Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
File:                     oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json)
Hash identifier:          DbfmlTUfPI59djIGamI1Qt5umPCVPCvLKzaNuHkQ5os=
Subject key identifier:   14:A7:F2:31:AF:BA:EF:EA:4D:9D:CA:C1:D7:79:31:74:A9:69:2F:A3
Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
Certificate issuer:       /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
Manifest number:          026E
Signing time:             Fri 25 Sep 2026 02:28:15 +0000
Manifest this update:     Fri 25 Sep 2026 02:28:15 +0000
Manifest next update:     Fri 02 Oct 2026 02:28:15 +0000
Files and hashes:         1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: DH7lHE/9LQ+JBdh0VQFTvHePpRwfBLDz9fM+fH5ZMFg=)
                          2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: UJfcT25TpxMsPXblHXFvDdc06o4EalWiUveKOaWphfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
                          rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
        Validity
            Not Before: Sep 25 02:28:15 2026 GMT
            Not After : Oct  2 02:28:15 2026 GMT
        Subject: CN=6ab5dc3f-00ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:81:93:9f:69:c8:28:75:d6:f2:75:02:39:
                    92:78:32:64:15:8f:bd:2e:fa:34:52:90:b6:28:8a:
                    68:66:54:88:59:2a:eb:1e:ce:66:29:5c:77:4e:cc:
                    a2:eb:21:16:00:6f:a7:bb:14:4f:d1:a6:65:52:d8:
                    9b:d2:1d:fc:7d:7f:c6:67:0e:c6:4f:56:fd:56:57:
                    7a:1a:5d:6f:74:83:00:f3:a2:a1:0d:b5:c6:ea:a5:
                    7d:62:74:a6:97:de:94:8b:ac:92:c2:0b:1f:65:5d:
                    b9:ed:c8:13:d1:2f:d0:46:63:2e:cd:32:d3:78:1a:
                    5f:32:98:bf:09:f6:e1:73:69:7f:d5:2e:84:2c:d9:
                    64:c4:46:1e:79:31:13:59:ce:ab:95:ad:41:3d:bf:
                    a3:d4:3b:8e:29:04:70:50:cd:4c:e9:23:ff:ed:5e:
                    3f:fc:64:da:23:40:54:5d:89:49:43:07:65:b6:83:
                    5a:b1:70:89:ac:42:59:90:af:0c:af:45:11:d0:b4:
                    f1:40:a6:93:3f:1c:c6:6c:9f:2f:b5:2a:34:bd:22:
                    ea:85:bf:f6:f7:cf:77:e6:b6:ca:98:71:db:a0:9b:
                    7b:cc:2e:f5:ad:57:59:b2:bb:3b:4a:ac:85:46:1f:
                    5f:25:7f:35:12:13:b2:93:70:08:b6:ac:8b:12:9b:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A7:F2:31:AF:BA:EF:EA:4D:9D:CA:C1:D7:79:31:74:A9:69:2F:A3
            X509v3 Authority Key Identifier:
                keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:70:1f:93:38:62:f6:ee:e4:f2:03:c3:93:b7:17:b7:46:00:
         4b:11:03:dc:be:0d:f2:8c:00:4c:96:d3:01:ab:c6:cd:19:ca:
         c4:87:92:41:ef:e9:19:62:3d:69:be:75:31:16:72:07:ff:a6:
         0e:ea:c8:fb:c2:54:29:2c:44:12:50:dc:eb:58:83:4b:6f:de:
         53:64:c2:70:05:06:44:2f:db:b9:28:1b:41:c3:06:7b:a2:4e:
         67:6c:c1:f2:b2:e7:2b:6f:da:06:58:58:23:d3:08:cd:e3:b4:
         a5:f2:66:2a:78:9b:0a:c9:22:6a:5f:c9:51:12:ff:c4:f0:c6:
         e3:22:56:9b:12:d3:22:f2:8f:50:40:17:b5:0c:5e:b5:64:21:
         ba:6a:f2:fc:8a:07:54:f6:d0:f3:43:34:99:33:b1:25:8e:3c:
         46:c9:2b:6a:9e:f9:27:e6:78:47:25:6f:ab:b9:17:7d:28:3d:
         54:e4:fc:13:db:c6:7d:43:08:80:bb:db:19:8e:c7:08:f2:41:
         ee:35:fa:da:21:bd:6c:9c:b8:59:f2:77:5e:40:3b:4d:46:df:
         14:11:69:47:95:48:e6:1e:ca:f2:72:e0:7b:3b:53:e7:7d:af:
         5d:47:6a:3a:a2:f5:98:86:f6:63:41:c4:e4:88:03:95:08:cf:
         eb:85:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:59:49 2026 by rpki-client