Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
File:                     OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json)
Hash identifier:          BgMrjNfejcyQBbk75vpaI9UyKCAtcoC6hfKX8BNf+AA=
Subject key identifier:   5B:70:7D:11:8E:09:2D:AD:40:1E:A5:09:79:B7:55:BC:65:D3:EA:EC
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Certificate issuer:       /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial:       26D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
Manifest number:          26C3
Signing time:             Tue 12 May 2026 15:40:39 +0000
Manifest this update:     Tue 12 May 2026 15:40:39 +0000
Manifest next update:     Tue 19 May 2026 15:40:39 +0000
Files and hashes:         1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: i2x4v2f9LIvvEaFHwkOaId2ySP4r/eigzi2tgc6nwsQ=)
                          2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: zCSyGsYCYzFeYmRqymAlfv0PUooJcKVA3RkycjZyUFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
                          rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9943 (0x26d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
        Validity
            Not Before: May 12 15:40:39 2026 GMT
            Not After : May 19 15:40:39 2026 GMT
        Subject: CN=6a0349f7-eb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:36:9f:19:27:8b:cc:7d:a9:90:46:8d:3b:
                    02:26:21:e9:ab:d7:40:cf:93:59:19:e9:50:62:b8:
                    8a:3e:10:71:7e:be:18:ba:36:5f:f4:0b:7a:27:56:
                    44:8e:42:4a:bf:11:22:31:5d:48:a7:da:c4:f8:55:
                    c9:0f:75:3c:10:fe:62:7f:53:92:19:8e:45:c5:c8:
                    9f:f1:30:f5:74:83:08:84:94:1f:df:eb:07:42:88:
                    58:3d:4c:3f:a4:a0:56:97:d6:8c:95:7d:a2:75:50:
                    62:36:06:b0:34:57:8a:b4:0d:0c:65:ef:4f:5e:bf:
                    5c:09:1a:86:ba:b3:43:1b:cf:72:f5:95:44:20:28:
                    59:69:7f:86:38:6b:14:02:00:c8:b7:f7:2e:7c:2f:
                    45:01:e9:3d:5d:69:59:ed:ef:4c:10:02:2c:3f:98:
                    0d:ad:7f:20:a3:49:3f:b1:4f:67:58:9a:8f:be:a2:
                    8f:00:08:d5:82:72:76:42:1c:b1:bc:45:83:89:ef:
                    13:92:e2:49:63:bd:a5:7b:bb:c5:96:91:a0:eb:b3:
                    58:06:da:23:08:1d:28:fd:11:c3:51:a6:fc:d0:0c:
                    7b:78:86:3b:6f:99:6a:2e:be:dc:51:a5:15:3e:b1:
                    84:1c:ab:a3:c1:37:a3:57:79:a5:35:dd:1a:ab:5a:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:70:7D:11:8E:09:2D:AD:40:1E:A5:09:79:B7:55:BC:65:D3:EA:EC
            X509v3 Authority Key Identifier:
                keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c5:d8:46:f8:1c:87:5d:b9:1a:78:ed:fd:54:2a:23:25:0d:
         7c:58:1a:d0:e0:bb:bf:fa:dc:01:8f:de:89:9f:92:63:f5:97:
         01:a3:c5:9e:b5:cb:88:97:4d:b0:46:1b:ad:7c:31:8b:c5:b0:
         e7:b0:2f:81:24:5e:54:4a:d5:d8:5e:b1:00:12:a0:6f:8b:51:
         6f:c9:d5:6e:eb:2a:db:83:37:4e:0b:a7:de:9c:01:55:80:c0:
         10:30:88:dd:eb:6a:47:43:d9:6f:6e:11:f4:66:ee:c5:d9:a2:
         c0:20:a7:b1:f4:65:13:02:2a:e1:96:1c:a4:b7:3b:2f:a4:fa:
         3b:d6:36:69:ad:21:13:26:6d:64:df:98:c7:cc:78:3a:09:7d:
         e1:5a:7a:cd:91:2d:3b:77:7f:22:05:87:08:7b:00:a6:73:94:
         dd:aa:29:7e:56:a8:90:6c:58:ea:3c:aa:c3:ae:84:e6:2d:39:
         29:83:d9:28:fb:33:52:f4:c2:5e:45:38:f2:95:6e:cf:75:15:
         cc:83:2b:fa:26:37:58:6c:71:e9:c9:56:9b:0a:2b:35:91:65:
         20:b5:48:52:93:61:2b:2c:04:dd:3f:82:c5:1d:fb:6f:d6:9c:
         a1:4f:9d:9d:60:c5:0b:39:83:2b:4a:93:1e:4c:d9:74:a0:86:
         f4:3b:71:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZDNjYxMTAvBgNVBAUTKDNCMEJDNTU2NTBBQTQ2QjE3OEIzRTE3NDIzMDAwQkQ5
ODFDQTY3MzYwHhcNMjYwNTEyMTU0MDM5WhcNMjYwNTE5MTU0MDM5WjAYMRYwFAYD
VQQDEw02YTAzNDlmNy1lYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyig2nxkni8x9qZBGjTsCJiHpq9dAz5NZGelQYriKPhBxfr4YujZf9At6J1ZE
jkJKvxEiMV1Ip9rE+FXJD3U8EP5if1OSGY5Fxcif8TD1dIMIhJQf3+sHQohYPUw/
pKBWl9aMlX2idVBiNgawNFeKtA0MZe9PXr9cCRqGurNDG89y9ZVEIChZaX+GOGsU
AgDIt/cufC9FAek9XWlZ7e9MEAIsP5gNrX8go0k/sU9nWJqPvqKPAAjVgnJ2Qhyx
vEWDie8TkuJJY72le7vFlpGg67NYBtojCB0o/RHDUab80Ax7eIY7b5lqLr7cUaUV
PrGEHKujwTejV3mlNd0aq1pvIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtwfRGO
CS2tQB6lCXm3Vbxl0+rsMB8GA1UdIwQYMBaAFDsLxVZQqkaxeLPhdCMAC9mBymc2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkM2Ni84RkI5NThGQUY4
NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJyRjRzLUYwSXdBTDJZSEta
elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL093dkZWbENxUnJGNHMtRjBJd0FMMllIS1p6WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkM2Ni84RkI5NThGQUY4NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJy
RjRzLUYwSXdBTDJZSEtaelkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAncXYRvgch125Gnjt/VQqIyUNfFga0OC7v/rcAY/eiZ+SY/WXAaPFnrXLiJdN
sEYbrXwxi8Ww57AvgSReVErV2F6xABKgb4tRb8nVbusq24M3Tgun3pwBVYDAEDCI
3etqR0PZb24R9GbuxdmiwCCnsfRlEwIq4ZYcpLc7L6T6O9Y2aa0hEyZtZN+Yx8x4
Ogl94Vp6zZEtO3d/IgWHCHsApnOU3aopflaokGxY6jyqw66E5i05KYPZKPszUvTC
XkU48pVuz3UVzIMr+iY3WGxx6clWmworNZFlILVIUpNhKywE3T+CxR37b9acoU+d
nWDFCzmDK0qTHkzZdKCG9Dtx2w==
-----END CERTIFICATE-----
Generated at Wed May 13 12:30:12 2026 by rpki-client