Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
File:                     oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json)
Hash identifier:          bF5kJvqBnT8yvZ7r1bF5kLQq9M58PxrWYuyR7DIwMOk=
Subject key identifier:   7F:F4:E2:E7:AF:2B:72:AC:81:E8:74:8D:31:24:7F:48:14:7A:A0:74
Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1
Certificate issuer:       /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
Manifest number:          BB
Signing time:             Mon 11 May 2026 07:05:43 +0000
Manifest this update:     Mon 11 May 2026 07:05:42 +0000
Manifest next update:     Mon 18 May 2026 07:05:42 +0000
Files and hashes:         1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: q4YTa+U3j9CYGOrKSzb3+0u8IRkDkW6dD+1sWK7WmeM=)
                          2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: VGC3s72kCEqeNjrQgkhJsVpMANzKAnqf/Eot+fUvV1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl
                          rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
        Validity
            Not Before: May 11 07:05:42 2026 GMT
            Not After : May 18 07:05:42 2026 GMT
        Subject: CN=6a017fc7-5fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:4e:34:ea:3f:b9:85:0d:37:16:04:08:22:
                    6a:c5:ee:2c:83:15:5d:d6:e9:c4:f5:ce:7a:c8:96:
                    a6:92:e2:35:c6:98:1f:6b:59:68:f4:cf:60:48:6a:
                    dd:7f:6f:27:6a:a2:7a:9c:2b:42:c7:4e:09:ca:14:
                    cc:79:0b:9b:b7:ba:f9:9e:da:57:88:02:07:c1:6f:
                    aa:99:00:d7:70:6c:33:70:c2:9c:0c:33:0d:bb:30:
                    94:94:16:eb:4b:34:e5:57:43:d7:38:13:fa:88:fd:
                    96:a2:05:c3:7e:c1:95:1d:00:a9:48:81:98:80:5c:
                    f8:f9:4d:8d:4d:c9:d6:66:65:5c:d4:61:c2:32:60:
                    14:a9:e1:14:d7:ef:d5:b4:9f:ef:6a:f4:54:a9:03:
                    b6:ab:37:ef:18:65:80:5b:76:1a:af:ea:94:10:65:
                    35:24:de:89:4f:54:08:bb:aa:1b:0d:1d:01:bb:13:
                    6f:7d:af:f3:e9:8b:24:1d:0b:8b:bd:8b:1f:3c:2e:
                    7c:d0:dc:dc:f6:66:4c:3b:9f:5d:8e:40:58:17:60:
                    53:3c:3c:38:bb:84:1e:22:a1:01:06:b7:b5:5e:1a:
                    22:b3:11:f7:96:ce:f7:d5:2b:90:d0:1f:29:87:56:
                    b5:13:47:94:66:e4:a8:20:70:b7:a5:53:e7:ce:3e:
                    40:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F4:E2:E7:AF:2B:72:AC:81:E8:74:8D:31:24:7F:48:14:7A:A0:74
            X509v3 Authority Key Identifier:
                keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:06:e5:16:f4:94:e9:5a:58:13:1d:01:44:e3:09:b5:ba:d1:
         de:44:aa:32:e5:c3:6b:62:43:c2:45:46:0c:94:4b:27:80:23:
         c8:9e:20:df:fc:eb:ac:47:d9:60:82:20:4b:43:1a:9f:3c:5d:
         77:c9:89:1b:96:b2:2f:97:da:f9:56:c4:cc:9a:b8:0e:78:59:
         d0:37:3e:30:47:8a:cd:20:60:0c:27:01:bf:64:88:09:e6:4a:
         a7:78:55:cb:d5:b4:92:4f:9b:05:9a:08:80:e0:5e:aa:82:7d:
         0d:9a:6f:75:0a:03:4a:ac:26:8a:96:c5:e2:4f:8c:65:c8:3a:
         7c:e3:6c:67:03:25:00:c4:cb:02:8d:4f:03:31:cc:8c:c3:87:
         d0:78:61:e7:aa:d5:ad:3b:de:ab:87:34:ab:f5:d8:40:91:e2:
         7d:f3:41:dc:10:d1:61:f8:25:b1:75:9c:58:cf:a9:52:3b:bc:
         9f:0e:24:00:9f:c6:47:7a:95:7f:2a:36:f4:1b:64:91:48:46:
         7e:a5:cf:61:13:17:ce:59:46:c4:c9:ac:ab:55:1e:8e:de:3c:
         49:36:66:f3:a3:40:aa:d5:ba:3a:5b:8c:e7:97:f5:2a:7b:42:
         cb:03:fd:d5:62:f6:e8:bf:48:8a:6d:b3:12:17:1d:2e:ed:0f:
         03:ff:0f:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA1QTAxMTAvBgNVBAUTKEEwRjlFQjY5ODFEQzcyQTI3OEIxODUyODk5MDZDMUUx
MUMwQjM1RjEwHhcNMjYwNTExMDcwNTQyWhcNMjYwNTE4MDcwNTQyWjAYMRYwFAYD
VQQDEw02YTAxN2ZjNy01ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDhONOo/uYUNNxYECCJqxe4sgxVd1unE9c56yJamkuI1xpgfa1lo9M9gSGrd
f28naqJ6nCtCx04JyhTMeQubt7r5ntpXiAIHwW+qmQDXcGwzcMKcDDMNuzCUlBbr
SzTlV0PXOBP6iP2WogXDfsGVHQCpSIGYgFz4+U2NTcnWZmVc1GHCMmAUqeEU1+/V
tJ/vavRUqQO2qzfvGGWAW3Yar+qUEGU1JN6JT1QIu6obDR0BuxNvfa/z6YskHQuL
vYsfPC580Nzc9mZMO59djkBYF2BTPDw4u4QeIqEBBre1XhoisxH3ls731SuQ0B8p
h1a1E0eUZuSoIHC3pVPnzj5ASQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/04uev
K3Ksgeh0jTEkf0gUeqB0MB8GA1UdIwQYMBaAFKD562mB3HKieLGFKJkGweEcCzXx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDVBMC85QzUzNzE3ODJG
NjQxMUYwQjRGMkEyNDVDNEY5QUUwMi9vUG5yYVlIY2NxSjRzWVVvbVFiQjRSd0xO
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5mRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDVBMC85QzUzNzE3ODJGNjQxMUYwQjRGMkEyNDVDNEY5QUUwMi9vUG5yYVlIY2Nx
SjRzWVVvbVFiQjRSd0xOZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhwblFvSU6VpYEx0BROMJtbrR3kSqMuXDa2JDwkVGDJRLJ4AjyJ4g3/zrrEfZ
YIIgS0Manzxdd8mJG5ayL5fa+VbEzJq4DnhZ0Dc+MEeKzSBgDCcBv2SICeZKp3hV
y9W0kk+bBZoIgOBeqoJ9DZpvdQoDSqwmipbF4k+MZcg6fONsZwMlAMTLAo1PAzHM
jMOH0Hhh56rVrTveq4c0q/XYQJHiffNB3BDRYfglsXWcWM+pUju8nw4kAJ/GR3qV
fyo29BtkkUhGfqXPYRMXzllGxMmsq1Uejt48STZm86NAqtW6OluM55f1KntCywP9
1WL26L9Iim2zEhcdLu0PA/8PBw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:21:11 2026 by rpki-client