Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
File:                     OwpEPFCYZClPtL5HkFNmGAPxr-E.mft (raw, json)
Hash identifier:          q7/hkC5xf0NEh3d3dVZOWooPFCPBuzQ+zv64x30LjxU=
Subject key identifier:   46:16:AA:9C:36:37:95:51:91:79:66:25:78:35:B2:45:B2:FD:27:0E
Authority key identifier: 3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
Certificate issuer:       /CN=A91AEEAA/serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
Manifest number:          08
Signing time:             Sun 19 Apr 2026 08:44:35 +0000
Manifest this update:     Sun 19 Apr 2026 08:44:35 +0000
Manifest next update:     Sun 26 Apr 2026 08:44:35 +0000
Files and hashes:         1: OwpEPFCYZClPtL5HkFNmGAPxr-E.crl (hash: OBz51sdp4nKuhCecL6rCCz0GjB0rrAhyeHDXiw6tKPs=)
                          2: 19AEF54C325311F1B8BE6AD8B5833773.roa (hash: lCkPkFA3UUCrYfR4r1c6dZNvdAQ4vk4LL6fKr16h7jU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl
                          rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEEAA, serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
        Validity
            Not Before: Apr 19 08:44:35 2026 GMT
            Not After : Apr 26 08:44:35 2026 GMT
        Subject: CN=69e495f3-265f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:08:ec:d0:93:6e:1a:f2:1b:54:41:51:19:
                    81:31:ec:71:07:74:2d:a7:cd:97:6c:b3:42:39:73:
                    9e:8f:52:5a:0a:4b:e7:62:7b:9f:13:72:ba:2f:0a:
                    99:ba:59:5f:2f:fd:0e:7a:16:4d:11:97:2d:a9:3d:
                    bf:41:94:58:72:dd:f4:fc:16:fc:6b:60:fe:eb:8b:
                    12:6a:4b:5f:61:85:28:bc:ed:27:e6:0f:68:96:a0:
                    00:a2:ee:1c:38:15:23:c7:70:70:d8:f3:58:13:3c:
                    80:77:61:bb:4a:25:53:26:de:7b:99:d4:a7:c6:5b:
                    e9:5d:26:1d:75:f1:58:58:64:45:c6:83:82:7d:08:
                    f7:ae:08:8d:9a:e2:53:42:ae:a6:ad:55:e8:a4:df:
                    7f:98:c5:90:6b:f9:da:6c:cc:da:be:25:02:53:a7:
                    a4:cc:8e:07:ff:51:53:43:cd:a3:13:fe:0d:1b:1f:
                    27:7d:a8:95:8b:48:77:5b:2c:0d:92:55:51:4f:f0:
                    f4:0e:89:ab:18:9b:2c:f4:30:0b:73:06:08:4d:df:
                    92:b8:85:b1:ef:97:53:0d:a0:30:b8:11:d6:e3:e0:
                    bb:0a:ab:b1:ae:a0:47:72:83:11:e3:07:0a:0d:8b:
                    32:fb:47:c2:41:39:d0:a3:be:1e:ee:0a:26:04:4d:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:16:AA:9C:36:37:95:51:91:79:66:25:78:35:B2:45:B2:FD:27:0E
            X509v3 Authority Key Identifier:
                keyid:3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:cb:01:55:39:40:0b:4e:db:52:9b:f5:15:48:72:f0:40:5c:
         4e:83:25:d2:02:e8:6f:69:a8:86:66:12:53:5f:9a:6c:46:ec:
         21:38:6e:d9:ab:92:11:f3:4d:59:6a:ff:c5:e7:74:79:a8:18:
         2f:e0:df:7a:f0:b3:d2:77:f2:e5:cd:e8:26:f2:db:a0:8d:4b:
         5c:36:43:8e:1e:fa:ff:60:e7:d1:b9:73:fc:5d:39:c7:49:ac:
         d9:75:8d:f7:be:dd:b8:61:7b:5a:c4:78:9d:bd:95:d8:58:af:
         86:53:c3:1e:25:fc:4c:c0:44:f8:cf:f8:07:81:9a:51:1b:7e:
         3e:be:13:8b:0f:7a:aa:be:4f:7f:50:fa:77:36:f9:37:24:1a:
         9b:28:79:f7:d3:55:65:16:53:ca:91:c5:a1:40:06:c6:a8:60:
         20:06:1c:ad:ad:f0:d5:f4:db:07:c6:0f:d5:80:97:f7:47:02:
         5f:22:fb:f8:71:5e:d1:8f:d5:bb:d6:a8:5a:6f:5d:39:04:d0:
         68:30:52:86:a1:33:42:cd:38:02:0d:e4:d9:cb:ab:89:b1:37:
         f8:49:83:12:0e:b3:5e:c7:7c:87:95:dd:46:91:65:e3:21:97:
         7d:79:ea:19:29:b6:e8:71:44:a8:53:cb:ed:e0:c5:51:e8:00:
         c9:62:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:19:10 2026 by rpki-client