Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
File:                     OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json)
Hash identifier:          /Qswoj4WZsWWaY3BgwXK5kbfmV31F2ucadqu9qaOYuk=
Subject key identifier:   B7:1A:A9:24:A4:4F:7F:39:BA:E9:0E:66:C1:A2:6F:36:D8:9D:00:F1
Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
Certificate issuer:       /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
Manifest number:          010F
Signing time:             Wed 25 Mar 2026 05:12:12 +0000
Manifest this update:     Wed 25 Mar 2026 05:12:12 +0000
Manifest next update:     Wed 01 Apr 2026 05:12:12 +0000
Files and hashes:         1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: BMUzTcAsy/VHEb5A/THYDshZ/RI1FiHZ1oF4Rw38p9Y=)
                          2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: dKI7uA/SKO3RusYnEdr0A/ZscE+vPWKaXvZ4/iotjxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
        Validity
            Not Before: Mar 25 05:12:12 2026 GMT
            Not After : Apr  1 05:12:12 2026 GMT
        Subject: CN=69c36eac-bc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:ca:7f:ce:0b:94:39:54:c1:e6:cf:83:4d:
                    68:5d:dc:b8:e7:0a:f1:49:86:6f:13:33:19:74:44:
                    12:e7:c9:1f:58:4f:70:00:40:5c:19:ac:c7:dd:6f:
                    32:b6:ed:33:83:38:5e:d7:23:b2:00:58:08:25:ed:
                    c7:f1:ed:90:87:b5:b9:57:28:5b:12:78:f8:f6:f0:
                    e2:db:f3:45:a4:2f:5f:ba:98:3f:82:5a:02:bc:0a:
                    bf:3a:e0:d4:4b:c1:57:d5:f0:a8:13:ac:24:df:02:
                    9d:fe:1e:91:a6:27:fd:60:c0:2d:c8:be:ae:1a:26:
                    67:63:4b:e2:09:a6:55:33:e2:80:7c:02:ee:e7:56:
                    94:41:39:13:bf:4a:8d:b9:7a:ec:6e:27:ab:f4:da:
                    12:f4:9c:aa:33:2a:52:b4:ba:84:3b:e9:33:03:5f:
                    31:93:8b:f8:e4:4f:d8:48:5d:78:43:0d:00:e8:f4:
                    ef:39:6b:d8:e9:60:08:dc:83:a8:ae:e6:d3:36:2b:
                    2c:50:74:e1:90:50:b7:f6:c5:57:23:8c:65:d1:62:
                    1e:54:a6:0e:8c:0a:b1:03:9c:73:e8:cc:fd:fd:71:
                    80:ef:81:77:63:23:79:d2:5c:e7:89:7e:c6:62:96:
                    3c:a7:6b:f6:52:54:e8:ac:ca:23:71:4f:d7:5d:55:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1A:A9:24:A4:4F:7F:39:BA:E9:0E:66:C1:A2:6F:36:D8:9D:00:F1
            X509v3 Authority Key Identifier:
                keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:41:d3:c1:b1:ef:a1:c7:f4:7d:3d:d1:73:51:bc:ee:3d:42:
         7e:8e:83:8f:2f:a3:9e:37:11:74:8e:e4:95:51:46:ef:57:09:
         10:0f:34:44:90:67:a8:78:9d:1f:53:8c:95:32:ba:00:4b:bb:
         cd:e0:45:6f:ac:b6:76:72:04:b7:89:8c:8b:5d:d1:fc:4c:2a:
         06:0b:b7:a0:db:d8:1f:26:4c:80:ea:ca:3e:2b:46:93:c7:57:
         ce:c8:a1:73:35:02:3a:f3:92:13:7e:aa:11:f2:f5:b8:5f:42:
         d3:05:e4:65:5d:f0:1a:ac:14:b8:50:f9:e5:da:f9:c2:c2:a6:
         81:4e:33:10:23:5c:ec:90:ef:19:60:3a:23:0d:d4:9b:c1:47:
         21:59:1b:16:34:78:97:29:b4:f2:c0:70:d7:85:aa:95:98:31:
         5f:45:73:63:e8:f2:12:dd:b4:eb:36:48:4d:f9:f7:87:cd:3d:
         08:74:d3:18:c4:2d:46:48:f2:ac:80:ba:56:c1:56:1a:d7:a2:
         68:66:af:ac:6e:a4:42:c1:2c:b0:6e:81:f5:21:11:c6:46:bc:
         b6:db:78:0b:db:d4:88:ee:ad:5f:59:59:3e:d0:42:cd:eb:af:
         d4:b9:a3:54:99:4b:91:10:81:02:29:bc:76:0e:42:89:38:22:
         31:c0:c8:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ4OEYxMTAvBgNVBAUTKDM5NDNENDI2MTU3OUNERTBFODJBMDVDQTJBQjU0QjM4
N0JBNTE5MzMwHhcNMjYwMzI1MDUxMjEyWhcNMjYwNDAxMDUxMjEyWjAYMRYwFAYD
VQQDEw02OWMzNmVhYy1iYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo9jKf84LlDlUwebPg01oXdy45wrxSYZvEzMZdEQS58kfWE9wAEBcGazH3W8y
tu0zgzhe1yOyAFgIJe3H8e2Qh7W5VyhbEnj49vDi2/NFpC9fupg/gloCvAq/OuDU
S8FX1fCoE6wk3wKd/h6Rpif9YMAtyL6uGiZnY0viCaZVM+KAfALu51aUQTkTv0qN
uXrsbier9NoS9JyqMypStLqEO+kzA18xk4v45E/YSF14Qw0A6PTvOWvY6WAI3IOo
rubTNissUHThkFC39sVXI4xl0WIeVKYOjAqxA5xz6Mz9/XGA74F3YyN50lzniX7G
YpY8p2v2UlTorMojcU/XXVUlvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcaqSSk
T385uukOZsGibzbYnQDxMB8GA1UdIwQYMBaAFDlD1CYVec3g6CoFyiq1Szh7pRkz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri84NEE1QkM4MDkw
NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXplRG9LZ1hLS3JWTE9IdWxH
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDg4Ri84NEE1QkM4MDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXpl
RG9LZ1hLS3JWTE9IdWxHVE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaUHTwbHvocf0fT3Rc1G87j1Cfo6Djy+jnjcRdI7klVFG71cJEA80RJBnqHid
H1OMlTK6AEu7zeBFb6y2dnIEt4mMi13R/EwqBgu3oNvYHyZMgOrKPitGk8dXzsih
czUCOvOSE36qEfL1uF9C0wXkZV3wGqwUuFD55dr5wsKmgU4zECNc7JDvGWA6Iw3U
m8FHIVkbFjR4lym08sBw14WqlZgxX0VzY+jyEt206zZITfn3h809CHTTGMQtRkjy
rIC6VsFWGteiaGavrG6kQsEssG6B9SERxka8ttt4C9vUiO6tX1lZPtBCzeuv1Lmj
VJlLkRCBAim8dg5CiTgiMcDI1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:47 2026 by rpki-client