Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File:                     oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier:          jlQVpqFJRgWDGBqOGr+WyDNffkUWPpJDTnJsyJWTOVw=
Subject key identifier:   83:93:42:2D:9A:EB:B0:76:F3:1F:93:B9:3E:9C:61:41:B3:12:98:E5
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer:       /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number:          01DA
Signing time:             Fri 17 Apr 2026 03:18:31 +0000
Manifest this update:     Fri 17 Apr 2026 03:18:30 +0000
Manifest next update:     Fri 24 Apr 2026 03:18:30 +0000
Files and hashes:         1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: NTqjjE1avGFbfo8NAAdgWFsIoHcVzdD79ypdTTRia8E=)
                          2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
                          rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
        Validity
            Not Before: Apr 17 03:18:30 2026 GMT
            Not After : Apr 24 03:18:30 2026 GMT
        Subject: CN=69e1a687-a40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:a5:98:41:11:0f:14:8c:73:85:ae:8e:48:
                    76:82:17:21:85:9a:de:ff:81:38:1a:32:f4:1c:96:
                    22:aa:22:28:9f:4a:b2:ce:2f:93:7f:93:7e:6c:5c:
                    fd:40:3c:de:22:cf:74:5f:ef:a2:86:0f:43:ea:1a:
                    71:1f:0e:1e:bd:e2:92:8b:39:00:2a:d1:44:35:4e:
                    2d:1f:5b:d0:99:0e:7e:ec:42:50:52:f8:02:45:5b:
                    d1:07:96:ec:07:9c:38:b7:9a:7d:9b:8b:71:7f:13:
                    69:1c:34:73:ee:56:45:f4:64:cc:30:eb:c1:fb:46:
                    04:55:ed:73:9e:15:a9:84:fd:83:6f:37:c3:4a:0e:
                    e2:20:62:71:ba:77:8e:d0:57:72:aa:1f:87:6c:15:
                    45:e9:b8:99:b5:be:67:84:af:e8:7c:32:7a:7a:e4:
                    c2:7c:a0:eb:1a:b1:b6:95:04:1f:79:99:79:3e:29:
                    f3:33:8c:58:1f:c1:a7:d0:3a:c3:71:af:53:5a:0d:
                    17:25:45:a7:f7:c0:55:d4:c8:bf:2a:32:c1:6d:46:
                    ce:0d:35:05:96:49:cc:f7:bb:33:8f:04:3f:8a:a2:
                    a6:b6:89:9e:76:a6:92:0c:a7:f7:cc:b0:c4:14:78:
                    46:0e:2a:d7:06:da:31:9a:7d:f6:ce:6d:68:69:8d:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:93:42:2D:9A:EB:B0:76:F3:1F:93:B9:3E:9C:61:41:B3:12:98:E5
            X509v3 Authority Key Identifier:
                keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:16:03:49:1a:55:c7:fc:74:9b:b5:66:e9:f7:4e:18:d2:d0:
         4b:a7:ec:2d:62:19:31:29:8b:80:8c:cf:e3:de:9c:07:f3:38:
         38:44:e9:8f:d6:45:e5:f8:8a:45:99:37:31:e3:3c:6c:68:38:
         17:46:c2:10:18:a5:18:4a:96:de:29:15:9e:f2:b1:70:d2:13:
         0e:6a:11:39:5c:cd:f2:aa:27:11:ab:a9:44:ac:7b:3e:fc:3b:
         50:01:8e:28:7e:a5:f3:c9:4a:c5:79:94:08:50:79:e1:c5:8f:
         8e:6d:45:61:fb:36:0a:41:5e:db:52:20:6f:12:df:48:d1:90:
         0a:e1:0a:05:84:8e:21:4b:c4:d1:bf:cf:f7:85:fc:e2:8a:fa:
         6e:da:c0:64:27:98:02:8b:06:8c:75:4e:d2:b0:2d:74:a3:4f:
         1a:5d:b3:f8:11:a0:02:18:bf:04:6d:50:ab:44:d9:a1:fb:2b:
         a5:4c:83:c7:8a:a8:93:a0:cb:aa:57:09:4c:73:59:e2:63:32:
         12:43:f5:7f:61:b0:1d:e1:c2:ab:e3:aa:73:a1:ef:05:c5:9f:
         2f:94:bb:35:5e:12:a2:d1:01:0c:4f:83:d6:a9:d9:4f:c4:f5:
         e4:6b:32:19:8b:04:1e:03:80:cd:46:80:55:e9:9c:83:83:fb:
         2e:56:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:09 2026 by rpki-client