Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
File:                     oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json)
Hash identifier:          KZ/0vPtaPl2bt0LaUzVPdL8fcRjNMoTwratfpo4p0SE=
Subject key identifier:   45:B1:1E:90:A5:DC:5A:E0:6F:97:0F:7D:E3:56:B7:F6:19:68:E8:D6
Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
Certificate issuer:       /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
Manifest number:          0107
Signing time:             Wed 25 Mar 2026 05:18:08 +0000
Manifest this update:     Wed 25 Mar 2026 05:18:07 +0000
Manifest next update:     Wed 01 Apr 2026 05:18:07 +0000
Files and hashes:         1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: xTVogiAK3qbHXjU30T3+/WT9Pv3FheIJEr/WXlChDa0=)
                          2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: aoBTkJouVxyNkkgtw1vmV8sS1BnP7mpfp25E9TCfROM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
                          rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
        Validity
            Not Before: Mar 25 05:18:07 2026 GMT
            Not After : Apr  1 05:18:07 2026 GMT
        Subject: CN=69c3700f-8c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:c2:66:73:ee:01:17:6a:01:b6:31:75:2f:
                    19:04:14:0c:19:51:46:55:83:2b:f6:f0:cc:2a:e9:
                    3d:c2:33:5a:3f:67:be:e2:b8:68:d0:e4:19:cc:b9:
                    c5:91:b9:38:dd:71:54:27:e6:ce:d3:7a:60:ff:a9:
                    8e:e9:bf:9c:4d:60:8a:84:ab:68:c2:b6:61:15:bf:
                    cc:cd:96:2e:59:7b:90:13:f3:90:df:dd:13:a5:8c:
                    84:5e:f7:3f:a0:3e:70:bf:d2:2a:bd:26:19:b8:9a:
                    29:a9:4f:da:ea:a8:9c:a9:b8:8d:80:0c:4d:20:66:
                    93:8b:b1:b7:5f:d6:46:66:93:64:87:4a:37:10:5d:
                    f5:af:13:a4:23:26:1f:16:ec:9b:27:52:76:ee:3a:
                    1a:18:f3:c9:03:34:28:1e:86:91:9b:fd:5a:66:75:
                    45:75:38:86:1e:85:dc:41:86:64:be:54:9b:47:0a:
                    ea:45:8e:8b:8c:c0:cd:d7:eb:e3:64:1c:4e:fd:3d:
                    23:47:40:be:e3:b3:2d:df:b4:88:71:b7:a5:e5:37:
                    db:1e:af:f1:2d:2d:e5:eb:48:f3:6f:8e:3a:d1:81:
                    26:48:26:34:cb:2a:d7:76:90:01:fe:50:48:49:dd:
                    78:99:eb:2f:55:74:89:b8:3c:59:3d:a9:9e:86:5a:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:1E:90:A5:DC:5A:E0:6F:97:0F:7D:E3:56:B7:F6:19:68:E8:D6
            X509v3 Authority Key Identifier:
                keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:c7:db:dc:f7:a2:bf:e3:df:cd:06:d6:3e:48:4c:db:a0:15:
         a7:a8:a8:04:7e:4a:ff:b6:4b:76:69:f8:e6:99:26:21:b3:39:
         e3:09:ff:2d:a0:19:1a:c3:6f:fe:b6:3e:83:28:a0:b8:f1:b0:
         1b:53:c4:13:95:d5:05:60:6a:bc:e2:b5:f5:47:92:90:77:36:
         fb:71:1e:4d:0f:8b:0a:08:ee:4b:c7:ca:56:2e:d4:5b:25:04:
         d2:d3:77:14:aa:de:c4:ce:ea:e9:7b:23:c6:e1:cc:f1:4a:a7:
         ab:ee:67:0b:59:95:c5:b8:fc:7e:fb:90:0b:3d:2d:6f:72:fd:
         18:0c:56:ca:ec:3a:f2:8d:56:ee:6a:6f:ea:d0:26:30:97:4b:
         f2:13:af:ad:bf:ba:db:73:44:75:d0:21:a0:cb:6f:61:7e:1b:
         11:c6:0e:6b:86:fe:32:9e:b2:52:77:40:fa:f3:ad:22:a0:88:
         da:69:a1:56:ee:65:40:78:b9:ab:9f:1f:5f:0a:44:62:01:db:
         b2:df:71:9b:3a:63:38:48:ee:97:fc:ce:99:7c:40:bd:95:70:
         ac:b4:cd:69:63:15:47:f6:42:f4:65:e7:43:63:4d:00:22:e6:
         b5:59:20:fc:a2:a9:ff:ee:b4:cc:dc:cb:0e:60:20:a7:e7:a1:
         54:0b:e8:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ1ODQxMTAvBgNVBAUTKEEwRkEyMzc3NkQ1NDRDODc3OTQ2Q0FDN0M0ODc3NDY1
MTk5MzdEQjgwHhcNMjYwMzI1MDUxODA3WhcNMjYwNDAxMDUxODA3WjAYMRYwFAYD
VQQDEw02OWMzNzAwZi04YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAprjCZnPuARdqAbYxdS8ZBBQMGVFGVYMr9vDMKuk9wjNaP2e+4rho0OQZzLnF
kbk43XFUJ+bO03pg/6mO6b+cTWCKhKtowrZhFb/MzZYuWXuQE/OQ390TpYyEXvc/
oD5wv9IqvSYZuJopqU/a6qicqbiNgAxNIGaTi7G3X9ZGZpNkh0o3EF31rxOkIyYf
FuybJ1J27joaGPPJAzQoHoaRm/1aZnVFdTiGHoXcQYZkvlSbRwrqRY6LjMDN1+vj
ZBxO/T0jR0C+47Mt37SIcbel5TfbHq/xLS3l60jzb4460YEmSCY0yyrXdpAB/lBI
Sd14mesvVXSJuDxZPamehlpO9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWxHpCl
3Frgb5cPfeNWt/YZaOjWMB8GA1UdIwQYMBaAFKD6I3dtVEyHeUbKx8SHdGUZk324
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU4NC8zMjcwNzM4MjlD
QjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJZDVSc3JIeElkMFpSbVRm
YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Qb2pkMjFVVElkNVJzckh4SWQwWlJtVGZiZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDU4NC8zMjcwNzM4MjlDQjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJ
ZDVSc3JIeElkMFpSbVRmYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzcfb3Peiv+PfzQbWPkhM26AVp6ioBH5K/7ZLdmn45pkmIbM54wn/LaAZGsNv
/rY+gyiguPGwG1PEE5XVBWBqvOK19UeSkHc2+3EeTQ+LCgjuS8fKVi7UWyUE0tN3
FKrexM7q6XsjxuHM8Uqnq+5nC1mVxbj8fvuQCz0tb3L9GAxWyuw68o1W7mpv6tAm
MJdL8hOvrb+623NEddAhoMtvYX4bEcYOa4b+Mp6yUndA+vOtIqCI2mmhVu5lQHi5
q58fXwpEYgHbst9xmzpjOEjul/zOmXxAvZVwrLTNaWMVR/ZC9GXnQ2NNACLmtVkg
/KKp/+60zNzLDmAgp+ehVAvoGg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:17 2026 by rpki-client