Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
File:                     O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft (raw, json)
Hash identifier:          ejqJHedQ9o75SpocTiDDC361Wgu09i0dpC+yK3376wk=
Subject key identifier:   9F:52:46:AC:5B:E4:EA:BB:D8:53:B4:C0:C0:1A:54:B8:0B:70:0D:87
Authority key identifier: 3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
Certificate issuer:       /CN=A916D2D2/serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Certificate serial:       0B8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
Manifest number:          0B84
Signing time:             Tue 24 Mar 2026 18:56:08 +0000
Manifest this update:     Tue 24 Mar 2026 18:56:07 +0000
Manifest next update:     Tue 31 Mar 2026 18:56:07 +0000
Files and hashes:         1: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl (hash: 67xVwqjUMeSJlWkxmjJdFwCj81FdVZ38TfM4Tsvg9XI=)
                          2: E174463E4BD411EAAD10A710C4F9AE02.roa (hash: Fx0k0TQfkTjEx5QYzTZXVEk1I1QDmv0PoZpDBUY4GRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
                          rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2958 (0xb8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D2D2, serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
        Validity
            Not Before: Mar 24 18:56:07 2026 GMT
            Not After : Mar 31 18:56:07 2026 GMT
        Subject: CN=69c2de47-270b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cb:61:4a:89:36:f5:03:e9:1c:c9:45:5e:1d:
                    15:ba:a9:02:b6:83:6e:6a:27:e0:d5:fe:62:5d:a3:
                    73:6b:78:cd:80:cb:d0:7c:21:36:9a:cb:e7:3e:f8:
                    ea:1b:39:58:2c:c4:3c:71:77:38:2b:6e:f1:57:b3:
                    27:dd:ba:53:9e:da:72:6b:2d:26:2d:1d:34:b2:d9:
                    b2:f5:1a:eb:ca:63:97:c6:50:ed:f2:c0:7e:3d:33:
                    17:eb:d1:28:6e:79:3a:49:cf:db:9e:e3:dc:f4:b1:
                    da:11:5e:52:f8:dd:14:3a:7c:2a:53:7b:bb:29:f4:
                    94:b1:e3:fd:9c:b6:0a:58:dc:dc:91:40:69:18:bf:
                    94:50:ba:56:1f:99:2f:17:07:f5:55:58:af:1a:01:
                    2c:f4:e5:59:ff:8e:aa:7c:54:1f:83:ca:1c:e8:0f:
                    8f:bf:bf:2e:eb:7c:cd:c9:5e:61:13:9e:31:50:ea:
                    3c:48:8e:7c:de:9a:de:3f:7f:76:07:a6:86:2f:ee:
                    6d:d2:8a:7e:39:82:45:29:02:b2:cd:c5:fa:ac:d4:
                    79:32:a3:ce:3d:9d:53:5b:bf:6b:2d:87:8d:38:0d:
                    11:7f:8e:f1:c0:d9:aa:87:d0:75:00:43:c6:5f:d3:
                    a8:09:3b:df:d6:1c:45:bb:7c:cf:4e:a5:ec:41:9a:
                    03:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:52:46:AC:5B:E4:EA:BB:D8:53:B4:C0:C0:1A:54:B8:0B:70:0D:87
            X509v3 Authority Key Identifier:
                keyid:3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:7b:c9:27:07:0d:96:1e:ee:a3:69:85:04:38:75:5e:fb:69:
         46:68:d0:05:1d:87:cf:97:cd:8f:98:aa:88:49:e4:18:d4:15:
         6b:df:cc:26:c6:f3:c5:a2:3e:d7:b9:dd:c2:f2:ce:d6:a4:8d:
         f4:ba:87:57:57:19:30:40:14:84:32:7a:ed:88:af:19:9b:9d:
         46:0d:12:d3:75:80:dc:2d:8c:9f:20:d7:17:81:c3:e5:65:a9:
         ef:4c:2c:c9:0a:2f:55:c1:db:3f:70:7e:6d:bc:da:16:af:fb:
         44:db:22:b1:69:00:64:0e:5d:38:61:27:85:71:18:ad:08:19:
         c4:b3:85:30:5e:a5:ed:5c:3a:3b:59:a4:18:5d:c1:de:98:71:
         6e:77:f0:6b:cd:18:87:d5:c8:da:97:30:a0:05:22:69:8d:60:
         b1:5b:37:bf:e9:43:34:c6:f1:5f:43:47:50:db:16:7d:2e:37:
         3d:ad:42:39:93:85:a4:5c:41:28:65:d1:ec:00:44:9c:78:bf:
         ba:e7:54:4c:51:e6:f6:98:2f:7e:69:0f:a9:24:b3:4b:01:a5:
         58:9d:fe:7e:51:91:08:85:c3:2d:be:76:a8:0c:51:11:b9:51:
         bd:c1:6d:1e:5c:17:9e:a6:05:91:a9:ed:8c:c1:e1:67:03:8c:
         fd:c1:c7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:07 2026 by rpki-client