Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
File:                     o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft (raw, json)
Hash identifier:          NwIdjO29sUPjURhE4P1HuCevlK8aYIjLq442Pl7TOlM=
Subject key identifier:   C5:A8:D5:B9:51:A4:7D:18:99:AF:A0:14:12:D2:EC:72:53:E1:7C:F5
Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65
Certificate issuer:       /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
Manifest number:          017D
Signing time:             Fri 17 Apr 2026 04:22:56 +0000
Manifest this update:     Fri 17 Apr 2026 04:22:56 +0000
Manifest next update:     Fri 24 Apr 2026 04:22:56 +0000
Files and hashes:         1: o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl (hash: /IS794CDWRtq7rOFnR3djoHfFjbQcHfcMwKzU7Mqw8c=)
                          2: 4A9AD51270F811F0BA070F34C4F9AE02.roa (hash: EykIZqKWyW5Hz0e2jWinLEma3navcyNteamjb1QiVS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl
                          rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265
        Validity
            Not Before: Apr 17 04:22:56 2026 GMT
            Not After : Apr 24 04:22:56 2026 GMT
        Subject: CN=69e1b5a0-abf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:a0:d6:2e:76:39:56:da:ce:d9:28:48:71:
                    72:03:55:29:d7:e2:b3:bc:08:d7:2e:12:0c:d2:4d:
                    06:bb:00:97:d9:2d:32:c7:6e:49:98:e6:e8:50:46:
                    75:7f:8a:aa:01:bb:72:57:11:94:05:5d:33:87:1d:
                    4c:ea:bb:6d:13:af:7c:f0:1c:5c:4e:f6:50:4c:5c:
                    63:a9:a2:57:88:e1:04:47:ae:3c:b4:e0:cf:bf:21:
                    20:1f:f4:c4:fb:fa:d2:7f:a1:c2:a7:fd:8b:93:b1:
                    cc:32:2b:1c:5a:b2:00:67:ad:94:c4:e9:76:43:ea:
                    d3:89:93:8b:a5:e2:65:af:87:80:27:10:35:00:88:
                    2a:03:54:73:da:da:41:9f:d6:52:ec:41:53:22:5b:
                    e6:6f:ed:48:ce:86:0f:6d:ff:7c:ca:58:61:d2:65:
                    3e:fb:d8:1a:e9:9b:87:85:e6:85:59:52:08:2f:cf:
                    9d:10:52:f3:5f:85:f8:39:b2:64:ac:c3:5a:a6:3b:
                    24:c7:93:6c:d7:39:37:9a:37:55:91:c0:eb:f6:44:
                    97:d3:76:ee:45:ab:70:f2:40:72:da:46:c0:51:4c:
                    cd:24:94:3b:40:0c:7f:03:fd:3b:ed:93:66:12:5b:
                    45:5d:c2:06:c7:c5:c0:be:23:67:22:fe:42:c1:60:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A8:D5:B9:51:A4:7D:18:99:AF:A0:14:12:D2:EC:72:53:E1:7C:F5
            X509v3 Authority Key Identifier:
                keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:25:e1:b7:f1:77:9f:6e:b9:ce:60:7e:65:3a:21:cb:14:70:
         b1:58:2f:6d:03:1c:2b:44:34:8f:d0:bc:80:a5:f0:25:6f:40:
         cf:58:c4:e0:36:89:03:21:fa:cd:62:a7:63:6c:f8:02:28:3c:
         dc:5b:5b:fb:9a:b0:6b:6a:6a:1f:a8:a7:45:3f:26:b8:d9:71:
         d4:76:8d:48:7c:1d:d5:2d:35:f7:21:b5:a2:1b:95:2f:a3:8a:
         68:e9:1c:38:0c:82:89:df:b9:db:2d:6f:9d:21:ca:2a:0c:f8:
         0e:63:26:72:8f:2e:51:8d:e6:ac:95:79:c1:ec:71:15:91:0c:
         01:1a:c0:bb:72:ee:cc:05:a3:9b:b8:e8:2a:da:66:7e:e5:aa:
         63:db:57:32:35:b2:0f:df:6a:a5:8f:fe:c8:67:f9:8f:a4:2d:
         ea:c2:e5:8a:8c:b9:c2:19:78:68:6e:e9:b7:41:30:6b:f8:7d:
         6a:7f:20:21:bb:dc:94:73:bd:93:66:9e:d2:5c:87:79:db:20:
         cf:ee:e7:09:d6:82:42:ae:9a:ad:ca:5d:af:33:98:32:fe:0e:
         87:14:0b:12:27:8a:0b:f7:af:70:01:1a:b5:61:37:de:4b:b4:
         18:18:ef:5e:5f:1f:b7:9b:6d:bc:35:81:60:38:59:a8:ef:39:
         52:b1:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:08 2026 by rpki-client