Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
File:                     OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json)
Hash identifier:          X0RXhBVSH24Se4BBF3h5FiyyfN/nQefr1/nskWEROs4=
Subject key identifier:   47:A2:86:F6:16:8F:3D:D9:B8:DB:3E:AC:35:69:5B:F6:43:07:78:9A
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
Manifest number:          E0
Signing time:             Mon 11 May 2026 06:45:50 +0000
Manifest this update:     Mon 11 May 2026 06:45:49 +0000
Manifest next update:     Mon 18 May 2026 06:45:49 +0000
Files and hashes:         1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: +nEfiFoqLfCK16W5ahlCLi4zK+h6nlNY4gEKwkh3WL4=)
                          2: 16105334922D11F087917886C4F9AE02.roa (hash: rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=)
                          3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: ioHaAryV52goIPTIw4MmhfdDQAaRIVCGfRVkC5i3KUo=)
                          4: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: May 11 06:45:49 2026 GMT
            Not After : May 18 06:45:49 2026 GMT
        Subject: CN=6a017b1e-06b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:bf:29:3f:67:dd:f0:e7:18:63:1a:71:b3:
                    06:75:52:28:37:c5:d9:ca:80:3f:c6:90:ae:e3:06:
                    26:8c:5f:37:4a:3a:c4:6b:b6:f0:d5:b5:f1:87:62:
                    f0:dc:b9:97:72:cd:f3:34:62:0a:4b:8a:58:ff:91:
                    d3:66:a6:9f:84:3a:c4:2a:5b:a5:f3:90:fc:4f:a2:
                    5a:f5:a2:7c:45:71:f7:ac:cb:ce:aa:d2:90:41:2f:
                    ae:2f:10:cf:67:b1:ec:66:3a:76:01:0d:7d:ee:b0:
                    23:79:7d:5a:cd:25:90:98:d8:da:af:96:87:b7:c3:
                    27:ac:9f:f3:c2:ef:17:9d:8e:01:97:e3:17:3b:78:
                    a7:bf:eb:d2:3b:18:73:4f:89:3a:bc:74:af:93:ca:
                    73:a7:1a:82:e9:b3:99:24:7b:84:95:fd:a9:84:69:
                    60:1e:d5:46:85:cc:d1:90:bd:1d:04:36:19:c0:ae:
                    7b:68:cc:6b:24:20:e4:60:c0:ab:46:fd:1b:45:25:
                    87:63:30:cb:aa:7c:de:b9:93:fb:00:f1:89:69:9b:
                    31:9e:50:c8:d6:3b:7e:41:e2:da:bc:2a:76:08:9d:
                    2c:59:fe:e1:de:43:08:b7:94:15:79:9f:e4:a1:d5:
                    a9:75:04:4a:df:64:3e:5e:63:2e:bf:57:86:5f:21:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A2:86:F6:16:8F:3D:D9:B8:DB:3E:AC:35:69:5B:F6:43:07:78:9A
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:40:f7:f4:c0:85:4e:eb:4e:b6:03:54:76:38:2b:0b:90:e8:
         16:e2:8b:4c:db:08:98:6d:93:95:02:5a:0c:c6:e3:6c:23:38:
         7b:2f:91:8c:79:1b:04:fd:44:f1:b3:d0:c7:8e:98:46:7b:f7:
         1d:53:35:bd:f0:4b:49:82:82:ac:13:e1:b2:d5:ee:94:39:50:
         b3:31:b0:ed:90:93:82:8c:ea:03:76:7b:50:df:13:89:b9:78:
         b1:e3:81:8c:73:0a:46:ec:71:b0:a4:05:df:a4:b3:ed:7a:53:
         61:7d:21:c2:cf:1a:f3:33:d8:98:f6:59:2f:82:a4:e0:5b:24:
         b9:82:20:2c:e0:59:26:c1:4b:ca:3f:96:82:2a:65:dd:d6:b9:
         66:2a:69:08:86:a5:22:88:f8:d0:5d:fb:ed:3f:63:e5:29:11:
         e9:b6:f5:ea:89:17:28:10:e1:ec:1a:0d:06:91:04:5c:e1:6e:
         04:f6:b9:db:15:6d:8e:ce:fb:08:bf:18:57:9b:1d:24:91:d0:
         57:be:e4:ef:36:64:16:1f:64:74:84:aa:db:e9:a1:f0:f4:d2:
         65:46:84:5d:ca:2a:06:48:19:70:91:1e:ad:7c:0f:ca:a0:12:
         c0:cd:67:a4:fd:a7:b1:d7:cf:6d:cb:85:1f:de:26:61:58:20:
         02:a2:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:12:04 2026 by rpki-client