Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
File:                     OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json)
Hash identifier:          rnuO3/v1UHAnCQ8fOJbvyG/F+yXt8wE98cAMp0hAVag=
Subject key identifier:   58:CC:CE:6A:61:BD:03:C9:AF:11:CF:C8:14:2B:51:E1:1E:D0:7F:97
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Certificate issuer:       /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
Manifest number:          51
Signing time:             Fri 27 Mar 2026 08:09:54 +0000
Manifest this update:     Fri 27 Mar 2026 08:09:53 +0000
Manifest next update:     Fri 03 Apr 2026 08:09:53 +0000
Files and hashes:         1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: wevIAgb3LQAKJXFv7qrirhA2TqvZHx0C7o/0GUOdlc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
                          rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 08:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
        Validity
            Not Before: Mar 27 08:09:53 2026 GMT
            Not After : Apr  3 08:09:53 2026 GMT
        Subject: CN=69c63b52-7b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:0a:27:4a:29:cf:e8:22:04:fa:d7:49:96:
                    ce:07:6b:f8:54:3a:f9:75:15:e7:57:4d:fe:ca:ab:
                    eb:52:2d:70:64:d5:50:f3:5d:8c:1c:8d:c8:c6:39:
                    71:db:0d:fa:e9:02:c4:cc:82:e5:bc:16:c6:a8:ab:
                    37:40:59:06:88:be:83:92:45:7e:98:35:36:f8:d6:
                    67:71:42:d8:3e:c4:a7:81:e5:c6:ab:47:0f:03:fc:
                    02:7d:f9:97:8c:eb:28:37:ba:63:7d:23:64:f1:8b:
                    c9:0b:61:8e:73:ab:8d:58:97:f9:b7:43:ee:14:84:
                    03:66:7b:ef:c7:e3:b5:7a:ec:28:4a:04:5c:1c:79:
                    42:6d:69:bd:03:13:86:63:ad:1f:d3:ee:5e:24:fb:
                    cd:78:e0:69:b8:19:05:12:aa:6a:8c:ed:da:60:06:
                    33:17:01:12:54:f9:56:9a:72:9c:63:2e:21:f8:4d:
                    58:f3:14:ce:c9:b0:ad:28:b5:c4:07:fe:f8:74:22:
                    44:c2:17:d1:46:94:68:e5:bd:92:d6:9a:5b:74:78:
                    5f:ca:b5:f2:ba:ae:a0:07:7a:59:55:ef:13:c2:85:
                    4d:53:e6:af:f4:93:eb:ff:6c:2e:33:6f:bd:30:49:
                    97:ca:28:39:22:e6:67:47:33:55:45:c9:3a:e6:c8:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CC:CE:6A:61:BD:03:C9:AF:11:CF:C8:14:2B:51:E1:1E:D0:7F:97
            X509v3 Authority Key Identifier:
                keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1d:ee:6c:12:d6:c9:35:f4:72:e9:c1:83:58:e9:cd:ee:ff:
         4f:ac:8b:b8:fd:91:46:bc:18:56:3e:7b:75:46:4e:db:2f:75:
         f0:1e:2d:47:dc:87:2a:a8:f6:6c:26:26:e8:da:2e:89:63:a1:
         4e:21:30:eb:80:81:3d:8a:88:33:f9:4a:c6:8f:fe:a3:e7:e2:
         59:c3:25:c2:6c:c2:12:25:bb:5b:28:70:6f:f8:23:50:60:0e:
         9b:a9:a8:79:ae:a7:4a:f3:ca:69:4e:00:b2:fd:0f:66:06:26:
         16:ea:e0:37:85:24:36:6f:7c:13:76:65:bd:d7:66:a2:76:22:
         0d:75:71:61:97:87:3b:b1:75:70:87:f5:3f:26:b9:77:58:1d:
         92:fd:5a:67:56:25:ba:fe:a9:a3:6f:e3:c5:cf:3e:97:60:8c:
         89:cd:45:e1:de:ba:d2:6b:33:77:05:fa:cc:13:80:37:b9:5b:
         d6:85:71:ff:4f:4e:38:b5:7c:6a:52:52:21:89:4c:ed:f5:b0:
         e1:4e:c8:9c:cb:d0:8b:4d:3e:e7:b9:f0:05:d7:8e:22:ec:52:
         05:5e:24:b9:71:50:78:05:fd:c2:fc:6a:98:6e:73:a9:e5:cd:
         83:e9:0f:62:62:75:f3:b0:08:d9:93:74:25:95:6e:f5:d7:e0:
         e6:7a:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:12:44 2026 by rpki-client