Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
File:                     O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json)
Hash identifier:          wlDrTczWzx8CHwB2/4dCfbZDwbmxzBUC4rD6O8UBnHU=
Subject key identifier:   F7:99:49:E4:77:A6:50:7D:93:9A:2E:DB:49:D0:6B:A1:36:22:11:16
Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
Certificate issuer:       /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
Certificate serial:       0816
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
Manifest number:          07FB
Signing time:             Tue 24 Mar 2026 20:57:47 +0000
Manifest this update:     Tue 24 Mar 2026 20:57:46 +0000
Manifest next update:     Tue 31 Mar 2026 20:57:46 +0000
Files and hashes:         1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: OTP5Mt3/gReJknIWisECYdfoYWXgYg27Zg51Mip2Rk0=)
                          2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: 5MbzWeSizcZ+fI1SVAcYiTyKAUTIOGDA65fh3pICN7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl
                          rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
        Validity
            Not Before: Mar 24 20:57:46 2026 GMT
            Not After : Mar 31 20:57:46 2026 GMT
        Subject: CN=69c2facb-d9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:99:3e:3c:6c:32:5e:92:7a:ba:94:3b:19:
                    0f:0a:ad:5c:eb:2c:5c:ad:b3:07:fd:5c:a6:7b:c5:
                    cd:9f:bf:e2:54:1a:24:e6:ad:4f:fc:82:d4:c0:b9:
                    da:56:c8:6a:6e:fc:d9:0a:e3:7d:80:39:17:dc:9c:
                    29:cf:40:71:42:a5:bc:81:46:33:fa:57:b8:66:b0:
                    88:3d:04:30:cd:7f:7f:d1:48:25:af:5f:46:e5:17:
                    e3:49:49:8f:61:fb:6c:80:1b:66:87:88:71:bd:d8:
                    74:ba:1d:ad:1c:10:88:b0:5f:bd:0d:a6:d6:2e:00:
                    e3:d5:fb:97:8b:b1:ec:17:7b:e1:66:b0:c5:ec:f1:
                    d9:7d:e2:9d:e9:2d:b0:ff:ff:5f:e9:a4:cd:6e:cf:
                    27:ba:f2:6a:e3:cd:b7:d9:a1:fc:4a:be:89:a5:33:
                    61:de:80:5a:29:87:22:b8:6c:e0:44:2d:36:d1:32:
                    08:5d:8f:c9:33:68:4e:a9:38:37:97:bd:48:71:3b:
                    16:41:98:43:a5:65:11:2c:76:b4:93:26:1a:81:02:
                    d0:c9:70:38:5f:88:25:2c:05:38:d0:dc:6a:bb:c5:
                    f3:92:61:10:fa:1d:0b:57:16:0c:f0:3d:2b:fa:a6:
                    7f:cd:e0:d8:64:4c:f3:81:77:ea:61:15:4c:5e:20:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:99:49:E4:77:A6:50:7D:93:9A:2E:DB:49:D0:6B:A1:36:22:11:16
            X509v3 Authority Key Identifier:
                keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:83:77:d9:14:22:e4:f7:e3:e5:04:11:23:e8:6b:23:d4:ff:
         b7:fe:b1:24:fa:ed:b6:0e:c7:ef:c7:53:5f:a4:db:a4:f6:3f:
         cc:d1:b4:dc:12:4d:80:e3:e8:38:23:4d:95:f7:bf:a0:51:26:
         a6:fd:9b:9f:91:6f:fb:6f:44:84:90:78:6a:41:91:1f:64:53:
         7b:4e:ff:23:96:df:ba:14:5e:b2:8d:f4:03:83:18:3d:83:b4:
         18:ad:6e:a8:3b:cf:6d:7a:cb:56:95:7c:fe:c2:f8:c6:9d:42:
         61:e7:d1:9d:57:35:f3:4d:a3:41:c5:fd:67:eb:09:e6:b1:3f:
         ef:ce:42:8a:75:5e:f2:95:95:c9:95:e2:5e:b2:84:df:1e:f8:
         52:4e:aa:6d:60:d9:0a:25:62:e7:8d:04:f6:66:00:c9:4a:d7:
         ea:75:45:53:3e:f6:be:3f:55:71:b3:49:30:41:60:47:27:34:
         3c:3e:61:0f:f8:5c:9a:e5:11:0f:7d:d1:da:74:fb:18:26:8a:
         65:a2:f8:06:3d:4b:12:9f:22:33:c4:a4:26:1f:b6:bd:85:15:
         6f:b8:1f:8d:62:d0:e2:6a:ff:1d:ac:38:4d:c8:cd:38:a7:11:
         dc:33:08:17:fd:9c:07:83:ba:13:0c:7f:18:3c:d5:34:15:49:
         f8:90:69:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDQkUxMTAvBgNVBAUTKDNCQjA1MUE3REFCQTY4N0ZFM0E1NjFFMzhGNDdCOTUw
NDY3QzU3MUUwHhcNMjYwMzI0MjA1NzQ2WhcNMjYwMzMxMjA1NzQ2WjAYMRYwFAYD
VQQDEw02OWMyZmFjYi1kOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyOqZPjxsMl6SerqUOxkPCq1c6yxcrbMH/Vyme8XNn7/iVBok5q1P/ILUwLna
VshqbvzZCuN9gDkX3Jwpz0BxQqW8gUYz+le4ZrCIPQQwzX9/0Uglr19G5RfjSUmP
YftsgBtmh4hxvdh0uh2tHBCIsF+9DabWLgDj1fuXi7HsF3vhZrDF7PHZfeKd6S2w
//9f6aTNbs8nuvJq48232aH8Sr6JpTNh3oBaKYciuGzgRC020TIIXY/JM2hOqTg3
l71IcTsWQZhDpWURLHa0kyYagQLQyXA4X4glLAU40Nxqu8XzkmEQ+h0LVxYM8D0r
+qZ/zeDYZEzzgXfqYRVMXiDbAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPeZSeR3
plB9k5ou20nQa6E2IhEWMB8GA1UdIwQYMBaAFDuwUafaumh/46Vh449HuVBGfFce
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRS8wNjdGNDcyMDIz
MzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFIX2pwV0hqajBlNVVFWjhW
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL083QlJwOXE2YUhfanBXSGpqMGU1VUVaOFZ4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NENCRS8wNjdGNDcyMDIzMzAxMUVCQkE4Qzc3NEJDNEY5QUUwMi9PN0JScDlxNmFI
X2pwV0hqajBlNVVFWjhWeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKYN32RQi5Pfj5QQRI+hrI9T/t/6xJPrttg7H78dTX6TbpPY/zNG03BJNgOPo
OCNNlfe/oFEmpv2bn5Fv+29EhJB4akGRH2RTe07/I5bfuhReso30A4MYPYO0GK1u
qDvPbXrLVpV8/sL4xp1CYefRnVc1802jQcX9Z+sJ5rE/785CinVe8pWVyZXiXrKE
3x74Uk6qbWDZCiVi540E9mYAyUrX6nVFUz72vj9VcbNJMEFgRyc0PD5hD/hcmuUR
D33R2nT7GCaKZaL4Bj1LEp8iM8SkJh+2vYUVb7gfjWLQ4mr/Haw4TcjNOKcR3DMI
F/2cB4O6Ewx/GDzVNBVJ+JBp9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:33 2026 by rpki-client