Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File:                     oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier:          tuxZmRMyVQfViDfKpShV/d4Ah/cQgM7ezXEEtV1a1xY=
Subject key identifier:   02:97:19:55:F8:47:1A:97:FD:CA:B7:1E:E9:71:99:F8:1A:9F:F2:D8
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer:       /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial:       0804
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number:          07ED
Signing time:             Tue 24 Mar 2026 21:01:13 +0000
Manifest this update:     Tue 24 Mar 2026 21:01:12 +0000
Manifest next update:     Tue 31 Mar 2026 21:01:12 +0000
Files and hashes:         1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: oOBSaMyQZdkRgXBNzcd677gfVi2H30gXJ2Te9UK9BOc=)
                          2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
                          rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
        Validity
            Not Before: Mar 24 21:01:12 2026 GMT
            Not After : Mar 31 21:01:12 2026 GMT
        Subject: CN=69c2fb99-2e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:3c:47:8e:73:6a:80:0f:9a:08:d3:a4:46:b4:
                    6e:2f:d5:dc:ec:a5:50:75:f4:90:81:f0:3b:02:18:
                    d4:9e:9b:56:a3:23:88:bf:77:7c:09:01:52:a5:30:
                    fb:b1:2c:1a:36:d5:e5:5d:7f:d6:4d:63:69:08:b1:
                    fd:1d:6f:83:ba:4a:c2:8f:93:5c:16:6e:ac:45:96:
                    f6:29:12:b9:e6:ca:ea:7e:b9:cd:36:f2:a5:28:81:
                    4b:fe:bf:29:dc:2c:06:0a:b2:b0:b8:9e:ec:c8:ae:
                    bc:81:a9:6e:ee:f4:b0:fe:34:cf:a0:d5:01:b4:15:
                    99:05:99:68:60:da:d7:d9:14:d5:e6:67:3e:2d:3f:
                    47:14:27:3c:8e:39:a1:ff:5d:f9:f2:d0:04:c1:0e:
                    ea:55:cf:21:3a:12:ab:44:89:3d:f3:ee:3f:de:29:
                    56:41:06:76:2a:94:c3:50:30:56:ca:2a:f2:21:a9:
                    51:08:1b:48:c3:f2:7b:b3:9f:82:e9:d8:63:b6:5c:
                    ef:ee:58:d0:da:71:49:00:80:a3:38:39:3f:3a:47:
                    a1:ed:f4:a9:2b:5b:1c:35:53:f7:3a:e5:71:19:ae:
                    3b:ad:ad:a9:29:d1:81:ea:e6:27:95:a7:bb:18:af:
                    18:79:3c:01:eb:a0:6a:4b:91:5b:8a:74:3c:a9:d0:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:19:55:F8:47:1A:97:FD:CA:B7:1E:E9:71:99:F8:1A:9F:F2:D8
            X509v3 Authority Key Identifier:
                keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:bf:d5:b5:72:69:88:d5:c1:33:9a:a1:f7:7d:8e:6c:cf:ea:
         58:0e:8c:5b:f6:4d:f6:60:1d:a9:1f:d4:f4:85:0e:95:54:a6:
         e4:c9:b3:bc:22:95:96:45:52:ae:75:6f:36:d7:76:d5:ae:11:
         fc:7c:74:6c:db:6f:0b:8a:8c:42:17:1d:af:a4:83:6f:e3:15:
         10:fe:93:e5:ad:1d:5d:9d:a5:77:44:f7:72:e7:8d:b2:8d:bb:
         be:46:9b:d2:b6:ab:bc:56:c2:d1:70:36:51:72:d1:a3:97:99:
         5e:13:c5:64:31:81:44:95:3e:a0:86:83:87:cb:1b:0d:be:e2:
         25:0d:28:45:51:3e:71:f3:5a:9e:b1:b2:ec:2d:a4:2b:a3:6f:
         c1:f1:16:fd:74:d2:46:14:4a:4f:ce:d5:d0:ba:28:62:d0:3b:
         6a:15:c1:60:b5:22:55:32:ff:6b:ab:07:59:28:68:fa:fb:77:
         38:f7:64:57:40:0e:26:75:ff:03:53:aa:2d:f8:40:56:77:64:
         88:5d:82:1a:15:a7:96:ca:84:f3:4d:aa:3d:56:53:ac:d4:38:
         85:68:83:dc:05:83:88:51:ac:8c:13:72:5e:00:73:a3:a0:32:
         37:f3:5f:2d:99:0f:4f:c5:53:6f:a3:13:b1:0f:37:36:75:64:
         e8:6e:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:33 2026 by rpki-client