Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
File:                     OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json)
Hash identifier:          39V/ODHPlhkEu3aZVURVHtkYMJE2nL3jIgmlrq0RV8I=
Subject key identifier:   F8:BA:7F:4A:B5:40:EB:AC:AC:33:B8:1F:54:09:13:99:3B:0C:2F:EC
Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
Certificate issuer:       /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
Manifest number:          01F8
Signing time:             Wed 25 Mar 2026 02:40:50 +0000
Manifest this update:     Wed 25 Mar 2026 02:40:49 +0000
Manifest next update:     Wed 01 Apr 2026 02:40:49 +0000
Files and hashes:         1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: zrjLF7q+wdqQWJOrczZeH2fn1mZFwiHbVgLIiOjDAyQ=)
                          2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: akhySB51PMI2y7wAP//uAqapHy/Dl5nwYVbMKbRi7uI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
                          rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916600A, serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
        Validity
            Not Before: Mar 25 02:40:49 2026 GMT
            Not After : Apr  1 02:40:49 2026 GMT
        Subject: CN=69c34b32-e485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:a1:96:1b:50:fd:98:07:e7:bb:6f:0f:a1:
                    46:68:7d:db:83:9f:34:7e:a1:bb:3f:69:ab:0f:d7:
                    b0:53:59:83:12:6e:b5:58:64:3d:8d:2f:8c:53:db:
                    cd:0b:77:73:b7:1f:ca:68:ec:71:a9:cb:e6:aa:e8:
                    da:0e:34:0d:0b:67:8d:8f:dc:09:96:d9:ac:37:0e:
                    10:47:0a:96:dc:be:93:f5:10:53:22:0a:03:30:56:
                    49:9b:66:3a:df:ad:bd:8d:05:99:64:b8:96:dc:70:
                    2f:49:87:72:ed:60:5f:64:1c:33:27:e7:36:39:9a:
                    eb:50:27:88:03:30:08:bf:b6:99:e5:51:4c:61:5c:
                    c5:e1:0c:79:c5:f1:b3:35:0b:0f:ad:cf:fc:88:e4:
                    29:59:af:20:06:b9:8d:e5:20:cf:f6:9c:a8:12:5c:
                    5d:e9:7e:fe:6b:c7:9a:3e:7d:73:2f:92:1f:5e:05:
                    96:e1:3b:ac:12:10:61:91:21:76:73:7c:ff:01:3e:
                    81:5f:90:e2:5c:f8:7e:cb:c5:14:97:7b:41:5d:07:
                    49:db:63:17:9c:0b:73:f7:98:7d:13:a7:9f:8f:ee:
                    9f:98:e0:37:f4:31:d3:df:5f:e0:1b:c5:2f:5e:0b:
                    2c:63:19:24:25:3a:d7:ab:02:86:d0:fb:fb:b5:52:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BA:7F:4A:B5:40:EB:AC:AC:33:B8:1F:54:09:13:99:3B:0C:2F:EC
            X509v3 Authority Key Identifier:
                keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a1:52:ab:d5:ad:68:ad:79:b3:4f:2b:e9:5f:46:e7:91:e9:
         a7:3b:86:8a:f7:41:47:89:46:97:97:28:eb:21:70:51:61:46:
         b7:28:b4:4a:ce:3a:33:d7:79:2a:aa:5f:4b:83:b0:b4:d3:a2:
         a8:4c:fd:2e:44:7b:dd:14:df:5b:bd:48:2c:db:c7:6c:78:fb:
         a5:8f:14:da:ca:10:c2:cb:6d:d0:09:ed:94:88:2f:f3:54:21:
         23:8c:35:c2:dd:a5:3b:07:f8:8f:b8:25:98:b1:01:0f:53:84:
         d1:bd:01:a7:66:b3:28:4a:ba:65:04:87:32:ed:3d:4d:54:30:
         1f:6c:ba:b8:22:3a:fe:12:47:6e:7e:33:a8:cf:99:4c:94:0e:
         44:5d:a6:4a:65:9b:97:60:c8:50:5a:02:e1:53:08:86:f2:da:
         ab:ca:cf:29:6c:93:3b:a6:75:45:ea:28:8e:2b:88:8d:24:b0:
         da:3a:0a:44:f5:cf:85:66:61:dd:45:0d:e8:02:ee:b3:4e:7c:
         4d:fa:28:35:f5:8d:88:28:5c:3f:61:a0:db:cf:52:2b:42:6a:
         11:f4:d5:be:fc:66:d3:c9:4d:e5:05:52:25:f2:9a:6c:03:35:
         9f:27:e7:81:aa:04:6f:04:2a:1e:b9:7b:0b:8b:6b:83:c7:14:
         8f:f8:3a:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYwMEExMTAvBgNVBAUTKDM4RUMxOURBQ0E1OEM0NUQ5MUM2NTlEMzVGRTRGMjZE
RDgyNEFDRTQwHhcNMjYwMzI1MDI0MDQ5WhcNMjYwNDAxMDI0MDQ5WjAYMRYwFAYD
VQQDEw02OWMzNGIzMi1lNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOKhlhtQ/ZgH57tvD6FGaH3bg580fqG7P2mrD9ewU1mDEm61WGQ9jS+MU9vN
C3dztx/KaOxxqcvmqujaDjQNC2eNj9wJltmsNw4QRwqW3L6T9RBTIgoDMFZJm2Y6
3629jQWZZLiW3HAvSYdy7WBfZBwzJ+c2OZrrUCeIAzAIv7aZ5VFMYVzF4Qx5xfGz
NQsPrc/8iOQpWa8gBrmN5SDP9pyoElxd6X7+a8eaPn1zL5IfXgWW4TusEhBhkSF2
c3z/AT6BX5DiXPh+y8UUl3tBXQdJ22MXnAtz95h9E6efj+6fmOA39DHT31/gG8Uv
XgssYxkkJTrXqwKG0Pv7tVL9hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPi6f0q1
QOusrDO4H1QJE5k7DC/sMB8GA1UdIwQYMBaAFDjsGdrKWMRdkcZZ01/k8m3YJKzk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAwQS85RUEyQkI3RTND
RDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhGMlJ4bG5UWC1UeWJkZ2ty
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09Pd1oyc3BZeEYyUnhsblRYLVR5YmRna3JPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjAwQS85RUEyQkI3RTNDRDAxMUVFQUU1NTRFNzNDNEY5QUUwMi9PT3daMnNwWXhG
MlJ4bG5UWC1UeWJkZ2tyT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq6FSq9WtaK15s08r6V9G55HppzuGivdBR4lGl5co6yFwUWFGtyi0Ss46M9d5
KqpfS4OwtNOiqEz9LkR73RTfW71ILNvHbHj7pY8U2soQwstt0AntlIgv81QhI4w1
wt2lOwf4j7glmLEBD1OE0b0Bp2azKEq6ZQSHMu09TVQwH2y6uCI6/hJHbn4zqM+Z
TJQORF2mSmWbl2DIUFoC4VMIhvLaq8rPKWyTO6Z1ReoojiuIjSSw2joKRPXPhWZh
3UUN6ALus058TfooNfWNiChcP2Gg289SK0JqEfTVvvxm08lN5QVSJfKabAM1nyfn
gaoEbwQqHrl7C4trg8cUj/g6dw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:15 2026 by rpki-client