Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
File:                     Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json)
Hash identifier:          kDVGgqdTzyGuWUv6lX+UcRTlTY12jqQtDW7LopLLmgY=
Subject key identifier:   F7:DE:02:08:39:78:42:B2:36:7E:43:BE:BE:39:A8:3C:76:5C:72:66
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Certificate issuer:       /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
Manifest number:          0118
Signing time:             Mon 11 May 2026 05:57:55 +0000
Manifest this update:     Mon 11 May 2026 05:57:55 +0000
Manifest next update:     Mon 18 May 2026 05:57:55 +0000
Files and hashes:         1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: IYnea81/aR0rgJLkr1v6/n6x+gWCJXSL6PhDEe6Lwhw=)
                          2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: GfKONyuGx0WaP3K9DviNb2sOjfd80Q3n9pefnjxWc/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
        Validity
            Not Before: May 11 05:57:55 2026 GMT
            Not After : May 18 05:57:55 2026 GMT
        Subject: CN=6a016fe3-67e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:85:79:ab:11:ed:10:88:16:b5:3f:e8:00:
                    34:44:26:e3:9c:58:b0:ee:4e:be:72:e8:b7:ca:44:
                    51:3c:e5:74:25:92:74:74:e9:b3:5d:f4:ac:50:9e:
                    6c:2b:d2:b4:fc:06:cb:b6:29:fe:0c:b7:1e:30:24:
                    d2:be:0a:96:ba:b5:11:88:61:c2:5d:99:0a:78:9c:
                    58:c7:57:a4:55:e1:1b:c4:25:1f:81:00:5a:e0:32:
                    8d:bc:ed:3d:77:da:f0:6f:28:6f:de:8e:6a:8c:11:
                    cf:dc:2f:84:e7:f3:e2:d1:70:bd:43:d2:66:84:79:
                    dd:3f:0f:3f:94:f3:64:21:e6:e7:d7:c8:14:cd:b2:
                    05:90:8f:77:ff:36:66:e9:0c:95:83:99:78:a2:de:
                    d3:d3:9c:ce:cd:6b:45:6c:25:c9:0c:39:96:62:ff:
                    0a:d0:40:cb:85:da:69:56:22:ef:35:26:6b:c3:8a:
                    e3:59:b4:2c:60:a0:b1:00:c9:6e:55:68:53:4a:fe:
                    73:fe:c3:f8:0e:df:b3:bf:48:d3:88:05:23:03:dd:
                    7a:a3:88:a3:e0:7c:b7:a6:a9:c4:e8:e5:22:77:60:
                    62:fb:f8:86:e9:d3:9b:5a:31:94:27:e2:9c:2c:6f:
                    11:d8:67:ae:1a:cd:4a:ef:7b:b1:8f:84:0f:2d:11:
                    79:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DE:02:08:39:78:42:B2:36:7E:43:BE:BE:39:A8:3C:76:5C:72:66
            X509v3 Authority Key Identifier:
                keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:d2:e0:5d:28:98:0a:f4:1f:7e:53:4e:b2:82:2f:1d:5b:
         eb:99:e0:fc:4a:52:d8:93:df:b1:a6:52:84:59:b4:22:59:f5:
         44:58:db:9d:ae:b2:d9:54:c4:a5:39:bf:bd:af:9f:3f:0e:96:
         32:fb:79:da:d8:70:f3:91:66:43:f1:2b:c9:db:1b:3f:21:f8:
         0e:0a:d4:26:bd:b8:ea:4d:45:2e:54:02:8e:df:6d:50:36:20:
         7b:d7:5e:d6:41:23:ac:78:3e:32:e3:fc:58:b2:35:bf:7c:d6:
         ee:bc:72:6a:cf:b7:0a:75:2a:33:99:67:5c:72:d0:4d:ee:bd:
         5b:ac:57:67:3d:03:22:ba:94:76:30:fe:95:35:1d:98:0e:29:
         d2:46:4c:ec:26:44:38:17:dc:d7:6e:33:04:c8:7b:b9:7c:45:
         f8:4e:09:68:1f:e7:17:05:9b:06:bb:67:68:80:15:22:d0:72:
         4b:b5:ce:e2:66:30:c1:c3:b3:14:d5:0d:58:d6:6e:ac:63:9d:
         c9:ce:36:99:28:1d:ce:e7:19:48:da:de:6f:c0:b6:7b:c2:41:
         53:cb:34:9e:7c:29:80:1a:fa:57:78:2f:e2:c2:ea:a7:fb:f0:
         a5:d5:f7:61:b4:d9:10:2f:47:46:2f:a4:00:19:4a:d2:a5:20:
         ec:47:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:55:01 2026 by rpki-client