Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          yN6A2F3qmQryy0lUR8e93UjMp4oG7u/KmKVQ7EtOfVw=
Subject key identifier:   B5:33:BF:02:69:DD:2D:04:C7:3B:14:75:DC:76:6C:DD:12:4E:5F:AE
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       03EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          03DF
Signing time:             Mon 11 May 2026 00:36:46 +0000
Manifest this update:     Mon 11 May 2026 00:36:45 +0000
Manifest next update:     Mon 18 May 2026 00:36:45 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: iiSkhamQxKBIPZiUdKX2rwYEOj5rFko10LfbabTbb50=)
                          2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: znPEMd590TcR/3IMAM9N/494V66QspV9NulehEdGj6g=)
                          3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: ioqugPebSQF2gysJZ13DhVnh23alifn8w8A9RVCFn1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002 (0x3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: May 11 00:36:45 2026 GMT
            Not After : May 18 00:36:45 2026 GMT
        Subject: CN=6a01249e-cc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:71:5c:bd:39:34:18:4d:f2:9c:f6:05:1c:
                    fb:3c:dc:8f:39:b1:b7:47:57:99:f2:e3:23:63:fe:
                    bd:fb:25:ac:88:bd:71:0b:33:45:f9:1f:4f:10:3c:
                    2b:29:f2:b2:08:43:fb:87:61:17:8b:ca:d8:64:bc:
                    12:75:b0:6a:b1:49:83:83:d0:de:cf:8e:0a:a6:b2:
                    00:ae:d0:8a:cf:f5:e2:75:6a:f0:fd:0d:3e:60:6d:
                    b2:7b:93:3e:10:fa:d9:fe:28:61:36:ab:06:90:6b:
                    c5:82:f1:9a:6c:1c:48:f0:9a:f9:df:52:9d:cb:4b:
                    d3:35:fc:5c:4d:2d:b9:bc:b5:b2:19:3f:9d:a6:a2:
                    3b:9f:0f:fc:36:0e:c4:81:22:32:82:84:5e:f8:7e:
                    94:27:c2:5c:7d:9b:32:e7:7a:53:fb:1f:04:30:75:
                    d5:f9:e0:c6:04:66:e6:37:9c:74:d7:cc:d0:24:5f:
                    b0:bd:85:49:69:47:f9:15:ae:5b:b8:3d:95:97:10:
                    53:94:5d:92:da:b1:57:28:12:fd:1d:1f:ec:7e:6f:
                    77:98:3f:a5:52:f3:b7:15:80:b6:49:2d:8c:11:fd:
                    e5:c9:f7:f8:9c:c6:3f:82:2d:47:a7:09:4a:c7:13:
                    c5:fb:47:ca:e3:ab:3c:de:8d:31:e6:07:cf:e7:21:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:33:BF:02:69:DD:2D:04:C7:3B:14:75:DC:76:6C:DD:12:4E:5F:AE
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ef:68:4e:17:8d:43:d0:e8:e7:12:86:0e:d9:ae:b9:cc:fe:
         c4:f7:24:b8:cc:e8:ba:d1:09:e6:05:0b:1d:f1:1c:44:1a:9f:
         ca:c4:b2:10:07:6c:70:c5:9c:50:bd:0d:f1:b2:1a:a5:09:e9:
         54:e2:4e:a9:03:41:65:32:49:e6:ef:9d:39:44:71:81:71:51:
         60:a2:c1:de:45:02:a9:1b:28:76:9e:52:4b:27:cd:57:02:c4:
         61:4f:f8:0a:13:7e:62:5f:04:6d:03:10:54:a5:53:46:e6:62:
         a6:ea:c7:42:d3:b3:36:d8:9c:b2:58:ae:7f:2f:28:bd:00:1a:
         0a:96:72:81:ae:53:39:10:bb:c9:e5:36:69:aa:ec:b0:2f:c4:
         cd:98:c1:24:74:90:53:fe:2f:1e:f0:6d:9d:8c:7c:0d:00:fc:
         aa:e1:65:4e:23:3d:97:36:d2:16:b4:f6:a9:14:49:86:3e:0a:
         74:1c:e8:a5:20:83:2f:46:77:98:85:ba:9f:13:0e:43:66:08:
         b4:10:0b:3a:77:46:55:69:25:2f:16:70:47:14:0c:da:62:39:
         49:a9:ba:64:67:d8:92:2b:04:cf:3d:28:f2:8d:b5:a5:7f:1d:
         02:7b:e4:10:ee:b1:7f:21:b6:35:ae:57:d1:b1:ec:fb:67:39:
         11:c1:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:11 2026 by rpki-client