Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
File:                     OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json)
Hash identifier:          CjO2j35HGjwScolGRZEeNWbi0iBd7tTgM9bD3jPtyQE=
Subject key identifier:   76:92:E5:41:5B:91:E6:B7:23:BF:B3:02:0B:24:65:AE:E2:E3:78:40
Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
Certificate issuer:       /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Certificate serial:       142A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
Manifest number:          141E
Signing time:             Tue 24 Mar 2026 16:48:09 +0000
Manifest this update:     Tue 24 Mar 2026 16:48:09 +0000
Manifest next update:     Tue 31 Mar 2026 16:48:09 +0000
Files and hashes:         1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: uxOZNjAk9ezF1HfVUwVq2GDgAZykPaYdX3wpXbRHaUY=)
                          2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: 3poz9WeE/VQCro0QqBaX5PdACtIqSQyu6Jy9OGfa5do=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
                          rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5162 (0x142a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
        Validity
            Not Before: Mar 24 16:48:09 2026 GMT
            Not After : Mar 31 16:48:09 2026 GMT
        Subject: CN=69c2c049-add6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:ee:f4:aa:e7:50:77:97:be:e8:73:54:d6:
                    fc:95:74:fa:9d:96:ba:7d:54:17:0e:33:16:c9:4e:
                    97:3b:0a:49:e3:da:2c:8c:8d:84:f9:6c:f6:46:eb:
                    c3:3f:38:3e:e2:30:0e:43:a6:ea:51:a1:9d:59:9a:
                    ca:a8:25:1b:6d:e4:a7:76:63:68:96:ce:6b:d2:ec:
                    da:18:c8:a0:d6:a5:bc:84:80:f8:40:93:04:bc:4a:
                    97:10:9a:d2:48:cc:2b:ed:fd:6d:1c:c5:ff:ad:64:
                    8d:01:49:eb:8b:df:d3:68:68:14:4e:8d:76:ca:c6:
                    51:a8:e9:cb:5b:3c:90:ab:fb:60:15:a9:0e:41:e1:
                    58:11:1e:21:13:bd:91:c2:a4:1d:a1:74:5e:50:d3:
                    6b:fc:2a:06:8e:7d:c0:80:dd:af:7c:f5:75:10:dc:
                    3a:22:6a:88:2c:09:87:07:c7:64:4f:17:f9:7e:aa:
                    ff:8b:8e:07:5d:76:29:94:22:a1:bd:ab:b1:07:37:
                    2f:f7:10:8a:fd:3e:86:1d:b9:5f:73:4e:60:55:38:
                    7c:c3:ef:ee:cb:1f:db:cc:c2:7f:bd:4d:a5:ec:46:
                    e8:99:d3:50:4c:fc:67:57:29:00:22:ea:8d:f6:e4:
                    84:72:a3:28:52:e1:59:85:f2:61:21:16:d2:2c:de:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:92:E5:41:5B:91:E6:B7:23:BF:B3:02:0B:24:65:AE:E2:E3:78:40
            X509v3 Authority Key Identifier:
                keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:58:fc:79:d7:27:7b:57:41:66:58:f0:55:5a:b9:a1:5e:
         14:28:dc:b1:09:1a:66:14:a4:c5:ab:c6:e9:d3:9e:6b:24:64:
         02:41:8f:09:41:67:2d:4b:b5:09:a1:1f:de:92:ee:1d:82:0c:
         6f:33:b4:9e:8d:da:cc:b6:65:c3:82:89:ff:c6:3f:54:c7:97:
         a0:fb:2a:f5:cb:7f:b2:33:fb:c8:2a:30:f5:7c:f7:6d:a5:8c:
         ff:3f:66:da:43:0c:9d:b5:4b:87:e8:dc:91:36:3d:6d:f4:30:
         c4:b6:4d:a3:2f:7a:d7:eb:e9:eb:41:f8:8a:3a:dd:f0:56:27:
         52:fa:94:51:7d:74:80:80:0b:e3:8c:cc:3e:bc:5f:af:24:12:
         6d:9e:19:9b:85:7f:39:b9:41:b8:3f:69:fd:41:d3:09:46:0a:
         02:bc:7f:c5:6f:6d:a0:37:93:0e:6a:81:b8:17:b0:3d:87:44:
         37:65:d6:f2:69:91:76:af:37:93:16:92:b3:ea:fc:25:81:0e:
         3d:95:16:c2:03:a4:b8:78:53:04:29:34:c2:97:5d:0b:43:37:
         8b:fa:ad:13:54:e3:84:d6:76:4a:ac:e9:09:7d:1f:6d:a0:c6:
         60:fc:da:d5:db:39:11:3e:e0:0c:69:e5:5b:4e:58:3a:34:a5:
         3e:d1:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:39 2026 by rpki-client