Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
File:                     rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json)
Hash identifier:          +g+ADLLXMcjFItHkjVNUS7n9YzORK77CuNMC/1e+9a8=
Subject key identifier:   98:B4:7E:3A:AF:5E:74:FD:10:55:91:9C:9B:23:F5:EC:E0:F4:09:E0
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Certificate issuer:       /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial:       03D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
Manifest number:          03CD
Signing time:             Fri 27 Mar 2026 00:22:59 +0000
Manifest this update:     Fri 27 Mar 2026 00:22:58 +0000
Manifest next update:     Fri 03 Apr 2026 00:22:58 +0000
Files and hashes:         1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: A2grgjAYwFD/dzliRWbLq0xTC12c6IOKSqzTjwmUXK0=)
                          2: FC159BECF4D911EFB4F5FC16C4F9AE02.roa (hash: pSZyO8DRU7k04LVzxpq4jULZp/HQ6qCZD+25WSrrumg=)
                          3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: 9ddhu2yrw8Y1Qn76lqowUGOY2CYHuc5bqh90B9kOwck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
                          rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91702B9, serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
        Validity
            Not Before: Mar 27 00:22:58 2026 GMT
            Not After : Apr  3 00:22:58 2026 GMT
        Subject: CN=69c5cde3-5838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:53:cb:d1:dd:d1:92:25:7d:63:37:bc:34:
                    e4:af:a6:2d:cd:7a:a7:c3:21:41:3d:e3:79:6b:3e:
                    59:f6:b3:d7:28:13:80:3c:f6:b8:07:37:38:48:52:
                    03:eb:a8:db:f3:b4:1c:c0:8d:5b:ba:c8:89:a0:08:
                    e6:04:d2:eb:58:1a:86:d6:d0:cb:94:6e:3a:2e:33:
                    be:37:5d:20:de:b5:ec:25:83:aa:50:e1:da:74:90:
                    8a:d7:5c:82:8e:aa:a1:8b:86:7e:66:4c:1c:fe:8e:
                    24:46:b6:0a:b3:77:47:31:01:04:7e:ff:1b:dc:31:
                    0f:86:97:d7:74:d5:ea:b4:40:c6:5c:2e:93:7c:73:
                    b5:3e:96:6a:03:65:0d:d2:8f:f1:bc:ca:a7:be:22:
                    8b:ea:1b:4c:31:54:40:66:72:3c:7e:33:f8:04:ed:
                    69:b2:47:dc:b4:8c:db:a7:37:06:c9:73:62:00:f7:
                    8e:7b:25:07:6e:ac:ec:7b:02:55:95:fd:54:60:b5:
                    f8:c1:76:1e:1a:10:27:c2:c0:04:70:c6:7c:ac:ed:
                    90:9c:6c:0e:3d:94:c6:74:7d:ea:ac:b8:e7:8a:13:
                    51:f8:10:b8:db:e7:a3:f0:03:2f:09:54:42:9a:e6:
                    42:22:0d:ff:f0:92:ef:19:fa:33:65:42:16:c2:8f:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B4:7E:3A:AF:5E:74:FD:10:55:91:9C:9B:23:F5:EC:E0:F4:09:E0
            X509v3 Authority Key Identifier:
                keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:70:4e:4d:96:e4:7a:7c:df:7a:4f:71:b2:f8:2d:7f:01:
         d9:cd:ae:30:94:8c:93:10:68:b4:b7:c8:6a:ca:b8:e5:f7:45:
         b2:d9:59:32:6c:33:5a:3b:75:e4:57:3d:33:df:9b:53:ad:e8:
         10:e1:4a:d5:38:fa:6f:e8:c5:0d:d8:9e:c6:38:39:5b:71:93:
         48:14:7e:81:03:8f:86:4e:07:66:25:b6:f3:c7:d1:16:0c:a3:
         7a:32:26:55:28:ae:3a:bb:d9:96:80:5c:e3:65:aa:e1:a4:3c:
         16:13:3f:4c:7b:0b:ab:88:c1:d5:3b:c2:bc:4c:29:f7:09:f8:
         12:92:ac:0c:e1:ea:d1:69:31:7d:28:c8:74:4a:64:af:bd:bc:
         fb:e9:1c:86:4e:ff:9d:91:ce:f1:68:16:67:43:ed:d7:fb:0f:
         23:f0:b7:36:f0:63:89:43:4f:fa:e8:56:b0:98:d7:d7:00:4c:
         79:ff:08:c6:ba:1d:3d:cc:6e:1e:da:a8:20:9b:91:13:44:9b:
         64:c2:e8:3e:7c:91:51:a6:23:12:72:5e:59:93:e7:26:c1:43:
         87:7f:da:df:0c:5a:7e:f4:27:78:c6:af:91:65:df:65:eb:79:
         aa:c2:67:70:1a:5b:31:e5:13:91:79:ff:40:ab:03:7f:f0:f0:
         be:ab:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:38 2026 by rpki-client