Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
File:                     ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json)
Hash identifier:          2Ik72dBlsln1h/SROPaTSTPa7Qq2y6NTORoOqhu2Dso=
Subject key identifier:   68:9D:43:FC:34:F7:EA:F1:68:56:FA:4A:60:9F:6B:69:D8:D0:2F:F7
Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93
Certificate issuer:       /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693
Certificate serial:       080C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
Manifest number:          0801
Signing time:             Thu 16 Apr 2026 21:06:17 +0000
Manifest this update:     Thu 16 Apr 2026 21:06:17 +0000
Manifest next update:     Thu 23 Apr 2026 21:06:17 +0000
Files and hashes:         1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: gcj14jx80xIdA4d7rNGv4d9qGWg+cXA3K4au9FGD7pM=)
                          2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: xBMELOpqJ4lnqq47hcS7bDXF3hPxxlzBtOSvLVgcPrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl
                          rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060 (0x80c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693
        Validity
            Not Before: Apr 16 21:06:17 2026 GMT
            Not After : Apr 23 21:06:17 2026 GMT
        Subject: CN=69e14f49-64b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:4a:38:1c:a4:56:ef:28:d3:51:b5:16:1b:
                    fe:ef:5f:8e:1f:b9:19:60:9d:3f:a5:07:b0:2f:13:
                    aa:d8:c8:1c:42:99:63:db:4f:8e:4f:df:9e:b3:f5:
                    ad:48:47:67:50:0a:7e:25:80:6f:39:8b:e3:34:66:
                    d1:78:62:bd:e7:16:50:a6:17:a9:a8:31:89:b8:63:
                    d7:03:41:3a:91:fc:2d:8e:1e:99:be:15:7d:a8:cc:
                    ab:53:2a:57:32:91:c9:4a:40:da:2d:98:eb:5d:77:
                    35:73:1b:81:58:74:3c:cc:4a:04:24:25:41:1e:02:
                    cb:84:e1:2b:a0:e4:0a:57:53:8c:a9:08:a9:af:4f:
                    34:fb:8e:07:f6:3f:e2:cc:d7:1a:00:5e:c3:40:63:
                    3e:67:54:74:73:71:59:54:01:c5:be:81:db:23:37:
                    22:dc:b6:36:b4:63:e0:27:de:2e:d1:69:2b:33:ac:
                    a4:b3:6a:2a:a4:86:f6:20:52:58:bb:9e:f5:7d:0b:
                    76:05:31:48:81:01:34:9d:1c:a7:f4:cc:18:41:1a:
                    d7:76:3e:b2:2f:88:63:21:9b:d0:51:52:d4:ee:a4:
                    4a:bb:c4:ad:36:76:8e:dc:de:e4:6f:da:ec:38:55:
                    ce:ca:f8:08:22:53:b0:3a:c8:58:8d:65:59:8b:36:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9D:43:FC:34:F7:EA:F1:68:56:FA:4A:60:9F:6B:69:D8:D0:2F:F7
            X509v3 Authority Key Identifier:
                keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:28:59:88:c5:d3:7a:b3:df:30:c0:d1:92:17:d8:e5:ff:
         9d:a9:a6:cb:73:92:73:6a:27:05:06:97:2a:f7:d2:b6:ec:11:
         f6:07:29:f3:cd:d0:38:50:f4:b5:f6:b0:f2:33:22:93:af:fc:
         6b:39:88:2b:e5:49:c3:bc:69:9b:3d:f3:c1:e8:b6:fe:81:8a:
         f4:7d:cf:80:02:f3:d1:b9:f3:fd:eb:ea:14:22:de:62:5e:13:
         1f:c8:87:0f:b2:4e:ad:d3:9f:e5:d4:4f:56:da:18:9c:a2:d7:
         09:21:16:5e:51:78:ba:8d:81:41:b7:8b:3e:18:90:e4:67:00:
         79:89:9e:73:9f:df:f5:39:09:f3:92:0e:a1:48:ee:a1:12:eb:
         ee:25:4f:7a:a1:59:a3:62:0d:b2:de:5c:28:fc:bf:a0:7d:19:
         dd:ef:c0:96:de:94:53:51:00:34:e6:6e:02:18:8f:ab:fd:90:
         6a:c5:7d:71:81:91:62:97:57:6a:0a:30:6d:89:dd:bc:8d:9c:
         b9:89:19:03:ef:4d:92:be:77:a7:b3:40:9e:68:1d:b9:45:36:
         f7:3b:3c:24:f2:e0:e6:54:9d:8f:eb:89:52:6d:e4:90:6b:d6:
         67:a5:38:a1:ed:11:0c:15:06:de:ed:3a:80:4d:2b:21:29:e2:
         b9:36:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:51 2026 by rpki-client