Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
File:                     ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft (raw, json)
Hash identifier:          8dq0bMFrglKLOUPSrlOSJ4rs5zR+eHZRA641DiJwV4E=
Subject key identifier:   15:17:8A:A5:CB:88:D8:72:37:B9:A1:B7:91:60:77:B6:FA:F6:C4:65
Authority key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2
Certificate issuer:       /CN=A9196AF7/serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
Manifest number:          61
Signing time:             Mon 21 Sep 2026 08:06:24 +0000
Manifest this update:     Mon 21 Sep 2026 08:06:24 +0000
Manifest next update:     Mon 28 Sep 2026 08:06:24 +0000
Files and hashes:         1: ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl (hash: lCwnFqTtwotY/Qu6xLP7Yrlam86PGnkA/9j43EwFUtQ=)
                          2: 7EF6CB6E24CF11F1AAA533A9A9833773.roa (hash: 9ClY33un4vbfGIdWfe6t84z6KyxGxbfl2d5rqQsmRso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl
                          rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2
        Validity
            Not Before: Sep 21 08:06:24 2026 GMT
            Not After : Sep 28 08:06:24 2026 GMT
        Subject: CN=6ab0e580-1ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:36:d4:43:73:f4:ca:b1:78:cc:26:db:77:
                    f1:52:90:5f:7e:62:3e:2b:51:ba:3b:93:6b:22:1e:
                    16:0a:d1:f1:52:82:a1:40:ea:39:e0:9a:5d:94:37:
                    f9:ad:36:c3:94:1c:c0:12:d8:48:b0:8d:2e:4d:41:
                    a3:16:d9:38:da:ce:6b:55:1d:a4:34:05:13:24:d2:
                    bc:04:dd:a3:6d:29:4d:28:10:2e:35:a5:c4:e1:00:
                    06:65:5e:83:1d:58:de:40:52:42:52:33:ea:6b:98:
                    0e:d0:94:2a:34:0c:3d:22:eb:ef:db:bc:e3:b9:55:
                    bc:d2:5a:fd:5b:4a:d5:aa:83:5f:ac:34:a1:76:60:
                    44:98:ef:7a:bf:b6:a1:d2:d9:0f:67:c7:b9:64:4f:
                    82:09:b6:29:79:92:de:f7:06:e8:1c:e6:e9:94:e8:
                    36:1f:f2:59:8d:b4:cc:f6:20:af:9b:8a:fd:23:98:
                    d7:71:7e:6e:99:12:2c:d6:9f:af:8d:a2:86:a9:54:
                    93:fb:82:42:65:13:1e:e7:eb:4b:a4:b4:b2:90:41:
                    67:67:7b:42:38:c8:1e:35:d1:cd:18:25:af:7b:12:
                    b3:70:b5:7c:72:e3:31:aa:34:20:dc:20:88:ad:cc:
                    44:9c:9f:e3:da:42:b6:d0:8a:8d:1d:03:38:5d:6a:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:17:8A:A5:CB:88:D8:72:37:B9:A1:B7:91:60:77:B6:FA:F6:C4:65
            X509v3 Authority Key Identifier:
                keyid:A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:22:03:77:8e:93:20:fd:e4:f9:59:16:7b:bd:52:c6:c7:b9:
         57:25:2a:65:13:e8:38:cf:da:1d:47:53:6e:0e:99:8b:f4:34:
         72:e1:5e:41:85:40:9b:66:1f:75:4f:8a:8e:58:e8:ae:eb:6a:
         b8:21:f3:b6:9f:d9:17:96:4d:78:70:a2:ac:3b:45:b4:8e:66:
         c3:23:2d:6f:0d:df:0c:b8:db:33:09:c8:76:a5:ff:98:b0:b6:
         43:cb:6f:33:d9:21:7d:76:72:a0:d1:87:ff:59:93:11:56:7e:
         d0:ad:4a:5c:bb:cd:34:ca:80:fc:e4:4a:56:07:1c:37:ae:8f:
         e9:97:3b:27:16:10:a3:dc:4c:f5:c5:f7:99:d7:a7:0f:42:30:
         61:4e:38:1a:61:51:29:d0:44:b2:eb:fd:63:f1:e4:c3:a3:ae:
         34:c2:50:bd:7f:fa:49:b1:53:d0:32:e1:f4:a7:9a:b8:64:62:
         b5:c7:74:23:8f:59:a2:8a:f6:90:13:8c:61:95:70:a3:66:b6:
         94:af:58:af:c2:c9:a2:3c:b4:fd:09:ad:00:15:d9:97:05:a4:
         be:44:74:a9:28:86:41:e9:32:9d:f4:86:43:b1:ba:20:73:70:
         d6:e4:b5:3e:2c:b2:1c:e1:9a:70:14:a8:d6:24:8d:4d:36:69:
         35:36:eb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:22 2026 by rpki-client