Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File:                     oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier:          watbQroKA400eqPJ0kcK+GFCuQSgvvuPZGHSC7TqHk0=
Subject key identifier:   43:5E:FA:22:5F:8C:18:70:5D:6D:2E:7C:78:A0:67:AA:57:F4:DD:C8
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer:       /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number:          01B1
Signing time:             Wed 25 Mar 2026 03:16:56 +0000
Manifest this update:     Wed 25 Mar 2026 03:16:56 +0000
Manifest next update:     Wed 01 Apr 2026 03:16:56 +0000
Files and hashes:         1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: rRU4PCrBB7wcFzoFyInlnnqb5Zmj5L1mqnWShxUCGkY=)
                          2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: I602UprS0PuPZg6+swMqCR4Z7j5cFK9kxKEJsn7QaM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE620, serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
        Validity
            Not Before: Mar 25 03:16:56 2026 GMT
            Not After : Apr  1 03:16:56 2026 GMT
        Subject: CN=69c353a8-7d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:1c:be:1f:70:71:5c:bc:98:c0:d7:de:08:
                    cc:84:ab:31:f1:dc:ae:a1:fc:3a:d8:d3:f9:e1:b5:
                    67:b8:4a:b2:81:7c:c1:1f:48:07:cb:1e:3e:09:07:
                    47:33:19:cc:40:97:b9:0c:34:57:fa:9b:aa:3f:a8:
                    7f:67:93:97:b3:ce:a3:7f:a7:1f:57:d4:28:b3:bb:
                    64:df:4c:54:30:42:7f:2e:8d:fc:2a:a3:95:88:00:
                    a8:7d:00:14:c5:3d:3f:3e:4c:d5:e3:7c:12:ae:6b:
                    8d:ca:b6:22:ab:6a:03:05:30:7b:01:1d:11:f2:d5:
                    91:8c:0b:c5:de:4c:1b:24:39:99:47:9a:eb:c9:00:
                    74:37:18:2f:25:89:64:6c:7a:ca:e9:84:9c:99:5a:
                    5d:79:41:cc:1e:8d:dd:02:84:72:62:6d:04:2e:ff:
                    c3:40:04:75:f5:5f:3d:05:6d:36:e7:6e:f6:eb:41:
                    8a:f1:04:1f:1f:dd:a7:94:5a:51:18:ef:f1:21:07:
                    11:a2:2a:3a:be:cb:0a:e4:c9:cd:67:e3:d9:71:c9:
                    8d:f2:28:3b:ff:a9:7c:35:2d:6f:cf:66:74:76:4a:
                    86:e9:18:9c:0b:d2:40:12:6c:97:d0:8d:47:b0:e2:
                    40:0a:0b:33:6e:0b:e1:8d:4d:76:01:6d:83:eb:d6:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5E:FA:22:5F:8C:18:70:5D:6D:2E:7C:78:A0:67:AA:57:F4:DD:C8
            X509v3 Authority Key Identifier:
                keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d9:ed:01:3d:b1:94:c3:42:25:89:2b:f7:ac:6e:b6:5a:18:
         ee:83:14:f4:01:6c:89:5c:ed:52:01:c8:70:ed:9b:26:59:b6:
         a4:86:d7:0f:02:7e:3e:6a:1e:49:ce:2c:50:7a:3b:0e:de:68:
         f9:23:29:91:c1:f1:87:f2:be:b1:88:d0:d0:50:78:18:6c:4a:
         9b:0b:56:8e:4d:29:1c:5b:e0:ec:a0:c4:f1:e1:79:06:7c:77:
         fb:a8:d9:75:8f:7f:3c:4a:cf:00:b6:8b:54:fe:0c:60:e2:f8:
         e3:d1:31:50:a9:7d:67:a4:64:8c:ef:2a:23:27:97:12:1c:8e:
         d1:18:0c:2b:2e:01:15:a7:89:46:ea:d3:ea:11:c6:42:e0:c9:
         0b:36:b4:76:8d:6f:51:53:d2:83:61:53:9e:79:57:ce:64:d6:
         fd:3b:76:ee:9d:d6:36:db:de:c1:0b:ca:58:db:2f:5c:17:7b:
         06:9d:46:10:39:6e:61:30:66:47:10:5c:f1:c1:97:b3:34:73:
         51:99:c0:c0:70:3f:b6:07:2b:e1:ed:81:2d:44:65:08:df:61:
         fc:4e:ab:3e:4e:88:d0:5c:45:ea:13:d1:0e:f6:cb:7c:ea:1f:
         72:e6:df:32:69:9f:fc:90:4e:c1:16:4d:d6:75:e8:d3:d2:33:
         56:41:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:18 2026 by rpki-client