Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
File:                     OT6njk2TI25QcfuK_61B1iQmql0.mft (raw, json)
Hash identifier:          t03amGMSgQRFZNaN+9Bla65OIxX1mQbnqFZXwotnx60=
Subject key identifier:   13:78:DE:50:B0:D6:68:48:59:22:48:28:1B:A0:27:50:98:F9:73:1B
Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
Certificate issuer:       /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
Manifest number:          F8
Signing time:             Wed 25 Mar 2026 02:07:28 +0000
Manifest this update:     Wed 25 Mar 2026 02:07:28 +0000
Manifest next update:     Wed 01 Apr 2026 02:07:28 +0000
Files and hashes:         1: OT6njk2TI25QcfuK_61B1iQmql0.crl (hash: tDK4zgmSgaOUv3IpLA/AmCtuG+NKNNbF1D/k5iuMu20=)
                          2: 3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (hash: wmWAheRVRUWaL+3QPLJN7sGparB+U18Ved7K/jnj6is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
        Validity
            Not Before: Mar 25 02:07:28 2026 GMT
            Not After : Apr  1 02:07:28 2026 GMT
        Subject: CN=69c34360-c7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:39:09:ce:3b:e2:21:da:0b:a8:e9:19:b2:
                    ec:5a:a0:3d:6f:87:3f:70:fb:eb:a5:2f:e5:1d:f5:
                    55:f9:21:fd:b8:87:41:01:74:5c:21:bb:bf:d2:41:
                    9a:c8:0a:5e:5f:8b:73:2a:75:2c:23:88:80:3a:26:
                    79:41:b1:c7:8b:c6:17:29:cd:86:c6:d4:23:b9:2f:
                    1c:84:84:3f:87:34:7c:1a:a4:66:e8:84:1b:a6:76:
                    f6:61:b0:a8:64:9e:78:73:6a:4e:61:b0:2f:03:4d:
                    a5:fe:ef:a8:44:b9:4b:c7:95:ac:2f:c9:fa:56:c2:
                    6e:87:ba:6e:7d:87:06:7e:4e:a3:7f:ae:e0:4a:dd:
                    d0:6f:21:99:bb:11:1d:1a:52:24:eb:88:4f:85:ef:
                    33:7e:b6:25:33:53:c8:8f:c3:4b:47:f7:b4:99:8b:
                    56:9b:e7:22:ca:45:7c:e9:f2:83:22:9f:f8:cc:83:
                    a5:82:b8:b8:56:7c:91:ce:5f:3d:b4:54:07:b7:86:
                    fe:16:70:53:74:97:0a:4a:2f:06:05:1f:fc:e7:bb:
                    c2:39:38:93:b9:4a:cf:fe:62:2c:13:59:71:c0:04:
                    02:62:57:9c:66:88:c9:39:7d:3b:04:19:6a:7f:81:
                    90:3b:16:39:10:44:0a:a4:ce:9a:2e:0e:02:3e:a3:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:78:DE:50:B0:D6:68:48:59:22:48:28:1B:A0:27:50:98:F9:73:1B
            X509v3 Authority Key Identifier:
                keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:61:d8:01:0a:4b:b6:ed:cf:95:23:76:91:c0:83:f1:ad:94:
         db:a5:44:83:88:75:e7:5c:ab:48:8a:06:79:a0:9f:f9:b1:55:
         11:25:71:8c:33:b6:61:c4:38:3f:18:be:fe:56:6c:96:39:d8:
         6b:ca:9c:49:36:7e:fb:94:a8:97:46:ac:20:1b:1b:76:a0:46:
         07:6a:3a:65:67:10:b9:4d:5e:77:2e:bf:7a:c4:16:28:29:71:
         87:d7:78:7c:2f:3e:bf:4b:a9:cb:0f:14:ac:32:4c:8b:76:d5:
         c2:12:95:aa:76:ef:7f:54:99:7a:d5:b9:47:ef:25:f2:0f:45:
         48:26:85:10:66:da:c3:61:03:e9:25:e6:9c:9f:8e:a0:e7:55:
         08:4b:6e:72:91:7c:93:87:6f:a0:09:b2:cd:1b:c0:be:a6:76:
         ed:3b:f8:4b:64:66:f8:69:d6:9d:49:be:09:72:d3:ef:07:71:
         31:6d:ff:b2:84:dc:fd:3d:37:fa:87:3f:44:74:70:76:34:51:
         5d:d1:ac:5e:9f:a8:e6:0c:99:f6:5f:a3:42:06:03:0a:12:ad:
         68:56:18:23:9b:a4:62:9f:a6:6b:8e:ee:fc:44:2a:81:9a:7d:
         e0:ce:72:cb:7f:d3:83:4e:e1:cc:3d:d3:de:e0:b0:14:52:68:
         a5:59:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:34 2026 by rpki-client