Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
File:                     oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json)
Hash identifier:          uMss3NYZdZ4lBe1zU+8hB+Ro3eRxfrAZDlYzZs29v3o=
Subject key identifier:   C7:35:43:2A:23:A6:AA:DF:7E:42:F7:4D:61:63:FE:21:E4:4D:B1:67
Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA
Certificate issuer:       /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
Manifest number:          01DF
Signing time:             Fri 27 Mar 2026 02:59:24 +0000
Manifest this update:     Fri 27 Mar 2026 02:59:24 +0000
Manifest next update:     Fri 03 Apr 2026 02:59:24 +0000
Files and hashes:         1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: en1m7WJfzgYPqv7rWVq4oESkiskXwT4g4Qs4x2HNFGg=)
                          2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: r8/9peTSjQhr0FyyL8WXDBdFlkEwEDLfGXbQKn3ob18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl
                          rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
        Validity
            Not Before: Mar 27 02:59:24 2026 GMT
            Not After : Apr  3 02:59:24 2026 GMT
        Subject: CN=69c5f28c-f27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:05:02:8e:44:6e:4a:5b:f2:dd:7b:73:6d:
                    6a:3d:aa:60:6a:45:21:24:bd:35:47:e3:03:21:ef:
                    b0:22:8f:b0:cf:28:54:d9:09:67:d3:37:a8:bd:c5:
                    1a:b8:11:71:d5:67:1b:00:72:c9:36:42:2f:1a:b8:
                    a1:dc:bd:17:c8:42:8e:02:70:5d:c8:d8:89:03:b6:
                    23:d9:8e:fe:ce:0e:7d:4e:c2:c1:4c:4b:70:d4:e9:
                    eb:09:ea:85:83:67:37:41:33:08:ba:18:17:4c:1d:
                    07:13:84:24:48:22:7e:0a:90:3f:8d:2c:91:a9:31:
                    5a:66:f7:04:c8:2c:6f:af:1f:79:11:37:0a:78:00:
                    76:a6:73:d7:ee:fa:3b:c9:82:5a:b5:fd:04:cb:d8:
                    b1:f7:14:3c:09:60:66:8e:bb:36:31:f1:42:c3:00:
                    18:ec:43:78:3c:2f:76:c6:45:d1:40:a1:d6:45:01:
                    7a:58:08:1f:a2:ec:2a:21:4c:ae:21:2f:6d:02:37:
                    d9:d3:60:64:31:88:3d:73:29:e9:d9:37:83:3e:4b:
                    ea:83:97:09:a6:2f:70:08:28:c8:15:bc:9b:42:69:
                    3b:d3:53:6f:46:69:0d:90:b9:33:89:22:a1:df:c5:
                    2a:fd:63:91:13:50:f7:fd:ac:af:06:34:e3:fd:5f:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:35:43:2A:23:A6:AA:DF:7E:42:F7:4D:61:63:FE:21:E4:4D:B1:67
            X509v3 Authority Key Identifier:
                keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f8:e6:83:3c:72:c2:a2:0b:d3:bc:da:4d:f9:29:ad:e7:5a:
         04:7d:e9:70:54:4f:89:aa:13:5b:53:bf:44:4d:33:11:12:77:
         1a:2d:77:8b:28:1a:cf:27:c7:e8:14:64:27:61:4f:d3:5e:43:
         82:4c:1a:15:82:e6:26:ba:f9:f0:02:04:93:c0:13:86:f0:68:
         0a:3a:34:fd:a0:0a:6d:b1:bd:67:be:0f:ef:d9:18:9c:ef:3b:
         40:48:e6:3a:e7:e9:7f:fc:f3:4b:e6:ac:4d:1a:82:bb:c3:dd:
         58:77:76:ce:13:3a:01:9a:f0:a4:2c:8c:e0:95:fb:99:83:18:
         53:6f:8c:0d:ba:42:01:9e:c3:1e:f5:4a:00:16:9a:6b:c5:f7:
         e3:6b:48:dd:2a:64:51:a5:01:82:fc:8d:cb:80:da:da:36:57:
         77:7c:ea:0e:16:f4:31:a3:e8:e9:19:eb:e1:42:4f:7b:c2:fd:
         4a:d2:7c:11:42:5c:c1:7e:f2:29:74:6d:b3:61:58:f2:68:0c:
         13:2b:63:5d:07:a6:00:3b:78:be:4a:9f:a8:e9:f5:87:2b:86:
         30:f4:f9:03:37:4b:6f:8d:51:ea:f5:a4:88:8e:76:ea:de:eb:
         52:5f:c9:2e:26:fb:c4:fc:2c:c8:53:54:9a:09:aa:a6:f0:23:
         44:f5:4f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:14 2026 by rpki-client