Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
File:                     owQJVBg5BUscPhXRmD19vYp9ZII.mft (raw, json)
Hash identifier:          6asQ5ujaL0OkqfCWeNZsHw1vsgzNFq0U7o+4lyb74OA=
Subject key identifier:   5D:36:71:12:9B:BF:E9:A5:FE:27:6E:2C:D7:B3:74:D4:F7:B7:40:C1
Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82
Certificate issuer:       /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
Certificate serial:       0498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
Manifest number:          0491
Signing time:             Tue 22 Sep 2026 23:37:30 +0000
Manifest this update:     Tue 22 Sep 2026 23:37:29 +0000
Manifest next update:     Tue 29 Sep 2026 23:37:29 +0000
Files and hashes:         1: owQJVBg5BUscPhXRmD19vYp9ZII.crl (hash: IcO17mljGof+QpCXhQ36EgE+yHibVMYN6KG2EHLhh/s=)
                          2: 521DCED89C5911EC97E58855C4F9AE02.roa (hash: dLAnyeTxvDfQF9JYWN7ad+kpYFAFicvcPDptysNHc+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl
                          rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9E03, serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
        Validity
            Not Before: Sep 22 23:37:29 2026 GMT
            Not After : Sep 29 23:37:29 2026 GMT
        Subject: CN=6ab3113a-86f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:29:16:6d:8d:01:99:aa:08:b2:4b:4f:71:
                    39:28:8b:0c:15:9b:93:14:ba:f7:5a:90:8d:ea:a7:
                    50:88:93:d7:e8:07:1e:9a:0e:a5:c8:90:df:e4:26:
                    be:95:0b:60:dd:1b:9c:cd:15:82:8f:1f:3b:82:57:
                    88:d1:87:00:5f:c9:a3:31:bc:ce:97:f1:9c:b1:c7:
                    d8:de:fb:ab:4d:25:c8:e0:1e:1d:10:42:af:49:36:
                    81:4a:54:c2:5c:2c:82:b9:95:73:d7:72:f9:36:22:
                    7f:b7:09:82:33:30:29:65:12:75:76:a7:ef:97:7d:
                    40:6c:5d:f0:d4:4a:8b:d6:a6:eb:13:d6:1d:78:af:
                    7f:5d:04:96:6f:ae:d6:9e:9e:9f:67:c1:23:b3:21:
                    c6:67:6e:00:ff:58:37:48:fe:72:f6:3b:64:8b:1c:
                    bd:f5:59:83:8d:58:9f:9b:a6:8b:7a:3d:5c:85:35:
                    ae:dc:30:ef:63:bf:70:5d:37:7c:84:22:24:69:e8:
                    e9:1e:72:c3:5f:2a:65:8b:05:39:d6:8c:64:31:9a:
                    43:e7:70:63:a8:d3:71:4a:5e:aa:ef:96:fb:4a:6f:
                    61:ef:15:01:50:75:9b:95:ec:1f:dc:db:ac:8f:b3:
                    74:14:30:56:9a:ad:46:dd:ee:f3:81:89:e5:71:f9:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:36:71:12:9B:BF:E9:A5:FE:27:6E:2C:D7:B3:74:D4:F7:B7:40:C1
            X509v3 Authority Key Identifier:
                keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:73:14:2f:13:0c:ae:d7:c0:b2:dd:57:d0:9b:46:9f:95:
         d5:b3:14:f8:18:4d:14:b0:fd:1e:c2:a7:a7:df:ee:46:7c:67:
         95:37:ba:e6:5e:51:e8:a6:d7:01:62:da:2c:ab:5f:ba:6f:f8:
         91:3c:a0:5e:7a:9d:11:6c:dc:a8:f9:30:39:9c:3e:4d:8e:22:
         ae:a8:5a:07:da:d4:5c:2a:34:46:c3:48:27:11:d9:da:75:e5:
         5f:da:40:07:db:18:4c:8a:09:7b:7b:8d:96:70:6b:46:4a:a2:
         04:fa:cd:8f:2e:66:78:dc:57:2d:f4:06:c5:ef:1b:62:30:20:
         12:0a:18:fe:01:e5:2e:b2:73:3a:eb:62:f3:cc:63:7a:fd:08:
         27:ff:6e:d2:bc:38:d7:65:53:47:56:74:98:29:48:0f:82:4d:
         33:90:ca:79:41:b2:1c:ea:28:6e:31:60:3a:fc:28:9c:7c:29:
         a3:67:91:a2:bf:33:48:93:19:ff:f7:81:59:5d:64:11:e7:a1:
         11:3b:c7:b5:ba:48:d1:60:67:62:6a:ba:5a:9a:0f:77:20:4d:
         27:a2:e5:14:27:d5:48:f8:13:27:c3:e3:13:96:42:18:07:ef:
         94:61:df:d6:38:49:dc:e8:ef:ea:f9:0a:1d:bb:fc:ad:eb:3e:
         cc:d6:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:27:26 2026 by rpki-client