Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File:                     OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier:          t5bj6lZ3pzEdabRpsjYmMMRFE8yXGv2c1usnht6KDJ4=
Subject key identifier:   CC:12:4A:BC:11:56:29:F9:9B:30:47:D7:CE:75:50:EA:DA:27:15:B4
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer:       /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial:       1067
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number:          104E
Signing time:             Tue 24 Mar 2026 17:18:09 +0000
Manifest this update:     Tue 24 Mar 2026 17:18:09 +0000
Manifest next update:     Tue 31 Mar 2026 17:18:09 +0000
Files and hashes:         1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: tve4ihmEpba8FONRxLVNWi90HlMxT3CO1iZuVEmts0Q=)
                          2: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: aubLihlPiRMZcAing3eyikSdQeQcGYLWa8aEgV6rMbw=)
                          3: 24528B3C076811F1A996F976023D8C67.roa (hash: xScZjBZZvVOj75CzK0I4g7RaS0lDSWrcyuO5cQw8+S4=)
                          4: 23D70458076811F1A996F976023D8C67.roa (hash: P/jKVKxpnPS5oM0vxp1cgktFei7qJGJt+hIa7BJlhbs=)
                          5: ADFF1B80076711F1A8EB0774023D8C67.roa (hash: 7k/0PH5nSqAO2g0oYdL/sS5gQW9gOR4413PNtJehi7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4199 (0x1067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
        Validity
            Not Before: Mar 24 17:18:09 2026 GMT
            Not After : Mar 31 17:18:09 2026 GMT
        Subject: CN=69c2c751-4ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8d:02:ff:85:01:e4:b7:23:18:93:23:48:1c:
                    17:3b:26:f5:18:d8:67:e5:60:f4:6c:0c:8b:6b:b8:
                    f6:81:1b:ce:06:19:1a:31:a0:0e:0c:d5:62:3b:35:
                    19:4e:70:08:2c:9c:e3:13:19:a5:a5:17:b2:da:4f:
                    47:21:72:7a:22:8f:bf:95:d2:48:d4:97:d2:22:22:
                    ba:41:da:6a:e7:b4:f4:26:e3:19:3a:5b:1e:9f:d2:
                    64:81:52:dd:95:a0:9a:c5:62:69:d6:56:3c:f9:10:
                    3e:ac:8f:d2:64:4d:f0:d9:23:51:72:d8:74:0a:07:
                    51:09:59:a9:ff:b6:d9:52:c7:f6:72:63:24:27:be:
                    fe:9e:cd:1a:c6:2d:a5:6f:73:37:9f:58:d5:2f:09:
                    dd:a0:4a:6d:5a:24:e6:70:cc:ed:d2:d7:3a:73:40:
                    13:17:77:2f:78:c7:0a:f1:55:b3:49:d2:49:cc:36:
                    16:39:8d:78:3d:ed:e4:17:3c:5c:8f:9f:cf:b0:89:
                    c8:87:a6:6a:4a:82:fc:09:7f:97:bb:f1:f1:e2:a4:
                    82:a9:c7:50:71:d6:f8:72:04:af:65:d4:5d:1d:ce:
                    7d:77:3b:42:8f:ed:c4:75:d4:8b:52:1c:4d:8a:a9:
                    e7:d2:a3:54:1e:b2:de:93:1b:72:a7:e1:4b:e2:09:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:12:4A:BC:11:56:29:F9:9B:30:47:D7:CE:75:50:EA:DA:27:15:B4
            X509v3 Authority Key Identifier:
                keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7b:d9:fa:60:89:1c:19:a0:4f:c2:1e:40:13:02:65:e6:e5:
         f3:64:a6:68:03:1d:eb:a7:98:8f:62:75:84:78:7f:cc:f8:85:
         4a:95:ff:d0:a8:93:4d:87:7e:58:b9:1e:cd:4d:39:45:08:60:
         cb:1d:21:09:76:b2:36:94:73:db:65:07:1f:eb:dc:a4:53:71:
         32:fd:84:47:fb:db:96:bd:6f:8a:6c:1f:47:13:7c:2a:24:56:
         37:c9:92:ba:d3:9c:f1:01:60:7a:86:60:a0:61:b7:91:62:ad:
         18:e3:cd:98:e6:b6:f4:e1:21:85:c7:5e:f0:71:46:fe:4d:dd:
         77:f8:30:a0:99:d3:f6:ad:ba:b1:5a:6b:63:c7:2d:89:b9:0f:
         f0:87:d5:69:f4:e5:69:cb:61:ad:4f:42:b9:4f:db:36:b3:73:
         0b:b6:3e:b8:9e:52:4b:33:83:fe:8d:3f:c7:1f:c1:48:d9:7d:
         b5:18:d5:7f:dd:4a:41:3e:ce:73:73:45:36:37:68:04:b9:c8:
         58:79:fd:bc:34:8b:01:99:df:76:6f:ba:26:8a:ce:c0:97:56:
         fc:74:10:da:bb:ed:2f:79:0e:f7:e5:9d:b8:e1:8f:2f:3d:9c:
         bb:1f:c7:a6:ba:94:0b:ec:55:b4:4b:03:9f:d2:fb:6c:76:1b:
         84:3f:a9:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy
Q0Y3OTI5NEQwHhcNMjYwMzI0MTcxODA5WhcNMjYwMzMxMTcxODA5WjAYMRYwFAYD
VQQDEw02OWMyYzc1MS00YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA840C/4UB5LcjGJMjSBwXOyb1GNhn5WD0bAyLa7j2gRvOBhkaMaAODNViOzUZ
TnAILJzjExmlpRey2k9HIXJ6Io+/ldJI1JfSIiK6Qdpq57T0JuMZOlsen9JkgVLd
laCaxWJp1lY8+RA+rI/SZE3w2SNRcth0CgdRCVmp/7bZUsf2cmMkJ77+ns0axi2l
b3M3n1jVLwndoEptWiTmcMzt0tc6c0ATF3cveMcK8VWzSdJJzDYWOY14Pe3kFzxc
j5/PsInIh6ZqSoL8CX+Xu/Hx4qSCqcdQcdb4cgSvZdRdHc59dztCj+3EddSLUhxN
iqnn0qNUHrLekxtyp+FL4gmBuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwSSrwR
Vin5mzBH1851UOraJxW0MB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC
QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUUxNi8xNzQ4ODU1MDVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4
ZlpObFNLTWlPTGdzOTVLVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl3vZ+mCJHBmgT8IeQBMCZebl82SmaAMd66eYj2J1hHh/zPiFSpX/0KiTTYd+
WLkezU05RQhgyx0hCXayNpRz22UHH+vcpFNxMv2ER/vblr1vimwfRxN8KiRWN8mS
utOc8QFgeoZgoGG3kWKtGOPNmOa29OEhhcde8HFG/k3dd/gwoJnT9q26sVprY8ct
ibkP8IfVafTlacthrU9CuU/bNrNzC7Y+uJ5SSzOD/o0/xx/BSNl9tRjVf91KQT7O
c3NFNjdoBLnIWHn9vDSLAZnfdm+6JorOwJdW/HQQ2rvtL3kO9+WduOGPLz2cux/H
prqUC+xVtEsDn9L7bHYbhD+p7w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:10 2026 by rpki-client