Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
File:                     OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json)
Hash identifier:          Azll3ACswhvjjVd2v8KJgXtdFZ87rdVE0AbHb+SecA4=
Subject key identifier:   A7:4C:A7:F7:DD:01:DB:29:17:E3:83:CC:23:3F:21:3D:43:FF:CF:09
Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
Certificate issuer:       /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Certificate serial:       071C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
Manifest number:          070C
Signing time:             Thu 26 Mar 2026 21:46:40 +0000
Manifest this update:     Thu 26 Mar 2026 21:46:39 +0000
Manifest next update:     Thu 02 Apr 2026 21:46:39 +0000
Files and hashes:         1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: Sot4Z5vXfRvNNVYn+gfqr15tJCOXn8xgZbEzHh8SlWM=)
                          2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: htsQTL9h1dFStX/S8fGPhD/iB1SnRc1hDGyCcwP3e/U=)
                          3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: 411MyxEd4SUlAxnDC0f/mu2L3C2aQqpG7IJEEqtjBBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
                          rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
        Validity
            Not Before: Mar 26 21:46:39 2026 GMT
            Not After : Apr  2 21:46:39 2026 GMT
        Subject: CN=69c5a940-fc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:d0:a5:94:05:be:f1:21:b5:01:23:be:00:
                    7f:61:28:10:fa:97:5e:38:02:5d:b7:a8:64:65:c0:
                    0c:f5:27:74:ac:67:5d:70:f2:da:ab:16:8f:16:3b:
                    a5:0a:39:e5:eb:c4:4e:39:20:9f:c8:f8:83:b7:4a:
                    e7:37:ec:34:0e:37:2d:12:43:4b:bd:6a:8c:45:d0:
                    16:ff:2f:54:54:ac:37:a7:c7:9b:33:53:38:ac:be:
                    1f:bf:c1:56:bc:32:f1:ac:7d:d1:82:65:e9:93:04:
                    70:37:f7:77:64:63:34:78:85:43:5e:d1:a4:98:43:
                    de:77:8f:28:2c:26:42:3f:6c:7d:1c:11:2b:ae:0f:
                    4a:09:d3:03:8d:87:03:50:49:03:fe:a9:7d:4d:2b:
                    65:56:2b:89:41:c4:e3:36:a4:44:e2:96:93:7b:3a:
                    84:92:40:00:8b:8d:c7:d6:74:00:b1:06:3d:e3:01:
                    5d:44:cc:04:20:a4:78:8a:2d:ea:13:a4:ba:34:94:
                    9c:45:f1:3b:68:77:e8:49:fb:82:18:51:ac:83:35:
                    6a:06:d5:9d:3c:38:d6:bc:6a:25:89:18:e1:71:11:
                    53:15:9f:fd:5d:71:30:2d:09:87:d9:42:dd:5d:e7:
                    7f:b5:d3:14:49:2f:1f:25:4e:b2:35:d7:89:f4:3a:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4C:A7:F7:DD:01:DB:29:17:E3:83:CC:23:3F:21:3D:43:FF:CF:09
            X509v3 Authority Key Identifier:
                keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:60:cf:aa:e8:67:6c:58:06:0c:be:3b:85:47:73:8b:1a:9f:
         9c:f9:a3:cb:6e:73:61:54:4a:60:95:0e:5a:b4:3f:47:58:dd:
         b8:03:8b:b1:dd:98:7d:6a:4e:b0:5a:97:97:60:05:a6:a7:3b:
         32:ee:ea:94:82:25:81:1a:91:fa:7c:24:b8:93:81:e0:19:cb:
         57:41:33:70:9e:ac:c9:d0:49:74:7c:6b:d2:36:3a:ed:60:6c:
         ff:8d:2d:de:89:74:56:fd:19:92:d7:de:b0:a8:ef:73:9c:25:
         24:bc:ad:b9:a8:a8:bc:e0:49:e2:9e:11:6d:6f:44:f7:26:87:
         9d:ac:bb:71:c8:da:0e:87:c9:0e:c1:05:0b:a7:dc:ab:7e:5f:
         5d:18:36:29:62:64:20:84:8a:84:90:e1:0c:70:44:c8:5f:9d:
         3c:c9:f3:aa:cc:8b:00:76:0f:af:2c:87:aa:56:94:2e:68:5f:
         46:65:fc:87:89:20:f9:6d:a1:c6:5c:2d:0b:b5:5b:a2:63:95:
         b9:08:a2:1e:75:cd:6d:fa:f4:db:e0:83:aa:62:90:09:eb:83:
         0d:52:6a:46:c7:23:5f:92:e9:9b:4c:67:8e:28:00:13:02:e7:
         1c:cc:07:06:a8:b3:20:e0:19:df:28:74:42:0a:12:46:88:7c:
         e3:d8:ee:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG
Qzg3MkU1QzUwHhcNMjYwMzI2MjE0NjM5WhcNMjYwNDAyMjE0NjM5WjAYMRYwFAYD
VQQDEw02OWM1YTk0MC1mYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm13QpZQFvvEhtQEjvgB/YSgQ+pdeOAJdt6hkZcAM9Sd0rGddcPLaqxaPFjul
Cjnl68ROOSCfyPiDt0rnN+w0DjctEkNLvWqMRdAW/y9UVKw3p8ebM1M4rL4fv8FW
vDLxrH3RgmXpkwRwN/d3ZGM0eIVDXtGkmEPed48oLCZCP2x9HBErrg9KCdMDjYcD
UEkD/ql9TStlViuJQcTjNqRE4paTezqEkkAAi43H1nQAsQY94wFdRMwEIKR4ii3q
E6S6NJScRfE7aHfoSfuCGFGsgzVqBtWdPDjWvGoliRjhcRFTFZ/9XXEwLQmH2ULd
Xed/tdMUSS8fJU6yNdeJ9Doc5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdMp/fd
AdspF+ODzCM/IT1D/88JMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE
NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa
V05pbmtSam83MWI4aHk1Y1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmGDPquhnbFgGDL47hUdzixqfnPmjy25zYVRKYJUOWrQ/R1jduAOLsd2YfWpO
sFqXl2AFpqc7Mu7qlIIlgRqR+nwkuJOB4BnLV0EzcJ6sydBJdHxr0jY67WBs/40t
3ol0Vv0ZktfesKjvc5wlJLytuaiovOBJ4p4RbW9E9yaHnay7ccjaDofJDsEFC6fc
q35fXRg2KWJkIISKhJDhDHBEyF+dPMnzqsyLAHYPryyHqlaULmhfRmX8h4kg+W2h
xlwtC7VbomOVuQiiHnXNbfr02+CDqmKQCeuDDVJqRscjX5Lpm0xnjigAEwLnHMwH
BqizIOAZ3yh0QgoSRoh849juVg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:40 2026 by rpki-client