Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
File:                     A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json)
Hash identifier:          sosiYDozrObEP1C4UYe+bG2SwICeHnLKEL5sszS6Hhg=
Subject key identifier:   F2:AD:EC:F4:63:0C:30:63:D2:78:B2:9D:D9:72:59:45:48:73:E7:10
Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E
Certificate issuer:       /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
Manifest number:          05AB
Signing time:             Fri 27 Mar 2026 00:00:38 +0000
Manifest this update:     Fri 27 Mar 2026 00:00:37 +0000
Manifest next update:     Fri 03 Apr 2026 00:00:37 +0000
Files and hashes:         1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: Ejt1h0HR3VW/yu5by9CUz68V3SFYPlgGbehouVTqnoI=)
                          2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: kTVaejTylU6jn5BZ5dLXFlr8dJ5NzR00FEXTio7feKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E
        Validity
            Not Before: Mar 27 00:00:37 2026 GMT
            Not After : Apr  3 00:00:37 2026 GMT
        Subject: CN=69c5c8a6-9152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:3d:60:b7:f1:e2:30:a7:90:14:3f:66:1e:
                    39:92:60:74:31:44:75:e1:62:da:65:ea:d2:e5:11:
                    05:e7:4d:1c:19:c0:fe:99:f0:33:bf:3a:ab:21:98:
                    16:e3:63:56:1d:e9:07:91:7f:c8:45:cf:ff:5a:c2:
                    75:e7:52:62:47:30:ba:a6:5e:4a:71:3a:ba:2a:7a:
                    7c:12:c3:5f:38:2a:ae:2b:35:50:cb:14:98:26:2e:
                    d9:bf:e8:2d:3f:75:f2:41:41:3e:7e:ac:6e:af:60:
                    8e:63:df:a8:cc:e4:26:73:a9:11:7c:4f:05:82:93:
                    52:b5:84:7d:04:fa:81:b9:e6:15:5a:63:13:fe:7b:
                    01:3f:30:6e:0e:96:8b:e0:c8:55:b4:72:70:72:13:
                    07:58:8f:02:5f:70:83:e9:cd:c2:dc:81:f4:07:61:
                    2c:96:b4:4a:96:a2:28:ec:34:20:e7:cc:b2:3f:cd:
                    6c:bf:44:ee:fa:9d:88:f3:e2:7b:a6:57:3d:0d:3c:
                    62:f7:38:89:00:da:87:08:5c:7e:0b:77:37:92:23:
                    c4:22:66:aa:60:9e:7f:f3:11:cf:b9:86:84:9c:13:
                    cc:ba:2a:da:af:23:18:e1:08:f9:40:ca:89:ef:e1:
                    29:43:29:17:8c:2e:ed:00:34:f2:a8:09:ca:37:fe:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AD:EC:F4:63:0C:30:63:D2:78:B2:9D:D9:72:59:45:48:73:E7:10
            X509v3 Authority Key Identifier:
                keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:79:28:b1:db:6b:22:ca:93:52:21:c7:10:1c:10:70:bf:72:
         13:44:9a:a4:05:a3:61:49:35:9f:d8:59:cd:f3:c7:ec:d7:1a:
         3b:8b:b9:e3:50:34:ff:5c:e3:32:cf:da:8a:c5:a7:7a:92:95:
         6b:dd:b3:e0:ed:7a:50:2a:fa:29:e7:2d:07:cc:55:7d:ed:41:
         65:2d:99:33:57:29:8b:3c:e1:8f:72:73:af:97:4d:63:e7:46:
         8c:59:60:5e:da:85:97:ed:50:d2:66:e8:c6:cc:07:33:8c:b3:
         78:e4:51:58:0a:a8:67:f6:af:51:f6:58:7e:20:41:71:cf:2b:
         b3:22:58:1b:3f:8b:80:00:19:db:90:50:38:88:a3:f2:2f:f0:
         a6:49:8e:97:92:8c:c5:12:cd:69:80:0c:0a:b8:23:c5:f2:b0:
         ef:07:52:42:50:ae:2b:db:86:5a:d8:6e:6e:89:4f:6e:22:e8:
         7b:0f:ee:47:c5:7e:71:fe:be:ab:64:48:05:6e:4f:c2:bd:a4:
         fe:1b:34:42:90:b7:fa:d1:b3:7a:db:79:ae:0e:31:73:fe:d1:
         8e:76:ce:2e:e8:bd:c1:31:53:a8:99:2d:d0:90:cf:f8:5f:05:
         75:dc:aa:10:e2:e6:e5:68:df:32:9b:88:17:14:16:7d:ef:ad:
         1c:c6:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:14 2026 by rpki-client