Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File:                     oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier:          iWYmX/qdKl53tpkPVqmqKQYP2vqPyo5m2HHmY5PWzzo=
Subject key identifier:   6F:FE:73:06:BB:61:AA:10:DA:0E:77:CB:1B:2E:78:9C:61:4D:0B:A3
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer:       /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number:          98
Signing time:             Wed 25 Mar 2026 06:48:20 +0000
Manifest this update:     Wed 25 Mar 2026 06:48:20 +0000
Manifest next update:     Wed 01 Apr 2026 06:48:20 +0000
Files and hashes:         1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: lCPZkNihgoTXfg/TDqG8bo50SMP48yoMOxlai1zxHRk=)
                          2: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: V0mFWyb8wDT9djSAbQ4T53u6v/WrYdwA1bskEFmhhp4=)
                          3: C24679DC741211F0808A8240C4F9AE02.roa (hash: mnmEShTfHHr8jkJu+tgWkb3qWqXauPwn9ZXxFrRpLlE=)
                          4: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: 2iUKMhz07cGysLco5d1V7oMpfZkixvqFHBDyH/7WAK4=)
                          5: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: M8odrWp11xwPayPr1xVWIoKWwAfvrI8IVkAjTpLwwzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
        Validity
            Not Before: Mar 25 06:48:20 2026 GMT
            Not After : Apr  1 06:48:20 2026 GMT
        Subject: CN=69c38534-5911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:0d:77:ae:bd:b7:6f:44:74:75:f3:86:1e:
                    2e:12:a3:08:81:e4:5e:f0:bf:a9:9d:5f:e9:80:51:
                    6c:0b:9e:4b:1a:3d:3f:03:e2:60:68:4f:21:e2:16:
                    af:7f:43:54:78:e1:c6:cb:cd:1f:b0:28:b6:4c:6c:
                    ff:55:f4:a5:2d:d7:c0:72:48:df:6c:58:8d:7c:b7:
                    7f:ac:d5:b7:ce:9d:ce:d4:ed:15:70:9b:a3:75:98:
                    d0:0b:2b:fd:00:17:02:a7:31:e2:7f:61:26:a7:a4:
                    3f:6f:62:fc:16:a5:90:2d:c9:10:d7:28:f6:65:ba:
                    ae:55:ae:4a:56:af:8e:d4:64:74:f3:98:c1:94:63:
                    fe:34:2e:04:1d:ab:f1:6c:b3:59:82:0d:19:06:97:
                    1c:ad:25:5d:2e:65:da:77:b5:91:19:e2:d3:12:51:
                    2f:48:35:c3:95:51:59:0f:8f:8b:02:95:41:95:f4:
                    7d:e0:67:59:ba:23:6f:c6:34:24:d3:1c:c5:69:b5:
                    96:ef:33:f8:f3:ce:5a:a3:54:bf:12:26:68:ff:75:
                    db:14:ec:04:ee:1c:63:17:2e:9e:26:ab:cb:cb:e8:
                    bb:fd:75:20:a1:77:e2:0d:3e:6d:19:df:3f:94:5e:
                    a7:83:1f:13:d0:af:d0:bd:7f:92:7e:30:db:29:64:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FE:73:06:BB:61:AA:10:DA:0E:77:CB:1B:2E:78:9C:61:4D:0B:A3
            X509v3 Authority Key Identifier:
                keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:64:f1:58:02:5c:66:f5:7f:41:82:e5:d0:ee:27:34:2b:30:
         96:5c:fc:28:af:1c:55:81:2b:de:29:bb:7f:09:15:c9:c7:8b:
         87:f6:7d:06:8d:f5:70:60:47:a1:e9:e8:d7:a3:f7:a1:80:d4:
         a4:d7:f0:4e:30:09:ca:cc:80:48:74:29:47:79:a7:db:6e:f2:
         c5:15:fa:6e:dc:7a:4e:4b:80:5e:58:fc:4a:73:23:bb:22:c7:
         d7:10:de:97:b8:6b:2f:2a:39:c7:8c:d2:73:27:b0:a9:4d:bf:
         d5:c0:d1:84:a3:5c:af:e8:bd:0a:72:4a:f1:2c:8c:45:1a:d3:
         ed:8d:22:cb:06:fc:da:a9:28:e5:99:e2:58:c4:2b:0d:c3:5a:
         07:57:4d:6b:8b:15:8f:ca:55:04:f0:94:7f:c3:78:8a:a3:7e:
         4c:17:e2:88:50:8d:c8:cd:c2:0a:60:8d:c2:55:6c:78:3e:ab:
         8b:09:8e:25:f1:36:58:ba:83:25:08:f3:a3:7d:d9:e5:53:67:
         d0:74:04:ff:95:ac:ef:ed:83:98:24:42:a1:81:f7:0a:2d:26:
         fe:8b:f7:02:4a:cf:04:7b:2a:b0:8b:d5:47:cf:e2:63:b5:d7:
         14:9b:3b:3e:ee:3a:71:20:1d:8d:0c:35:35:e5:c2:a8:a9:95:
         f7:70:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:00 2026 by rpki-client