4e:23:1b:e3:00:bf:48:28:
         78:be:10:1b:88:83:54:17:52:9b:9a:ff:d3:d1:fb:71:5a:c5:
         a5:b7:e1:33:bd:24:a8:fa:0c:34:f0:e7:80:b9:ae:f3:e7:a9:
         a0:55:27:88:3a:82:04:05:6c:73:d2:65:89:e5:a1:e6:44:d8:
         40:4f:7d:3f:47:9d:c6:b9:bc:c0:bf:75:ae:74:52:95:ce:48:
         fc:54:1b:ae:ff:4f:64:58:16:ed:c4:cd:b3:a2:bf:09:d6:bf:
         35:c2:18:ca:ee:21:1c:b3:de:a0:87:92:8a:d3:03:a6:c1:3a:
         e1:1c:ef:e9:1d:7e:1e:57:bc:40:c5:0b:02:f2:c0:1f:1d:6e:
         9d:d5:71:85:04:28:2d:a8:76:3b:00:28:c6:e6:25:64:36:c1:
         c3:4c:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:50 2026 by rpki-client