Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
File:                     o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json)
Hash identifier:          uz2p+Un1FWsxtz7NjpuOXsijkhI/NWyi0PArUfTQzB4=
Subject key identifier:   67:D6:FC:0A:8A:31:3B:0F:CA:98:06:CA:C4:62:9F:4B:71:51:D3:79
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Certificate issuer:       /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
Manifest number:          89
Signing time:             Wed 25 Mar 2026 06:48:47 +0000
Manifest this update:     Wed 25 Mar 2026 06:48:46 +0000
Manifest next update:     Wed 01 Apr 2026 06:48:46 +0000
Files and hashes:         1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: fGPRbtAS7X2DIvSSU+wfOnSfWzXT9guLqlX94FCyvJE=)
                          2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: X8cGL1QZAJHz7KDH62TgirLobR0d4YLXS1ArwiUOvzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
                          rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
        Validity
            Not Before: Mar 25 06:48:46 2026 GMT
            Not After : Apr  1 06:48:46 2026 GMT
        Subject: CN=69c3854f-7424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:7c:a9:1a:9c:72:38:49:e7:7e:d9:f4:cd:
                    8d:38:1b:a3:97:e4:4d:f1:59:3b:b1:e8:91:b5:e6:
                    47:66:a8:7b:f9:80:69:00:90:75:51:1f:33:0a:ca:
                    9d:2a:e4:a6:8a:c3:0c:82:c0:21:82:97:c5:20:66:
                    9a:0e:04:a2:a6:d5:1f:88:ae:4c:5e:a2:b6:1c:2f:
                    61:f4:9a:a8:f9:b4:29:29:fc:ac:eb:7b:f1:a1:84:
                    51:3c:5b:2f:42:ae:16:e6:60:df:34:a9:ee:c5:aa:
                    7a:77:e9:07:8a:f8:9b:42:a7:be:b9:13:f7:30:ed:
                    15:a1:19:c7:6e:10:36:47:7f:9e:20:5a:95:8b:aa:
                    d9:5a:55:e1:11:b2:25:ce:74:cc:f3:71:cf:96:9e:
                    d0:fb:64:79:8f:34:28:9b:f7:e9:0c:e9:74:00:78:
                    0e:58:f2:08:6b:19:2d:db:2b:5e:08:9e:a5:5c:a7:
                    67:15:5c:29:12:d8:06:b8:2e:51:31:1e:50:71:a4:
                    5a:fb:80:8a:29:7d:bf:93:bd:cd:53:2a:73:98:3e:
                    f5:01:73:41:ac:13:cd:2c:2d:1b:33:1a:62:a1:5a:
                    f5:4b:bb:8d:0c:33:5e:89:45:c4:25:f5:0b:d1:6c:
                    b8:d5:bc:42:f5:39:a1:92:e7:47:f0:f7:91:84:f2:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D6:FC:0A:8A:31:3B:0F:CA:98:06:CA:C4:62:9F:4B:71:51:D3:79
            X509v3 Authority Key Identifier:
                keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:00:43:96:2f:bc:eb:25:a6:28:af:9d:c5:84:04:cf:f5:6c:
         5e:21:35:4c:e9:82:c2:1c:42:d5:c8:5c:49:91:41:7d:02:c5:
         01:a4:b6:24:5c:30:64:5c:c1:50:6c:52:ec:d7:b8:48:09:34:
         eb:a5:8c:bd:a6:f3:98:3e:5b:1d:b2:e0:82:7e:bd:63:0b:95:
         93:77:92:42:38:30:34:2e:54:62:11:8d:fe:b3:ce:dc:60:4f:
         09:a5:e2:99:e7:89:df:e9:bf:54:2e:5d:7f:02:6a:c2:25:94:
         d3:f9:07:a4:a9:6e:9e:52:d9:84:a0:10:87:07:a5:ae:38:83:
         69:63:fb:99:41:33:5a:ad:e6:2b:d4:dc:79:f1:4d:32:06:93:
         22:5e:dd:c6:2c:c8:e4:a9:0d:d4:91:05:7b:5b:24:aa:ac:87:
         1d:1c:8f:18:b9:77:9d:bb:a4:34:70:a1:e3:74:e6:3b:59:8c:
         b1:04:70:91:4b:a8:ce:49:f0:e5:7d:48:b0:71:52:9e:e0:fe:
         e4:c2:13:d6:36:ce:9f:fa:c6:08:7c:83:18:f3:b9:19:60:31:
         55:a3:17:96:8c:f5:eb:c3:e7:c1:17:7e:92:1c:56:55:0e:23:
         84:71:b1:c4:3e:4c:7b:ba:b6:7d:d2:26:e4:f0:f2:3b:7c:a6:
         07:cd:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:07 2026 by rpki-client