Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
File:                     OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft (raw, json)
Hash identifier:          bytISbsBzHkGz7eQzJPv9urXCxFZ4aN7stSZ+c7gnDQ=
Subject key identifier:   FE:6F:1B:48:2A:F7:19:C9:7C:89:F7:43:4D:64:74:B0:2F:85:2C:76
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Certificate issuer:       /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial:       1F6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
Manifest number:          1F41
Signing time:             Thu 16 Apr 2026 15:58:28 +0000
Manifest this update:     Thu 16 Apr 2026 15:58:28 +0000
Manifest next update:     Thu 23 Apr 2026 15:58:28 +0000
Files and hashes:         1: OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl (hash: 2HZGlCWlx6G4Z1wKw2b62P5sxWuOMHxBqE7MBprgkKM=)
                          2: BFF7726E6EF711E69FBC340BC4F9AE02.roa (hash: brx3F+QJqCmHbyv8rdzAimZ77OckcLhAZCr5v55mHrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
                          rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8044 (0x1f6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
        Validity
            Not Before: Apr 16 15:58:28 2026 GMT
            Not After : Apr 23 15:58:28 2026 GMT
        Subject: CN=69e10724-9b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:5a:de:86:1d:ac:a2:f5:0d:85:8e:30:b3:
                    b3:3f:4e:13:d0:5f:7c:3f:1e:fe:8b:a6:4f:bd:43:
                    ed:a0:f6:aa:1c:4d:4b:3c:82:a6:58:19:9f:ad:50:
                    a2:f5:78:c1:a2:c5:18:a1:f4:55:c4:8d:61:93:c7:
                    03:aa:30:79:69:78:2a:5e:5c:c8:0a:99:ac:cb:16:
                    17:51:1a:10:24:02:49:c1:1e:d4:37:0f:af:be:c3:
                    14:50:a8:0a:42:1c:8d:bb:c2:5e:86:b3:a8:d4:e5:
                    de:6e:3c:ad:f4:dc:ea:18:90:34:b6:19:31:86:53:
                    0e:5f:e8:dd:bf:3d:bc:99:bd:06:0f:b5:fa:8f:16:
                    6c:32:1c:5a:fb:1f:71:f7:9f:5f:7a:dc:33:24:36:
                    d3:b5:43:25:64:67:a8:f0:c3:9f:a3:a4:08:20:88:
                    d6:3f:ea:71:3e:6b:44:41:61:55:09:24:dc:40:92:
                    1e:8e:dc:9e:f7:73:dd:79:d9:31:8e:35:35:b4:52:
                    f0:09:4f:e4:cb:1f:6a:5a:64:5f:04:e4:e6:a4:55:
                    77:81:fa:89:83:13:f0:bc:9d:0a:0c:94:51:ae:cf:
                    1e:50:ec:57:ba:12:2c:ce:fe:6b:12:9e:38:c5:8d:
                    a8:3e:63:f4:1d:b7:75:c2:53:a1:0e:b1:7b:c8:70:
                    0e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:1B:48:2A:F7:19:C9:7C:89:F7:43:4D:64:74:B0:2F:85:2C:76
            X509v3 Authority Key Identifier:
                keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7c:bb:ba:85:3a:fd:f9:01:2c:23:d7:f1:56:ed:38:86:8d:
         ea:01:37:b5:24:22:4b:b9:83:32:24:73:52:14:3f:58:ad:59:
         4f:4a:7c:3a:e7:05:c7:18:3a:9f:68:ee:23:bc:f3:c0:6d:6e:
         b5:88:77:e5:46:54:32:84:70:68:b6:f2:d5:6a:0f:5f:9b:d2:
         db:d9:85:b9:93:3a:1b:a0:36:4f:c3:b7:2d:b2:10:d1:ee:4e:
         d0:65:0c:07:5d:83:9a:3d:27:99:5f:46:d8:a5:f0:2e:18:bf:
         e7:dc:16:72:5a:3d:35:e1:85:2c:e8:d1:64:6d:b5:89:ce:3e:
         0e:69:4d:9d:80:5a:0c:b9:64:aa:e4:c0:22:b6:c1:8c:7a:a1:
         2f:1d:fa:b2:d1:f1:8a:1d:2d:85:d9:1c:1b:ef:85:db:24:36:
         c6:2d:48:04:82:c4:b2:44:37:1d:d8:0c:5b:89:3d:65:04:d3:
         de:65:5c:11:22:4a:b7:30:81:d9:ff:55:14:21:72:e3:6a:7f:
         c2:84:13:aa:37:a4:10:00:3a:72:93:86:be:d4:af:0c:6e:af:
         aa:62:25:d0:b2:5d:73:14:78:bc:53:85:bb:64:43:e6:fc:d6:
         36:39:71:2f:94:46:3c:cf:72:6c:32:44:c5:16:ff:ae:69:6c:
         6c:66:3a:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBDN0MxMTAvBgNVBAUTKDM5RDFENTk1NTQxODkxMzUzMDk0NTgzNjE4RDZDQzA3
OUM4MzBDRTEwHhcNMjYwNDE2MTU1ODI4WhcNMjYwNDIzMTU1ODI4WjAYMRYwFAYD
VQQDEw02OWUxMDcyNC05YjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu01a3oYdrKL1DYWOMLOzP04T0F98Px7+i6ZPvUPtoPaqHE1LPIKmWBmfrVCi
9XjBosUYofRVxI1hk8cDqjB5aXgqXlzICpmsyxYXURoQJAJJwR7UNw+vvsMUUKgK
QhyNu8JehrOo1OXebjyt9NzqGJA0thkxhlMOX+jdvz28mb0GD7X6jxZsMhxa+x9x
959fetwzJDbTtUMlZGeo8MOfo6QIIIjWP+pxPmtEQWFVCSTcQJIejtye93Pdedkx
jjU1tFLwCU/kyx9qWmRfBOTmpFV3gfqJgxPwvJ0KDJRRrs8eUOxXuhIszv5rEp44
xY2oPmP0Hbd1wlOhDrF7yHAOIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5vG0gq
9xnJfIn3Q01kdLAvhSx2MB8GA1UdIwQYMBaAFDnR1ZVUGJE1MJRYNhjWzAecgwzh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM3Qy8yOUY3QTA0MDZF
RjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtUVXdsRmcyR05iTUI1eURE
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kSFZsVlFZa1RVd2xGZzJHTmJNQjV5RERPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEM3Qy8yOUY3QTA0MDZFRjcxMUU2OUUzMjY3MEFDNEY5QUUwMi9PZEhWbFZRWWtU
VXdsRmcyR05iTUI1eURET0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZHy7uoU6/fkBLCPX8VbtOIaN6gE3tSQiS7mDMiRzUhQ/WK1ZT0p8OucFxxg6
n2juI7zzwG1utYh35UZUMoRwaLby1WoPX5vS29mFuZM6G6A2T8O3LbIQ0e5O0GUM
B12Dmj0nmV9G2KXwLhi/59wWclo9NeGFLOjRZG21ic4+DmlNnYBaDLlkquTAIrbB
jHqhLx36stHxih0thdkcG++F2yQ2xi1IBILEskQ3HdgMW4k9ZQTT3mVcESJKtzCB
2f9VFCFy42p/woQTqjekEAA6cpOGvtSvDG6vqmIl0LJdcxR4vFOFu2RD5vzWNjlx
L5RGPM9ybDJExRb/rmlsbGY6OQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:02 2026 by rpki-client