Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File:                     os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier:          VO5zkxUc8MIQBIhE6ZddltSc+R4eBAYotrkr6wDy4eA=
Subject key identifier:   E8:7C:A5:B5:17:D8:29:45:82:25:0E:93:11:9A:F2:07:30:08:12:2E
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer:       /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial:       01F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number:          01E7
Signing time:             Wed 25 Mar 2026 02:51:31 +0000
Manifest this update:     Wed 25 Mar 2026 02:51:30 +0000
Manifest next update:     Wed 01 Apr 2026 02:51:30 +0000
Files and hashes:         1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: pHOADfU7Kb24VVG7/auNoAtLH5dci8uIkA3TuxBzsVk=)
                          2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: jt/Em4DLUT3Wo1hryGzSXiSThIZtCbpBQGAGGsyRT4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
                          rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
        Validity
            Not Before: Mar 25 02:51:30 2026 GMT
            Not After : Apr  1 02:51:30 2026 GMT
        Subject: CN=69c34db2-7017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:af:52:d7:dd:c6:f1:14:40:04:73:39:77:
                    06:8c:bd:fd:88:4d:07:a5:40:71:b6:e9:47:ac:74:
                    a4:6c:20:c8:38:fd:9d:a5:49:cc:bf:48:ce:01:4e:
                    ef:90:2b:64:a8:1b:4d:17:14:91:a3:64:83:61:2d:
                    6a:06:17:ac:7d:c2:45:aa:36:f7:4a:eb:75:4b:ff:
                    5c:c4:c6:0b:43:eb:13:df:b0:98:26:00:54:1b:f2:
                    dd:2c:7b:16:bc:f0:08:a7:35:f6:10:b0:4b:6b:d2:
                    38:e6:54:30:7a:9c:2e:42:30:db:9e:31:0a:36:93:
                    39:bb:8e:41:c0:d0:bd:29:96:63:70:64:79:e7:56:
                    09:b7:40:22:00:4b:38:8b:8a:6c:2e:64:3c:1a:41:
                    1f:9a:73:0a:8f:18:27:0d:71:cb:2b:fe:6e:c3:6e:
                    4a:4c:e1:3e:34:04:6d:a0:8c:75:ed:70:96:c0:af:
                    5e:cd:af:64:48:b2:83:df:bd:03:31:19:f9:7c:88:
                    f4:ea:97:80:d7:99:f6:86:ff:b4:51:be:d8:aa:b8:
                    3d:d3:5b:7c:1a:7f:fb:43:1f:e9:10:73:57:0f:a4:
                    3d:69:43:50:fd:f1:86:84:59:f3:e0:bb:a2:01:b8:
                    e6:a2:db:9b:63:87:8a:b7:45:e8:5b:f5:50:36:2b:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7C:A5:B5:17:D8:29:45:82:25:0E:93:11:9A:F2:07:30:08:12:2E
            X509v3 Authority Key Identifier:
                keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fe:61:df:7f:b4:cf:a0:fc:bf:ec:a0:28:28:6c:f8:af:00:
         80:73:53:f6:d0:89:f1:9d:d6:67:56:4e:94:2d:84:82:c7:d0:
         a8:81:f0:27:9b:66:06:ce:38:d6:c6:02:61:c6:b2:db:fd:85:
         1d:37:f6:cc:4b:ac:b4:cb:b2:70:6a:22:e2:28:3d:55:4a:d6:
         37:8d:64:d2:e2:89:52:8a:aa:2a:88:7a:4e:5a:1e:85:c1:33:
         9b:99:fd:85:4d:da:58:90:e0:8b:b7:d1:11:db:62:91:59:4c:
         78:09:78:ff:23:ee:1e:24:8c:e5:8b:f7:d6:38:f3:32:71:4d:
         3c:a1:fe:89:5b:93:72:e7:33:9c:77:ae:1f:0e:50:b1:7e:ad:
         5d:05:61:56:29:19:b5:3a:00:ac:f3:95:ca:01:d7:5e:63:fa:
         17:b9:36:c5:d0:83:4f:3e:fe:84:34:98:b0:0c:b2:35:cf:81:
         0e:f4:b8:44:fc:a7:40:c6:27:95:98:e6:08:be:22:05:1e:d8:
         d5:fb:fe:ec:a9:f7:97:59:fd:4b:1d:4e:1c:38:18:ff:e4:29:
         88:97:b9:13:2b:dd:87:02:17:98:bd:3d:72:bd:a4:4b:84:cf:
         3a:ae:72:23:6e:a9:aa:96:e4:b0:52:9b:d5:18:e2:41:1a:88:
         e5:97:61:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:43 2026 by rpki-client