Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
File:                     i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json)
Hash identifier:          Z/BFOFIjMdN7djXYw7j+vh0hD/nUDysIrTEN7qmjKFk=
Subject key identifier:   13:41:09:FB:E4:10:FE:73:FD:0E:39:6E:BD:F0:7F:14:F2:9B:59:F1
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Certificate issuer:       /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial:       0D31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
Manifest number:          0CF9
Signing time:             Tue 12 May 2026 18:26:55 +0000
Manifest this update:     Tue 12 May 2026 18:26:55 +0000
Manifest next update:     Tue 19 May 2026 18:26:55 +0000
Files and hashes:         1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: ix8/x4Ciwh53i9YDTEUCnhgSmDLS2GX45xPBqqr6mFY=)
                          2: A0C1D666451911F1A50ED04697833773.roa (hash: vRJyMNJ4KrDOIdOdKlShLmonDHmEMHH8Xt3hyYOcOF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
                          rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
        Validity
            Not Before: May 12 18:26:55 2026 GMT
            Not After : May 19 18:26:55 2026 GMT
        Subject: CN=6a0370ef-02d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:1b:03:20:da:23:64:de:83:f5:97:72:00:
                    f3:6b:db:cb:e6:27:10:fe:d6:18:88:36:25:2b:4e:
                    7f:7b:78:a0:86:c0:b9:ef:e9:73:04:03:e9:38:88:
                    0e:f9:0f:af:2d:82:c0:7d:8a:3e:55:ca:85:93:fc:
                    d0:b9:e3:12:c8:9a:24:ad:7e:ad:30:55:96:ef:0a:
                    f6:d2:b7:ea:96:df:6a:0d:8d:d2:80:9a:0a:e6:0d:
                    11:24:c0:e9:3d:55:e2:bc:00:cf:bb:75:8f:fa:e6:
                    65:8f:e1:f0:b9:91:fb:37:60:1a:7f:f6:22:cb:13:
                    61:d7:47:77:d3:8d:8c:ea:c1:b0:6a:d7:a0:0e:13:
                    2b:c7:83:b4:a4:2f:05:69:8e:be:2a:46:ec:86:db:
                    6d:f3:9f:dc:3c:7a:7d:53:29:74:40:56:9d:ce:b9:
                    cc:57:41:50:d8:12:a0:39:8e:f7:0a:a9:be:24:f3:
                    4f:e4:db:24:fa:3b:c1:3c:3f:a0:04:c2:00:8e:9c:
                    f8:d7:a1:e5:33:93:e2:0a:fe:72:a8:aa:20:43:04:
                    85:fa:21:8c:40:5a:9d:fb:0d:cf:8f:36:55:68:00:
                    c7:9b:06:f3:75:bb:42:a8:fa:d5:37:d0:0e:78:51:
                    f1:e6:12:f3:45:12:56:86:27:6a:29:cf:d8:99:01:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:41:09:FB:E4:10:FE:73:FD:0E:39:6E:BD:F0:7F:14:F2:9B:59:F1
            X509v3 Authority Key Identifier:
                keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:31:27:93:1d:d3:c3:72:49:60:83:e6:44:64:6a:a1:90:cb:
         af:fa:6f:58:ce:e6:35:44:d6:b4:5c:3f:8c:95:54:34:f6:6c:
         89:fb:84:c4:8a:31:8f:44:d9:0c:5f:22:10:cc:44:65:74:28:
         ca:66:fc:a9:82:39:52:94:a4:53:e2:6d:8d:1f:5a:a4:52:e6:
         e1:e1:78:ed:8f:ab:25:93:8e:70:48:ba:0c:60:e5:d9:ba:31:
         f3:fe:40:fa:4f:b3:f5:5e:1f:95:e6:1b:07:0a:bb:12:36:ba:
         a5:76:71:3d:67:a3:11:4d:86:bd:6e:76:0b:df:b4:9d:60:f1:
         22:ac:0b:d9:c9:d2:18:a4:16:08:75:19:c2:99:b0:72:50:43:
         84:91:d9:c1:ac:a4:f4:aa:e3:93:58:bd:8c:b7:a2:43:3d:a2:
         4f:65:6a:b9:1f:21:5e:dc:62:be:ca:41:d9:55:5d:3c:52:fc:
         a4:73:bc:80:44:ae:ac:5b:5c:fb:e6:09:c0:e4:ab:19:58:b0:
         e2:5e:bb:a4:85:78:48:d5:81:13:6e:21:1f:29:2e:d1:d0:05:
         6a:35:a1:2d:2d:39:40:8e:fe:92:cf:a0:7e:2a:48:55:92:c7:
         5a:a2:18:f6:7a:e4:3e:7d:c0:51:d6:a9:e3:ca:a1:26:26:b6:
         6e:6c:41:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyMUUxMTAvBgNVBAUTKDhCRTM4NzQ1NDZFOTBCQTgzMjM3MTc5RUU4OTMyMDEz
QjJEOUY4NDAwHhcNMjYwNTEyMTgyNjU1WhcNMjYwNTE5MTgyNjU1WjAYMRYwFAYD
VQQDEw02YTAzNzBlZi0wMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3lQbAyDaI2Teg/WXcgDza9vL5icQ/tYYiDYlK05/e3ighsC57+lzBAPpOIgO
+Q+vLYLAfYo+VcqFk/zQueMSyJokrX6tMFWW7wr20rfqlt9qDY3SgJoK5g0RJMDp
PVXivADPu3WP+uZlj+HwuZH7N2Aaf/YiyxNh10d3042M6sGwategDhMrx4O0pC8F
aY6+Kkbshttt85/cPHp9Uyl0QFadzrnMV0FQ2BKgOY73Cqm+JPNP5Nsk+jvBPD+g
BMIAjpz416HlM5PiCv5yqKogQwSF+iGMQFqd+w3PjzZVaADHmwbzdbtCqPrVN9AO
eFHx5hLzRRJWhidqKc/YmQE5CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNBCfvk
EP5z/Q45br3wfxTym1nxMB8GA1UdIwQYMBaAFIvjh0VG6QuoMjcXnuiTIBOy2fhA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIxRS82MEMxODE1NDBC
ODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2Z3lOeGVlNkpNZ0U3TFot
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ktT0hSVWJwQzZneU54ZWU2Sk1nRTdMWi1FQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzIxRS82MEMxODE1NDBCODkxMUVBOEU1QUI3NUZDNEY5QUUwMi9pLU9IUlVicEM2
Z3lOeGVlNkpNZ0U3TFotRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvDEnkx3Tw3JJYIPmRGRqoZDLr/pvWM7mNUTWtFw/jJVUNPZsifuExIoxj0TZ
DF8iEMxEZXQoymb8qYI5UpSkU+JtjR9apFLm4eF47Y+rJZOOcEi6DGDl2box8/5A
+k+z9V4fleYbBwq7Eja6pXZxPWejEU2GvW52C9+0nWDxIqwL2cnSGKQWCHUZwpmw
clBDhJHZwayk9Krjk1i9jLeiQz2iT2VquR8hXtxivspB2VVdPFL8pHO8gESurFtc
++YJwOSrGViw4l67pIV4SNWBE24hHyku0dAFajWhLS05QI7+ks+gfipIVZLHWqIY
9nrkPn3AUdap48qhJia2bmxBaw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:02:46 2026 by rpki-client