Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File:                     0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier:          xZv25QI4dQe/5lJW5ItopCyC/VlK5aBZLF4c28SA+yg=
Subject key identifier:   C2:AD:51:B5:FC:F8:6E:18:D6:C5:4A:4A:D3:E5:1A:8B:DB:47:F7:02
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer:       /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number:          024D
Signing time:             Wed 25 Mar 2026 01:47:36 +0000
Manifest this update:     Wed 25 Mar 2026 01:47:35 +0000
Manifest next update:     Wed 01 Apr 2026 01:47:35 +0000
Files and hashes:         1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: lejACb79koOdmpdDGyxC7T7Z6FDNNeF+FE5Gyuh524o=)
                          2: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=)
                          3: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
                          rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
        Validity
            Not Before: Mar 25 01:47:35 2026 GMT
            Not After : Apr  1 01:47:35 2026 GMT
        Subject: CN=69c33eb8-2a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:87:66:47:b3:53:81:c3:e1:81:d8:ea:f5:
                    eb:d3:ff:ea:48:1a:d3:dd:ea:22:42:22:c8:f9:8a:
                    60:78:50:65:24:4b:9a:04:0f:e3:13:4b:c1:11:ce:
                    f1:97:71:46:42:99:3a:1f:a8:7a:53:ec:9e:78:7b:
                    b5:cc:85:b6:d1:bd:fb:fb:f7:5a:10:a3:fc:b2:7d:
                    47:1e:ab:37:68:2d:74:d8:b9:c1:94:46:0a:4c:15:
                    47:8e:ac:1e:75:b3:c8:29:d4:99:28:95:49:7d:2d:
                    13:57:63:6f:54:b2:42:08:58:49:73:02:5c:92:16:
                    93:0c:2b:13:73:ed:92:96:2d:5f:44:6e:7f:18:8a:
                    2d:92:58:a3:62:d5:eb:f9:ea:b3:19:d3:91:00:bf:
                    49:b9:5d:f4:ab:68:13:7e:be:e8:f4:4f:d4:54:19:
                    4a:f1:67:7c:86:ca:6d:ba:b8:d4:82:72:97:be:6c:
                    48:2f:42:d6:3e:42:31:53:6e:6f:ea:22:41:bc:6e:
                    db:0c:69:00:8e:60:73:4f:c8:b2:f3:47:8d:66:f5:
                    09:53:9a:70:77:8a:ca:ba:dc:85:cb:3c:ec:10:92:
                    22:f7:b9:c9:93:f3:ae:43:fd:e7:ed:a6:4f:30:20:
                    03:f1:73:44:82:71:ea:f7:00:82:77:ad:ac:c2:fd:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:51:B5:FC:F8:6E:18:D6:C5:4A:4A:D3:E5:1A:8B:DB:47:F7:02
            X509v3 Authority Key Identifier:
                keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:13:6e:d9:1d:a2:36:b1:c4:21:f0:df:05:8f:1b:6d:66:
         b0:94:11:50:25:e4:16:48:d5:11:bb:60:4e:3b:fb:8d:71:bb:
         5c:ac:96:d5:80:03:a5:96:6c:b1:52:8a:e6:b7:f2:54:f1:82:
         a8:c4:5a:8f:81:ba:9b:d5:9d:b0:5c:42:1b:55:d7:f9:ae:15:
         80:30:7c:9b:06:89:43:9b:4a:cd:e3:e8:c4:7d:b1:87:b9:fc:
         35:f7:f0:79:09:c9:35:9e:a5:72:43:e8:33:90:ef:8b:0e:0d:
         c3:44:6b:39:41:15:83:dc:a6:d7:e2:12:b7:8f:67:de:c7:71:
         8e:10:e0:b2:fc:f7:53:d5:ae:58:25:36:af:e5:e3:84:a6:67:
         95:4b:40:7c:2c:e2:17:0b:d4:f3:69:d3:c2:a7:c0:a8:97:38:
         17:6f:3f:d3:78:d1:04:cd:79:0f:e2:8c:e5:e8:1a:ce:95:dc:
         ce:b5:08:2a:91:a9:29:83:31:4c:d9:6f:3f:b6:b7:e9:cd:12:
         b4:fa:39:d6:08:41:85:51:a8:d4:1c:79:62:ec:7b:47:b5:1f:
         3e:8d:ea:e0:57:26:7b:53:0a:95:7d:cd:ca:af:5a:e4:99:3d:
         2e:e9:e3:80:0c:65:92:78:6a:19:2d:d8:17:d2:84:89:5e:04:
         35:62:2e:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE
N0E4MzI5RDAwHhcNMjYwMzI1MDE0NzM1WhcNMjYwNDAxMDE0NzM1WjAYMRYwFAYD
VQQDEw02OWMzM2ViOC0yYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArFyHZkezU4HD4YHY6vXr0//qSBrT3eoiQiLI+YpgeFBlJEuaBA/jE0vBEc7x
l3FGQpk6H6h6U+yeeHu1zIW20b37+/daEKP8sn1HHqs3aC102LnBlEYKTBVHjqwe
dbPIKdSZKJVJfS0TV2NvVLJCCFhJcwJckhaTDCsTc+2Sli1fRG5/GIotklijYtXr
+eqzGdORAL9JuV30q2gTfr7o9E/UVBlK8Wd8hspturjUgnKXvmxIL0LWPkIxU25v
6iJBvG7bDGkAjmBzT8iy80eNZvUJU5pwd4rKutyFyzzsEJIi97nJk/OuQ/3n7aZP
MCAD8XNEgnHq9wCCd62swv2BfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKtUbX8
+G4Y1sVKStPlGovbR/cCMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE
QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS
STBXZDRCdTBBUFRYcURLZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ88TbtkdojaxxCHw3wWPG21msJQRUCXkFkjVEbtgTjv7jXG7XKyW1YADpZZs
sVKK5rfyVPGCqMRaj4G6m9WdsFxCG1XX+a4VgDB8mwaJQ5tKzePoxH2xh7n8Nffw
eQnJNZ6lckPoM5Dviw4Nw0RrOUEVg9ym1+ISt49n3sdxjhDgsvz3U9WuWCU2r+Xj
hKZnlUtAfCziFwvU82nTwqfAqJc4F28/03jRBM15D+KM5egazpXczrUIKpGpKYMx
TNlvP7a36c0StPo51ghBhVGo1Bx5Yux7R7UfPo3q4Fcme1MKlX3Nyq9a5Jk9Lunj
gAxlknhqGS3YF9KEiV4ENWIu0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:32 2026 by rpki-client