Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
File:                     khO1BHpA8jx8YASA5tqnoc9_oug.mft (raw, json)
Hash identifier:          yTl+JNvPRWI5Fo7TSLliN1Xzh7RdAVmL1m/x5bsNbac=
Subject key identifier:   88:0D:38:0D:4E:E6:BC:0E:D0:D0:CF:7E:BB:AB:51:27:B8:96:B7:D6
Authority key identifier: 92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8
Certificate issuer:       /CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
Manifest number:          01CD
Signing time:             Sun 01 Mar 2026 04:22:21 +0000
Manifest this update:     Sun 01 Mar 2026 04:22:20 +0000
Manifest next update:     Sun 08 Mar 2026 04:22:20 +0000
Files and hashes:         1: khO1BHpA8jx8YASA5tqnoc9_oug.crl (hash: PrSaiIktKXwAM5ntPWX/tx7MSgB4XqjqvhxnJHm5ItI=)
                          2: 4E18682450A911EEA39AAE41C4F9AE02.roa (hash: 3nZkRqzVFhraaOpvrG0LDJguOxKECxTU8dAQntDOqqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl
                          rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91435F3, serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
        Validity
            Not Before: Mar  1 04:22:20 2026 GMT
            Not After : Mar  8 04:22:20 2026 GMT
        Subject: CN=69a3befd-283b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:86:7f:35:1d:62:9a:23:96:61:b7:f6:1f:
                    32:bd:0f:76:f2:d1:dd:30:82:0a:e6:54:90:b2:b5:
                    c1:e5:e4:76:90:92:15:2a:38:2c:ba:31:96:a2:cc:
                    52:f2:be:6a:3d:3e:95:9d:42:e3:86:8c:97:9a:ad:
                    5d:e0:e7:62:45:e7:b0:0d:3e:95:dc:c5:cc:aa:6d:
                    19:d9:ce:0f:80:eb:93:35:23:4a:f9:d9:b0:07:87:
                    d9:9c:c2:e8:ba:03:22:33:f9:50:85:72:57:ba:b5:
                    b2:64:da:69:c8:d5:5a:69:eb:27:34:a7:99:84:a0:
                    bf:43:08:9d:ed:a4:5b:2b:bb:42:72:98:a3:08:5e:
                    b3:2f:b6:51:76:7f:f7:91:13:e6:ef:ef:4a:b9:7e:
                    ec:aa:72:30:7d:5c:f3:c2:e4:41:9d:3f:c4:f6:3e:
                    2e:bb:8c:40:0d:a3:4b:ce:da:67:bb:30:1e:e5:4b:
                    89:df:3d:43:0d:fa:b3:1e:db:3f:1e:55:31:7c:38:
                    40:c5:38:45:62:40:b5:1b:86:03:fe:4e:65:07:87:
                    03:34:e9:e7:fa:3f:cf:32:18:d8:37:cf:23:76:b1:
                    5a:4a:1a:8b:54:8a:81:35:f0:9c:3c:fb:4e:51:94:
                    a2:2a:73:0c:da:d0:65:93:4a:50:de:45:dc:80:b8:
                    85:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0D:38:0D:4E:E6:BC:0E:D0:D0:CF:7E:BB:AB:51:27:B8:96:B7:D6
            X509v3 Authority Key Identifier:
                keyid:92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:64:a6:47:b6:e4:da:ea:66:e0:61:b2:c7:74:e5:be:31:ec:
         44:ac:da:b8:0e:39:c4:99:26:82:fd:2e:64:46:cf:f9:d3:4d:
         be:8c:8a:68:2c:52:54:69:f5:66:37:5a:93:21:74:99:2e:99:
         9a:86:80:cb:be:91:4d:61:a2:22:53:f6:6f:d3:a7:cd:d5:47:
         2e:2d:64:47:4d:45:a1:62:48:62:b2:da:7a:0b:e7:db:e1:6f:
         5e:c9:3f:37:1e:d0:07:61:c0:b7:3c:34:17:85:54:46:7f:cc:
         e8:88:24:4f:e2:98:0f:08:88:d6:21:05:fa:5b:d6:f0:28:98:
         10:90:78:82:ac:5b:09:1f:5a:d4:60:8f:61:c5:90:d4:d1:7f:
         86:d6:ad:2c:d8:0e:8c:b1:e7:33:36:4f:ed:8b:4a:e6:5e:ce:
         38:bc:ff:26:c2:e6:f6:5d:6c:a6:57:0b:a8:46:a7:5d:56:25:
         54:23:1f:a4:44:2a:e7:80:f5:3a:6b:e4:0b:80:0b:80:6e:31:
         34:65:76:d4:98:d8:dc:67:1e:ac:24:61:ce:e2:a2:33:31:6e:
         91:13:e9:4d:0d:92:f1:ef:11:c9:2d:77:ae:25:d1:f7:b8:c0:
         de:cb:a0:31:89:a1:fa:50:3e:e2:a0:ea:dc:c1:42:1c:53:2d:
         21:31:f7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:34 2026 by rpki-client