Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
File:                     OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json)
Hash identifier:          zI+gS37q+tJHoK0C4TKt3J6v/fJZc1eu9W1SdWjQALs=
Subject key identifier:   83:A2:2C:B8:44:4B:43:4E:83:F6:D7:C7:9F:EF:B6:B4:D0:28:08:DE
Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
Certificate issuer:       /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
Certificate serial:       03F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
Manifest number:          03F0
Signing time:             Fri 17 Apr 2026 00:22:32 +0000
Manifest this update:     Fri 17 Apr 2026 00:22:31 +0000
Manifest next update:     Fri 24 Apr 2026 00:22:31 +0000
Files and hashes:         1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: M3X5BaxVfeycdYsDUBy3bm+p43ZaMyPvzFJQkXPRUOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl
                          rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
        Validity
            Not Before: Apr 17 00:22:31 2026 GMT
            Not After : Apr 24 00:22:31 2026 GMT
        Subject: CN=69e17d48-d8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:94:da:38:cf:31:36:00:73:96:4b:6a:1c:
                    ad:02:53:27:8e:47:86:b7:f0:84:af:80:26:42:96:
                    2d:c5:f0:3a:9b:ef:e9:89:ca:54:f9:5b:2a:1c:52:
                    31:d1:63:39:2e:8a:0b:b6:6a:7e:68:f7:7c:ea:b9:
                    31:2e:d0:40:e6:73:94:f2:a7:8b:25:04:00:43:d0:
                    04:37:fa:e6:2f:75:12:24:e0:82:2d:63:ab:72:a6:
                    3b:b2:0f:76:31:c6:d4:1a:3b:9a:d7:79:fb:33:a0:
                    0a:3d:30:8a:d8:50:02:de:8a:b5:06:c6:fe:ff:b1:
                    56:a9:68:98:48:a9:aa:57:13:5e:dc:0f:2c:d3:d9:
                    49:7f:3c:4b:27:c3:d0:4a:a2:08:64:72:dc:9c:ab:
                    7f:f0:15:5d:e9:0a:a9:d1:51:51:24:3c:76:27:b0:
                    5e:f6:30:d0:0b:a3:e8:52:2f:58:51:8a:a1:41:8b:
                    84:3e:8d:1d:4e:72:08:4b:95:38:ce:57:86:b5:8e:
                    dd:09:3d:22:4f:00:82:02:a7:cd:53:8e:87:3d:5c:
                    cf:25:f7:07:26:f2:4c:e3:e0:c6:82:59:92:54:14:
                    5a:32:76:10:7d:ca:67:d3:8b:38:3f:4a:63:f1:f8:
                    52:3a:18:95:62:67:7f:16:16:cb:12:9f:51:17:96:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A2:2C:B8:44:4B:43:4E:83:F6:D7:C7:9F:EF:B6:B4:D0:28:08:DE
            X509v3 Authority Key Identifier:
                keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6e:aa:d7:b9:3a:a5:26:37:d7:05:4d:c7:ce:b4:c6:05:6d:
         c1:96:5c:f9:ae:29:9c:09:50:7a:87:e4:0d:f7:62:7e:77:a7:
         b5:51:60:64:b8:c2:4a:c4:31:80:37:aa:97:d0:dd:7f:eb:cf:
         b6:8a:74:0c:b9:ca:14:cd:10:ab:e4:9a:18:2f:bf:aa:6d:24:
         9a:f9:44:08:8f:d4:c5:ca:fd:c7:59:f2:4f:0f:97:f4:cb:e2:
         26:79:cd:75:5c:70:ef:55:58:0e:53:06:10:94:50:54:f9:07:
         34:29:7b:ac:ab:bf:31:37:7d:84:4d:21:c0:d9:26:99:4e:fc:
         0b:d8:77:f4:a8:9c:42:a2:a7:f5:6b:6b:94:26:0b:1d:84:b7:
         e9:91:d0:67:9c:a1:8c:f3:32:3f:fd:97:9d:79:2e:b3:2a:cc:
         8c:b2:f2:de:ae:4d:45:6b:ff:bc:38:81:82:a3:36:35:bc:72:
         cd:4c:77:07:7d:15:15:78:7a:b4:07:dc:3f:0a:c8:ab:1e:6d:
         e8:95:81:dc:66:79:63:47:91:41:03:b9:9f:d0:1b:c5:55:9d:
         67:eb:19:96:4f:77:d2:f4:dd:2c:e8:98:9a:99:64:43:63:e5:
         64:0b:85:2f:e3:dd:8b:b0:fc:d9:86:09:b9:2c:5c:87:45:2f:
         d2:26:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:27 2026 by rpki-client