Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
File:                     OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json)
Hash identifier:          SRnYnM+pkPvNm3E0Fm8hZi9YpWrdM1xOhvArzuAig/8=
Subject key identifier:   39:DF:45:CF:56:71:8C:E7:2F:58:F6:D4:CB:2A:81:E3:93:C2:0D:91
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Certificate issuer:       /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial:       26BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
Manifest number:          26AA
Signing time:             Tue 24 Mar 2026 15:37:07 +0000
Manifest this update:     Tue 24 Mar 2026 15:37:07 +0000
Manifest next update:     Tue 31 Mar 2026 15:37:07 +0000
Files and hashes:         1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: k6P52rKN0qdHpGogHuo/wsHjA5MQUFbVjMXRTxmxRvw=)
                          2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: zCSyGsYCYzFeYmRqymAlfv0PUooJcKVA3RkycjZyUFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
                          rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9918 (0x26be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
        Validity
            Not Before: Mar 24 15:37:07 2026 GMT
            Not After : Mar 31 15:37:07 2026 GMT
        Subject: CN=69c2afa3-a1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:8f:6f:6c:9e:a8:da:0c:aa:14:2c:c0:fe:
                    32:9e:6d:f4:2d:9b:e3:84:2a:83:ce:f6:e6:1a:f5:
                    fb:c5:e8:5f:62:21:6d:dc:10:4a:ca:87:e1:c5:55:
                    d5:5f:49:0a:e4:37:49:a6:68:24:e6:b0:d8:6f:c0:
                    5c:eb:96:26:1e:4b:08:1d:6e:4e:b7:0c:de:4b:1e:
                    ec:2b:34:24:ae:a5:83:87:f8:23:3d:11:93:82:21:
                    ed:c7:e8:29:ed:8e:17:48:12:57:73:e5:2f:27:7a:
                    4f:b8:4b:70:0b:a2:35:a0:b4:f5:e6:8c:2a:51:53:
                    c1:90:b5:96:b3:d2:f6:a8:70:31:96:ea:9d:0b:cd:
                    23:1b:2b:aa:33:7f:39:38:77:8b:5c:65:75:7b:58:
                    db:fe:44:84:9a:84:01:a0:e8:4b:26:8d:df:50:93:
                    4d:7a:bc:1d:a4:b7:15:3e:6e:fb:5e:3b:d0:e1:c8:
                    85:6e:f8:77:c1:7d:6f:08:a6:08:fb:ef:44:5f:42:
                    10:d8:13:e5:d1:8f:19:8a:28:80:49:c4:22:5c:c2:
                    94:77:06:86:11:66:94:54:89:8f:70:c8:13:e0:3b:
                    95:5e:71:94:c2:a0:80:3d:5c:b6:56:d6:40:e0:8a:
                    27:5d:d9:12:48:2b:e5:12:8b:b8:1c:0e:f8:bc:52:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DF:45:CF:56:71:8C:E7:2F:58:F6:D4:CB:2A:81:E3:93:C2:0D:91
            X509v3 Authority Key Identifier:
                keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:57:4e:1d:92:26:04:b6:d6:28:15:16:cc:66:3d:d5:c6:0a:
         43:53:62:a9:0b:2c:b4:98:11:1b:61:06:57:8c:fe:69:24:93:
         52:b2:3e:94:b8:2d:ed:81:90:82:d9:c4:97:18:bc:93:3f:32:
         2e:8a:f3:f7:5d:b3:13:1b:5f:0c:76:a3:77:ef:ce:ab:54:ae:
         60:ed:68:c0:9c:88:e8:d4:98:e3:4d:da:b5:76:c3:23:cc:ef:
         31:7d:e4:96:60:e8:cb:df:5b:bb:66:3c:68:80:e9:13:df:be:
         16:ca:2a:83:98:f1:bd:92:ba:2d:ce:1c:a9:3b:47:c8:c5:97:
         45:f4:33:b7:c1:ce:bf:0b:a6:d7:1a:51:f3:c7:5e:80:50:78:
         9d:0d:64:2e:95:92:96:40:2b:23:45:97:07:e2:5a:92:fe:51:
         ed:9d:c9:4b:68:34:ec:b3:08:88:d8:f9:d0:61:34:79:a0:5c:
         ab:53:04:d8:fb:56:94:ff:23:62:80:c6:4a:96:7c:78:11:8c:
         67:05:87:4c:6b:34:a4:e2:71:51:c6:b7:12:5c:56:49:2b:50:
         61:0a:d0:4a:cb:90:8b:24:96:32:70:b5:4e:0f:7d:5a:8e:32:
         ff:7f:27:48:4f:7f:7b:41:95:4a:88:51:34:56:e8:47:cb:76:
         07:3e:15:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:37 2026 by rpki-client