Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File:                     O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier:          lmhTRFO6ndhxSmgrfhbSHubGPeLEQpT8XIVL5P6SDgg=
Subject key identifier:   FD:4F:28:B9:E9:25:6A:65:7D:C7:1A:F2:C7:98:3F:2A:76:76:4A:E2
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer:       /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial:       0364
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number:          035C
Signing time:             Wed 13 May 2026 01:03:07 +0000
Manifest this update:     Wed 13 May 2026 01:03:06 +0000
Manifest next update:     Wed 20 May 2026 01:03:06 +0000
Files and hashes:         1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: VgJzIHOAsH/MomD0MzYD2D7klYwtlAKlJTY0CkwspjY=)
                          2: C78C216A070211EDB5178252C4F9AE02.roa (hash: fyu14Jx6k1oTAKIdxEeJ8rrmDDiNJP7D4BIKAgsLJek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
                          rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
        Validity
            Not Before: May 13 01:03:06 2026 GMT
            Not After : May 20 01:03:06 2026 GMT
        Subject: CN=6a03cdca-711f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:a5:4d:c0:e2:20:4f:43:b5:4c:1b:10:6f:
                    1b:56:be:1a:48:85:f1:01:82:c5:ad:09:d3:c4:f3:
                    4b:18:41:b2:84:96:10:57:29:ad:f0:75:37:d1:08:
                    5f:f1:56:a5:25:98:b8:ae:66:4a:6b:fa:52:9d:fa:
                    73:49:02:f0:db:43:1f:71:90:6d:40:b2:f5:1e:8a:
                    6b:ad:30:92:29:6c:b5:40:79:bd:8a:fd:3c:9c:01:
                    23:6f:9e:7b:f5:c1:78:a5:7f:d6:28:7a:3e:1c:2a:
                    68:2b:00:22:0a:8a:92:8b:01:20:d6:b4:37:d1:8c:
                    f1:01:31:f3:1a:a0:41:55:03:92:b9:50:ed:9a:a6:
                    6a:a7:b4:93:b1:6f:6b:7b:ac:64:8a:74:79:03:81:
                    17:b5:ce:11:83:e9:77:63:d8:ce:41:5d:35:49:d0:
                    ff:57:d5:3a:f9:41:f4:7f:71:9c:13:de:72:93:f2:
                    5e:32:b9:c7:6b:7a:46:11:32:1c:a6:76:e9:0f:63:
                    db:d7:7d:41:f6:d5:6d:aa:76:24:7c:03:5c:78:60:
                    80:ec:6b:ca:52:b6:ab:22:e1:fe:c1:3f:4c:71:83:
                    1b:93:5f:ae:6e:d5:5c:3e:0a:ae:7b:e0:3d:97:76:
                    87:cf:10:93:72:10:02:99:ff:c9:1f:a1:61:ef:2f:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:28:B9:E9:25:6A:65:7D:C7:1A:F2:C7:98:3F:2A:76:76:4A:E2
            X509v3 Authority Key Identifier:
                keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:a5:9c:ee:7c:05:20:7b:54:80:a3:7f:07:63:2e:61:ab:
         f1:42:1f:86:57:50:c4:51:b4:5c:4a:7e:b5:e7:d8:ee:3c:fb:
         a3:3b:1c:74:b7:f8:5c:05:e7:dd:4b:34:66:bb:17:12:96:d8:
         ad:1c:7e:f8:31:2d:70:d3:1e:c5:7f:03:01:4b:af:67:a1:39:
         e2:9f:67:ec:5a:77:38:64:0f:b3:2d:61:ff:ab:ce:c6:3e:57:
         ba:b7:76:00:fa:43:18:1e:0e:be:86:26:a6:ea:ef:ce:e1:82:
         75:14:9c:20:e7:c6:ab:ac:42:40:88:24:db:50:17:63:0b:84:
         e0:e6:0b:75:7a:66:bd:bc:ad:72:d1:7f:bd:ec:38:ae:fe:e3:
         44:ab:f3:02:48:e2:d1:01:16:be:d3:ca:45:2e:43:70:d7:21:
         ba:99:6e:ad:50:3b:74:40:16:da:db:ae:9f:85:a8:c4:19:a5:
         6e:83:a4:30:5d:cc:f9:45:1c:3d:d9:8c:83:63:9d:f9:a1:29:
         e6:90:07:be:2d:3a:ff:eb:ae:e7:e9:b4:3d:19:df:77:40:11:
         63:eb:b8:37:ba:3c:f1:2d:57:67:4c:c6:39:c6:56:f0:92:0a:
         4f:52:ff:d4:ca:4b:08:25:74:bd:7b:05:f9:b2:17:b1:58:b6:
         2a:b2:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:56 2026 by rpki-client