Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
File:                     otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json)
Hash identifier:          n5/LDWMmC5Q6W6PYa1w8mJaRHn/4mdA2Fp20IYBS6qs=
Subject key identifier:   A7:F1:F3:FA:EF:6B:20:1F:93:FB:EE:0C:C3:ED:95:8A:BB:FF:88:12
Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
Certificate issuer:       /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
Certificate serial:       0888
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
Manifest number:          087D
Signing time:             Thu 16 Apr 2026 20:32:25 +0000
Manifest this update:     Thu 16 Apr 2026 20:32:25 +0000
Manifest next update:     Thu 23 Apr 2026 20:32:25 +0000
Files and hashes:         1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: NH6ofZuqCU7c/PaO7qCUNaysRKY02tqVInjKwNGJdZw=)
                          2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: YlLKPrLBFRAZGSSI/PrP1aG6kr00THkq/rtie7tyqFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl
                          rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
        Validity
            Not Before: Apr 16 20:32:25 2026 GMT
            Not After : Apr 23 20:32:25 2026 GMT
        Subject: CN=69e14759-e2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:43:12:b1:86:19:03:fa:e6:0e:a1:8e:89:
                    95:9d:1d:07:e9:4a:d6:e8:f8:d3:d2:c4:71:dd:a1:
                    fd:43:d0:53:48:5b:d3:d7:f0:87:1e:84:ae:e6:81:
                    41:ed:70:59:55:72:d8:2d:af:45:28:75:bf:8e:03:
                    08:5a:3d:32:25:d1:46:6c:26:eb:c0:31:ca:6c:91:
                    4f:0b:b6:89:db:e9:f9:2c:74:36:b5:c1:20:ce:c3:
                    85:a9:59:e3:94:98:d1:5f:fc:30:3b:2b:33:fd:36:
                    d1:fd:a4:be:96:ee:f4:cc:ea:92:46:fe:58:6a:6f:
                    46:15:ac:91:81:e0:5b:dc:c7:4c:fb:5c:0c:ac:1c:
                    7b:48:18:d3:56:26:47:69:87:1a:a4:9e:dd:4a:2b:
                    48:6a:f5:1d:47:09:90:ea:8e:69:06:68:68:e2:5d:
                    96:8e:c6:69:b2:fc:33:87:63:4a:f9:d3:43:b0:1e:
                    66:b4:20:4a:3c:fc:d9:dc:dc:7d:7f:f9:f7:1e:79:
                    ca:cd:a6:d9:10:30:5f:3f:85:1d:b3:3f:1b:74:dc:
                    5a:70:7e:da:3e:da:49:39:75:7f:73:59:17:d1:5c:
                    ec:12:a6:84:2b:9e:e3:6e:75:07:91:f1:51:51:6f:
                    c2:14:ce:49:61:70:df:44:53:7c:92:55:73:cc:25:
                    d3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F1:F3:FA:EF:6B:20:1F:93:FB:EE:0C:C3:ED:95:8A:BB:FF:88:12
            X509v3 Authority Key Identifier:
                keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:48:5f:53:21:a1:6a:e7:9e:92:44:4d:62:da:48:7e:79:
         fd:72:0c:64:8b:3c:d2:23:54:d9:a2:86:db:65:1f:58:b3:71:
         f6:24:1e:45:a6:c0:e1:37:ce:e0:e0:dd:eb:41:2a:73:7f:23:
         82:56:5b:ef:1d:bf:c5:dd:51:e8:99:5f:69:4d:62:3d:5b:c1:
         cf:ef:6e:0e:67:96:6c:9d:78:0d:ed:d2:80:79:7a:60:f0:ac:
         af:13:e0:32:1a:7c:30:0c:6f:94:86:54:12:d6:b0:4f:79:2e:
         24:a2:a6:25:57:77:c7:6f:b0:2e:a6:68:80:f0:82:8a:f5:7e:
         0d:cd:35:99:14:cc:b2:58:70:eb:e9:2f:0e:ee:c6:39:6e:c2:
         0a:a1:b8:24:e3:80:3d:4d:f2:f9:aa:0c:26:7e:72:69:f3:64:
         0d:2f:ac:fc:fe:3e:fd:ad:eb:4f:53:d3:af:95:aa:c0:c9:6b:
         bd:6c:1a:ff:22:9e:29:d7:02:ae:20:23:17:25:0f:22:f3:c2:
         0e:a7:fb:20:d3:30:54:78:64:f0:66:11:2b:2f:2c:56:a9:29:
         c8:56:be:9a:ae:f2:ee:14:05:9c:91:7e:44:7a:af:fd:63:43:
         47:c9:0f:66:f0:17:57:fe:cf:11:1f:77:27:a5:81:cf:0f:a4:
         a9:06:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:33 2026 by rpki-client