Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
File:                     o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft (raw, json)
Hash identifier:          VOsXZQTMAMxHxizho6HHK0ZqJiXfou3e71wq3bGEL58=
Subject key identifier:   67:7A:14:B8:E7:93:A9:35:A7:2C:2E:7A:AF:AA:43:6E:AB:CA:7E:5F
Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
Certificate issuer:       /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Certificate serial:       06DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
Manifest number:          06D5
Signing time:             Tue 22 Sep 2026 21:59:08 +0000
Manifest this update:     Tue 22 Sep 2026 21:59:07 +0000
Manifest next update:     Tue 29 Sep 2026 21:59:07 +0000
Files and hashes:         1: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl (hash: u3nIlv+GV7rxZvMoNyQacgZogFlGnRgHApcvsdpbfno=)
                          2: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (hash: sa52l895YIbToiWoNN1p5FrL7C9QUTLiJxWGZLkoKuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
                          rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1758 (0x6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
        Validity
            Not Before: Sep 22 21:59:07 2026 GMT
            Not After : Sep 29 21:59:07 2026 GMT
        Subject: CN=6ab2fa2b-6c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:d3:23:8d:d2:03:b5:54:91:00:65:c9:3b:
                    97:3d:aa:0f:c8:d7:9d:ce:9c:1a:e3:f4:09:91:a0:
                    33:18:94:f3:e8:53:87:53:10:a3:d6:93:93:d3:f5:
                    7f:22:01:60:8f:9c:73:f9:80:da:8e:25:94:f6:87:
                    cd:1d:fc:d1:27:1b:43:5f:28:eb:40:8f:a1:39:5f:
                    5e:e7:5c:47:85:da:40:d5:e6:45:29:fc:36:08:91:
                    c5:5c:9d:a8:17:63:1a:8b:1f:84:a7:d1:9a:54:c6:
                    cc:e4:b6:69:29:61:a4:a9:fa:20:f7:ec:08:0a:2e:
                    8c:3c:91:05:17:4f:b3:3d:fc:cc:34:42:9c:65:c6:
                    a4:96:84:50:7c:80:1b:bc:e4:8a:ec:4f:3e:1c:4f:
                    80:61:16:f2:a1:20:76:ba:47:30:86:f7:24:97:66:
                    f3:30:b4:4f:f1:d2:f2:cb:9f:43:23:41:ee:a1:3d:
                    c1:77:23:c5:76:57:6e:35:a6:0f:72:44:e5:92:a2:
                    72:12:cf:40:9d:d1:c8:22:91:5f:8b:93:f2:1e:c0:
                    01:7c:45:0c:1c:17:b5:4f:ca:75:2c:d0:d9:0d:03:
                    5a:52:8d:77:b1:8f:8c:2f:4d:d7:84:fd:99:36:81:
                    98:83:49:a9:0c:d1:22:3a:a3:62:b6:74:14:a9:d6:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7A:14:B8:E7:93:A9:35:A7:2C:2E:7A:AF:AA:43:6E:AB:CA:7E:5F
            X509v3 Authority Key Identifier:
                keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:c8:19:35:6b:21:2e:f0:0b:25:00:ac:e2:f4:4e:be:86:
         ab:29:ac:b4:2e:c5:7c:06:34:8b:9d:93:40:02:19:ff:68:e9:
         ee:01:b4:9f:00:a7:dd:25:e7:e7:99:2b:fe:c3:82:a5:3d:e2:
         62:7b:cb:cc:a3:e7:66:2c:31:5c:b9:fd:2b:c9:39:36:f1:02:
         ef:59:02:16:83:2f:a0:b9:44:a1:d6:5d:8f:e0:e8:a3:8b:bc:
         f3:13:b3:a1:5d:72:34:7e:0a:a6:50:72:ca:6e:b1:b4:6b:65:
         17:42:37:de:b1:70:5f:ba:17:2f:49:08:d1:62:40:e5:d8:f0:
         09:ca:28:1b:30:1f:ba:7b:ac:9c:cf:87:e0:fe:19:a9:80:75:
         1a:57:bd:ee:78:45:27:0b:ee:c3:2a:7e:32:28:1d:d5:e3:06:
         5d:5a:98:5b:c9:4c:46:b1:21:d2:dc:bc:f8:57:c7:82:7e:c8:
         be:a6:fd:a3:18:fd:47:75:e4:af:9e:0c:43:7a:8d:02:a0:94:
         02:62:9d:07:46:6c:85:37:82:91:57:5b:a6:61:f7:69:85:c4:
         b2:09:1a:34:ee:d1:a0:16:06:c0:d0:c4:b8:f1:50:c1:56:f7:
         59:f6:14:b0:65:74:0c:9a:9e:9c:2e:5a:0d:c3:c2:9b:2e:4f:
         79:1d:bc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:02:04 2026 by rpki-client