Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
File:                     mOHpsEPmjTdp6aaNscJtcVEI94c.mft (raw, json)
Hash identifier:          DkCrx40rLFAbH+mq3MqT0F9KJzC5T/rYgxj38T+7fyE=
Subject key identifier:   60:B1:06:32:70:63:9A:F1:C3:0F:AF:9C:BB:0B:F9:35:C4:5A:A4:78
Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87
Certificate issuer:       /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
Manifest number:          0128
Signing time:             Sun 01 Mar 2026 23:44:07 +0000
Manifest this update:     Sun 01 Mar 2026 23:44:05 +0000
Manifest next update:     Sun 08 Mar 2026 23:44:05 +0000
Files and hashes:         1: mOHpsEPmjTdp6aaNscJtcVEI94c.crl (hash: /1YptOPf+i2pk72cjVPJju1lKOF6AHy68cu/NDQNLyM=)
                          2: 6BC308A4ABD111F0A03CFC15C4F9AE02.roa (hash: suxcTo4pAXO4rfaqZGeW75e6PVUd6BB1qGawp6BjtXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl
                          rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177772, serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
        Validity
            Not Before: Mar  1 23:44:05 2026 GMT
            Not After : Mar  8 23:44:05 2026 GMT
        Subject: CN=69a4cf47-2803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:e0:ad:42:c1:4f:25:f7:29:bf:a9:0f:16:
                    0a:d2:3b:0a:6d:a7:34:c2:37:2b:db:5b:2e:7f:d2:
                    4f:b8:3a:9a:cb:16:bd:f8:ce:13:b0:c2:89:4c:1c:
                    b0:3b:54:c5:e9:f0:9a:13:66:16:96:ef:75:c3:50:
                    76:5e:d4:b3:26:81:0a:0b:7b:2a:a3:50:5e:71:b8:
                    34:55:95:a8:66:5c:94:94:8b:14:5e:c5:e5:41:dc:
                    f5:d5:ab:ec:68:10:b3:70:eb:45:a9:1f:91:4c:06:
                    51:88:70:e1:58:26:45:d4:d7:e3:19:7d:f3:1e:26:
                    df:29:7b:25:88:4e:ba:86:24:b6:89:55:7e:06:9b:
                    93:37:39:1f:6e:e3:a2:59:75:6f:ff:6e:52:a6:b2:
                    62:b0:ee:94:a0:af:ed:2c:c8:61:fd:db:30:a6:19:
                    74:56:dc:d9:b1:64:cf:52:5a:42:e0:ab:65:9c:e9:
                    49:98:6a:9e:3b:ff:b7:7f:90:61:ac:88:46:a3:d5:
                    c2:d1:47:64:ba:7a:f8:e3:ad:4a:bc:be:69:b5:93:
                    f6:1c:be:17:f7:72:02:2b:a6:4a:da:1d:b7:0d:6a:
                    fa:f3:8f:c0:92:ee:7d:e0:6a:1c:90:97:76:bf:ce:
                    cf:fd:cb:bc:b1:29:3d:50:92:e1:61:9a:b7:f2:cb:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B1:06:32:70:63:9A:F1:C3:0F:AF:9C:BB:0B:F9:35:C4:5A:A4:78
            X509v3 Authority Key Identifier:
                keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:72:3b:04:98:3e:83:82:99:8d:a7:93:41:6c:02:08:97:
         49:40:56:c8:e7:2c:fe:10:b4:85:ea:ee:80:5f:e3:86:45:f2:
         c9:ff:bc:d1:d8:0a:03:ca:a4:5a:1f:03:85:c5:bb:17:b7:6a:
         ca:6d:50:c7:1c:e9:8a:22:da:ed:88:60:4a:81:ac:7c:e4:64:
         43:1e:16:2d:15:e3:27:81:81:51:58:c2:ca:68:51:46:99:cd:
         50:34:67:9b:e6:49:55:26:c1:a9:b7:17:c1:40:9e:b0:d1:3d:
         6d:04:c0:75:f5:a4:22:77:06:1e:86:ab:8c:d7:cd:a2:2c:3e:
         6a:4d:92:b6:47:c2:07:c7:ed:c4:9e:8b:8c:a2:6f:f2:66:49:
         f0:a1:6d:05:cb:74:61:74:dc:e8:5a:86:68:8f:d1:7a:49:4a:
         15:6b:0a:37:08:22:60:48:29:70:47:8b:e2:df:7d:e8:94:10:
         27:47:2c:24:ad:c4:ef:b6:0d:4c:d4:93:a5:cb:8a:16:ba:7e:
         97:8b:cb:24:01:7c:56:bd:32:a4:32:a3:b9:b1:a8:15:14:20:
         8c:fe:f2:42:8d:06:84:59:8e:0a:1e:9b:b1:f5:fd:45:f2:b2:
         e1:fd:0a:8a:e8:93:93:71:12:3f:ea:9c:66:c1:43:5e:44:5f:
         f3:0f:2f:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc3NzIxMTAvBgNVBAUTKDk4RTFFOUIwNDNFNjhEMzc2OUU5QTY4REIxQzI2RDcx
NTEwOEY3ODcwHhcNMjYwMzAxMjM0NDA1WhcNMjYwMzA4MjM0NDA1WjAYMRYwFAYD
VQQDEw02OWE0Y2Y0Ny0yODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1cvgrULBTyX3Kb+pDxYK0jsKbac0wjcr21suf9JPuDqayxa9+M4TsMKJTByw
O1TF6fCaE2YWlu91w1B2XtSzJoEKC3sqo1Becbg0VZWoZlyUlIsUXsXlQdz11avs
aBCzcOtFqR+RTAZRiHDhWCZF1NfjGX3zHibfKXsliE66hiS2iVV+BpuTNzkfbuOi
WXVv/25SprJisO6UoK/tLMhh/dswphl0VtzZsWTPUlpC4KtlnOlJmGqeO/+3f5Bh
rIhGo9XC0Udkunr4461KvL5ptZP2HL4X93ICK6ZK2h23DWr684/Aku594GockJd2
v87P/cu8sSk9UJLhYZq38svyDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGCxBjJw
Y5rxww+vnLsL+TXEWqR4MB8GA1UdIwQYMBaAFJjh6bBD5o03aemmjbHCbXFRCPeH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Nzc3Mi85MUZGMEQ5MjVC
OUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpUZHA2YWFOc2NKdGNWRUk5
NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21PSHBzRVBtalRkcDZhYU5zY0p0Y1ZFSTk0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Nzc3Mi85MUZGMEQ5MjVCOUIxMUVGOUNDNDU3NDNDNEY5QUUwMi9tT0hwc0VQbWpU
ZHA2YWFOc2NKdGNWRUk5NGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATeFyOwSYPoOCmY2nk0FsAgiXSUBWyOcs/hC0herugF/jhkXyyf+80dgKA8qk
Wh8DhcW7F7dqym1QxxzpiiLa7YhgSoGsfORkQx4WLRXjJ4GBUVjCymhRRpnNUDRn
m+ZJVSbBqbcXwUCesNE9bQTAdfWkIncGHoarjNfNoiw+ak2StkfCB8ftxJ6LjKJv
8mZJ8KFtBct0YXTc6FqGaI/ReklKFWsKNwgiYEgpcEeL4t996JQQJ0csJK3E77YN
TNSTpcuKFrp+l4vLJAF8Vr0ypDKjubGoFRQgjP7yQo0GhFmOCh6bsfX9RfKy4f0K
iuiTk3ESP+qcZsFDXkRf8w8vlg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:39 2026 by rpki-client