Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
File:                     oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json)
Hash identifier:          xfhwh++bNFMPapifNWwsOelBV6h9h1IzutCrPiA0sXo=
Subject key identifier:   D6:EC:41:BC:F0:40:94:E9:48:22:EB:CD:D3:20:E1:28:2E:CD:00:A4
Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73
Certificate issuer:       /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
Certificate serial:       0297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
Manifest number:          0290
Signing time:             Fri 25 Sep 2026 01:49:58 +0000
Manifest this update:     Fri 25 Sep 2026 01:49:57 +0000
Manifest next update:     Fri 02 Oct 2026 01:49:57 +0000
Files and hashes:         1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: iMMAWXKdIefNQVjPzNtuyStrq346d530f28KvmWhXMY=)
                          2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: zHAD2aRjfS80FrmwnylIxolsBZEI+CFeAtlJuiT/1ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl
                          rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
        Validity
            Not Before: Sep 25 01:49:57 2026 GMT
            Not After : Oct  2 01:49:57 2026 GMT
        Subject: CN=6ab5d346-d231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:17:25:c2:ea:a4:41:c0:85:84:21:7f:49:dc:
                    55:36:25:5c:6f:bb:bf:4c:64:32:e3:6d:e6:bf:da:
                    a4:ac:6a:82:e0:de:6d:fd:ff:9f:85:4a:b5:32:c6:
                    0a:76:bc:7b:1c:d6:dc:01:6a:f7:df:fa:ec:32:9d:
                    f1:a9:ca:cb:6f:7f:e9:93:8d:12:fb:62:e5:5d:bd:
                    4e:ab:a7:21:0e:35:ba:3c:eb:ef:67:00:32:ad:a6:
                    0f:8f:66:9f:ab:7a:09:3b:8c:2b:5d:10:fc:43:8e:
                    80:49:b0:29:ca:ed:d9:5c:e5:4a:c7:7e:2d:c1:04:
                    71:30:fa:2d:92:1d:cb:cd:e8:b8:a6:ea:2e:20:e8:
                    41:c4:f9:62:f2:d4:5b:af:64:c5:45:24:7b:06:69:
                    63:8d:09:ac:3f:a5:62:59:b7:d8:89:62:5d:bc:39:
                    df:71:11:bf:ee:53:a4:ce:94:bf:3c:41:2a:ea:fe:
                    46:9d:d1:2d:28:e7:5b:cb:c5:1e:f1:d8:5e:7e:b2:
                    6f:96:77:49:92:68:7c:92:d1:72:54:1d:50:df:13:
                    31:d2:65:6d:e6:a2:e4:e1:48:3c:33:9e:82:3e:be:
                    27:46:cd:72:e9:7b:f9:5c:c3:bb:51:90:fe:25:26:
                    31:56:5e:66:02:11:a2:b6:c5:49:96:01:90:56:1a:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EC:41:BC:F0:40:94:E9:48:22:EB:CD:D3:20:E1:28:2E:CD:00:A4
            X509v3 Authority Key Identifier:
                keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6e:b7:0e:cc:58:34:af:80:cd:d1:4c:ef:7e:ef:8d:dc:12:
         e2:71:ab:55:50:ba:36:e9:e8:83:d2:03:ff:d4:34:ae:a7:6e:
         0d:db:cf:82:b9:65:50:ba:4d:64:d7:40:f8:f0:e7:9d:10:bf:
         d1:cc:3c:aa:9e:6e:99:d9:1f:3e:da:95:17:e7:24:7d:e9:78:
         84:7e:a3:be:82:88:4b:71:08:e0:b1:05:91:02:80:0a:4e:12:
         0e:d1:a5:fc:ec:0f:03:d0:54:97:eb:69:74:4f:6a:22:60:20:
         28:4e:ba:d4:29:7a:9c:0b:69:9c:7d:fa:bc:e4:77:46:d8:5b:
         76:b4:12:07:50:7d:b0:ae:e8:7a:11:9c:7c:36:8e:cd:4f:91:
         df:6f:eb:09:00:0c:d5:14:9b:33:cb:7d:52:a3:6d:15:b7:e0:
         72:d2:76:32:f6:59:e4:09:74:35:55:05:b0:0d:52:ab:74:47:
         aa:4a:72:fc:c4:21:79:f6:3c:40:9c:c1:70:0a:ad:3e:fe:9c:
         a4:ae:c7:23:c6:be:6f:28:4e:a1:48:01:05:52:02:9c:d7:2c:
         3c:db:55:a5:01:e7:52:09:bc:b0:49:dc:77:07:ba:96:17:96:
         59:2d:bc:0a:f6:ff:ef:14:87:80:41:67:2b:7f:a4:92:5f:b1:
         36:d1:d0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:55:49 2026 by rpki-client