Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft
File:                     ok2WODNZy0lmoVuakGkT61RWZXs.mft (raw, json)
Hash identifier:          FqQXDGZMhsxt0FpsOau5HsGaKVBdrbUaa/szov7UXpw=
Subject key identifier:   E1:33:19:6D:EE:9D:EE:1C:B2:E3:1F:F6:06:A5:33:39:BD:94:B4:40
Authority key identifier: A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B
Certificate issuer:       /CN=A91C9C03/serialNumber=A24D96383359CB4966A15B9A906913EB5456657B
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft
Manifest number:          B0
Signing time:             Fri 17 Apr 2026 06:55:30 +0000
Manifest this update:     Fri 17 Apr 2026 06:55:30 +0000
Manifest next update:     Fri 24 Apr 2026 06:55:30 +0000
Files and hashes:         1: ok2WODNZy0lmoVuakGkT61RWZXs.crl (hash: I5/ZMik/HxdkkAfkNErZ4cNQEc0h/LJlndwcxcWYSmQ=)
                          2: 19088D04716211F0A531A51FC4F9AE02.roa (hash: oHwH6kQQYXdRLzAcniMfc3jPRXLCLgsiuxhNwFmn1Is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl
                          rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9C03, serialNumber=A24D96383359CB4966A15B9A906913EB5456657B
        Validity
            Not Before: Apr 17 06:55:30 2026 GMT
            Not After : Apr 24 06:55:30 2026 GMT
        Subject: CN=69e1d962-5c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:6e:f4:e8:f1:60:b9:e7:f7:5a:34:ea:44:
                    a8:c4:92:cb:a0:c1:48:45:f2:3b:ed:87:98:83:76:
                    f2:76:07:5e:9f:a2:06:e0:86:8c:fd:c4:4d:a6:14:
                    20:2a:55:0b:2d:cf:1b:99:79:a4:1c:f6:69:09:06:
                    e9:66:a8:54:92:d7:18:84:35:3b:0f:0c:42:bf:ca:
                    e9:20:30:d8:29:da:55:ac:85:1e:de:fa:d0:ac:ec:
                    03:2a:71:7f:df:0d:0d:a7:06:6f:b7:a0:dc:7b:f7:
                    bb:19:18:55:89:86:5d:7a:70:02:bf:5b:71:ac:f1:
                    17:22:6b:30:7c:de:46:99:36:99:06:0e:3c:6e:0e:
                    9f:69:29:7f:9d:25:ab:c8:12:9c:a5:5d:69:d9:39:
                    2e:eb:d8:0d:aa:57:48:6b:6a:32:86:2e:e7:c9:d4:
                    f9:bb:4a:31:61:dd:cd:61:65:1a:23:2a:da:66:b2:
                    49:b2:82:1f:e8:cb:2a:ff:f6:34:43:65:8d:c8:04:
                    c8:25:02:20:1b:a9:95:48:63:c1:64:b2:6c:07:12:
                    19:24:f0:cc:1e:45:df:d8:4f:4a:1c:4c:d1:e5:ca:
                    18:c5:2f:3d:8a:1e:f8:c3:95:e8:4d:2c:03:56:bc:
                    25:c9:42:ef:50:10:fb:ed:c1:23:0d:6f:90:1b:3c:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:33:19:6D:EE:9D:EE:1C:B2:E3:1F:F6:06:A5:33:39:BD:94:B4:40
            X509v3 Authority Key Identifier:
                keyid:A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:1d:4d:a4:72:f1:89:53:3d:db:68:92:64:82:66:5e:05:
         49:1c:5e:2b:b8:59:e2:ac:3e:47:65:5d:a8:45:76:b0:c1:cd:
         e1:11:23:1a:93:0c:02:b2:54:33:9c:ae:81:c0:ee:bf:7f:0f:
         83:94:28:54:0b:bf:78:66:19:c2:9d:7f:3a:cd:22:52:bf:9b:
         eb:c2:bd:84:ae:da:26:29:90:b5:78:fd:10:c5:04:9e:30:ee:
         9b:9d:b4:92:bd:77:31:f8:cb:d5:bb:e6:9c:30:b1:2e:4f:cf:
         4c:c6:ee:09:13:3e:8c:1f:23:c4:d5:d3:8f:98:a8:0e:c2:d3:
         26:94:3e:32:68:e4:fb:2d:09:80:fe:d7:86:b6:da:a6:50:62:
         db:35:7d:8a:a0:d3:b9:aa:2f:ed:23:9b:4c:e7:ea:f9:01:b4:
         2f:47:e6:71:e0:c7:6b:a3:93:a4:11:83:56:ea:ad:c5:78:67:
         a8:81:48:fe:13:25:ca:bf:88:c1:75:81:ba:ab:c2:da:2e:b5:
         de:c3:29:9b:52:f7:d4:46:48:3a:74:8b:0d:bd:55:55:c5:c8:
         3a:6b:bb:88:82:93:f5:8e:1e:8a:3c:66:c8:28:d9:f8:16:0e:
         88:a0:6d:3c:5b:bd:6d:04:74:62:56:79:8d:71:79:66:4e:2e:
         f2:27:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:10 2026 by rpki-client