Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File:                     5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier:          2yj3Xjhg/YM5p1DxKcRPwrG8rYZusIXGfXHJlHNetts=
Subject key identifier:   E7:97:B4:3B:30:06:88:E2:1F:A7:89:0C:01:F5:67:A6:19:D1:D8:32
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0E6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number:          0E53
Signing time:             Thu 16 Apr 2026 17:42:42 +0000
Manifest this update:     Thu 16 Apr 2026 17:42:41 +0000
Manifest next update:     Thu 23 Apr 2026 17:42:41 +0000
Files and hashes:         1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: EoPQ6dYCd66T7gKzsoWjzNPIbe4KghSXj6kaQTCSkf8=)
                          2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: rCv4VZFxlM5Jq4C3j2l3PuKDpBe2qyl52Dmb9dWtw1M=)
                          3: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: Eedt5weKXhob6WahAhHqHEFNYr+gasvFvblJrgH9PEc=)
                          4: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: 0lV+81b9RxF3wcx4IicrWRetZXK3VtJEDFXrSkR6osQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3694 (0xe6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Apr 16 17:42:41 2026 GMT
            Not After : Apr 23 17:42:41 2026 GMT
        Subject: CN=69e11f91-fbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:38:b8:b6:b1:3c:49:13:5c:1b:36:a4:c6:
                    08:92:7e:65:65:e8:be:e1:2a:d4:6d:11:9f:ad:62:
                    e3:59:c9:b3:3b:70:47:88:91:a5:d7:ad:65:f7:3f:
                    e7:6d:7e:07:92:76:43:a1:1b:8a:01:da:43:b4:ae:
                    c1:38:56:3f:8e:be:0a:72:a2:89:7f:0d:ae:b2:8b:
                    0b:a8:c9:a4:a9:4d:66:b0:d6:31:74:8b:d3:4e:8b:
                    6f:95:6b:3a:cb:ce:04:3c:c7:b6:a5:df:5c:c5:cd:
                    78:c4:49:6a:6f:63:d1:74:66:5a:98:d3:6b:02:23:
                    c8:b6:b7:ff:14:27:6e:c1:52:04:bc:2e:b2:8f:af:
                    c6:55:97:32:8e:15:1a:0f:05:16:c5:ca:f6:d1:a0:
                    3e:44:1b:d8:f4:37:93:21:de:d6:dd:1f:24:06:b0:
                    56:6d:76:3c:1e:f7:fa:97:1d:73:51:a0:10:12:d9:
                    9d:75:50:b5:24:f4:18:e5:eb:96:57:42:28:e1:a4:
                    82:28:5c:e3:83:d1:31:1f:28:38:22:c9:83:9c:b2:
                    70:2b:2b:16:0f:bd:dc:de:19:5b:96:7a:05:78:61:
                    93:ae:5c:9c:61:8c:64:2c:77:8f:92:c7:b2:2b:5d:
                    5f:ed:08:a1:0f:00:ef:8d:bd:b6:b5:d6:bd:9e:da:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:97:B4:3B:30:06:88:E2:1F:A7:89:0C:01:F5:67:A6:19:D1:D8:32
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:66:0a:e9:ec:05:ad:9c:13:8b:51:b5:4f:36:bf:c9:5e:
         03:32:54:40:9f:ab:ec:6b:ea:a0:bb:8d:0d:56:35:5e:48:34:
         46:b1:4f:e7:5c:e5:ea:06:86:5f:65:dd:54:c9:0e:38:01:76:
         da:4f:7f:da:ff:d5:1f:52:3e:89:fe:fd:6f:be:8d:af:41:ce:
         fa:e8:da:58:39:0c:75:dd:e3:f6:25:00:43:67:dc:fe:62:5e:
         24:03:d6:5c:e0:0a:19:9a:57:35:9c:b2:e0:b3:26:13:8b:8d:
         01:5c:ee:d1:95:12:5c:c3:33:72:ef:46:a2:66:4c:32:68:f6:
         03:de:ce:3b:b3:10:ee:a9:44:bc:78:dc:d4:de:b3:7b:87:b7:
         82:62:92:71:ae:8a:01:9f:48:b4:66:db:03:7e:cd:08:dd:1e:
         68:28:f9:77:21:d5:62:bf:e2:8b:5a:39:8a:15:df:60:fd:55:
         dc:00:6e:fa:8f:48:c8:eb:91:df:e7:77:21:18:41:66:cb:aa:
         36:88:85:16:35:42:40:f6:46:22:5c:44:dc:8b:a8:50:7a:e4:
         ce:16:0c:96:ec:b9:e2:b8:65:b7:7c:c3:e8:06:d8:eb:75:8b:
         f2:19:f0:b4:65:36:0e:d7:b2:67:f8:13:1e:98:9b:21:16:91:
         99:55:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:47 2026 by rpki-client