Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File:                     oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier:          83k81ZRTg+XKfALZvCtSojE1zf9fFcjVQv4eMPbLK9A=
Subject key identifier:   F9:84:1E:5B:5A:43:D6:72:8E:85:B7:30:A8:15:53:74:85:B2:5B:30
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer:       /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number:          01A5
Signing time:             Sun 01 Mar 2026 23:30:50 +0000
Manifest this update:     Sun 01 Mar 2026 23:30:46 +0000
Manifest next update:     Sun 08 Mar 2026 23:30:46 +0000
Files and hashes:         1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: xwrZjWFTtJfaXZlyYmDi5L6LZBndAP7fxw6reYDvB1M=)
                          2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: I602UprS0PuPZg6+swMqCR4Z7j5cFK9kxKEJsn7QaM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE620, serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
        Validity
            Not Before: Mar  1 23:30:46 2026 GMT
            Not After : Mar  8 23:30:46 2026 GMT
        Subject: CN=69a4cc29-1288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:a8:7a:45:f9:c5:99:8b:80:91:4a:a9:a7:
                    c7:63:33:c6:33:b4:d1:61:dd:4e:e6:7f:39:f8:83:
                    37:c7:7e:4c:51:c4:23:32:4d:2b:22:cf:7d:3e:32:
                    78:19:ff:e4:6c:9a:3a:b7:9f:d5:56:82:a3:28:71:
                    be:0e:9e:73:c9:92:87:ed:a9:07:8e:65:a2:f0:db:
                    57:58:34:12:0c:21:00:6b:45:6e:31:1e:11:cc:f3:
                    f6:87:2d:6f:0f:d8:6e:fd:7a:fe:a0:c6:b3:7a:6b:
                    d6:d0:28:83:df:b6:5a:49:31:6c:8f:97:67:d5:df:
                    3d:40:f2:8f:5c:81:df:4c:5e:62:e5:21:ee:e3:a8:
                    45:0c:9b:0b:0c:2b:03:e1:e1:10:7f:81:51:8e:f1:
                    e7:d4:bb:45:e2:f6:2f:1e:d0:ba:15:c0:88:c1:c6:
                    e5:29:cc:1f:17:51:20:21:49:98:af:b0:20:fb:f0:
                    d9:6e:5b:6b:b6:32:03:8c:ae:d2:af:20:7f:22:79:
                    b1:97:83:be:70:8f:f6:9e:ec:b3:f1:14:2d:2c:08:
                    ed:ee:d8:b3:4e:ae:d6:4d:10:33:af:c9:24:6a:76:
                    ca:7d:bf:bc:17:21:e5:fd:99:59:0d:df:ec:2f:df:
                    c6:a0:82:15:3a:ae:98:09:a8:6b:b2:23:c0:e2:2c:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:84:1E:5B:5A:43:D6:72:8E:85:B7:30:A8:15:53:74:85:B2:5B:30
            X509v3 Authority Key Identifier:
                keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:d0:d4:93:aa:20:7e:e6:f9:f5:65:49:c3:be:47:25:5a:
         c5:80:35:02:11:f1:e3:11:6a:6c:5f:61:87:04:b6:f4:f3:6f:
         d1:1e:25:2b:09:fc:59:78:39:f6:06:b5:68:6d:68:ea:72:ec:
         4c:f2:83:93:fb:50:bc:68:e2:24:14:68:71:c4:f9:e1:73:a6:
         12:33:24:49:a7:db:a8:3d:e8:01:56:26:ee:71:b5:e8:3e:fe:
         a8:76:c2:2d:a4:73:77:ce:7b:e5:ed:51:87:9d:f1:5c:b3:6d:
         65:bf:15:da:ac:37:5d:24:f6:bd:7b:70:39:17:49:67:0a:4c:
         1a:84:50:18:b7:d2:62:7d:02:8a:d8:11:ec:b6:db:0e:f5:0b:
         e7:dd:6c:b2:9b:e7:ba:be:54:22:c9:f8:d9:71:df:8a:d2:ef:
         2c:07:b9:fd:00:0c:2b:6d:38:e3:5b:60:4c:7c:e1:76:c3:59:
         2e:ef:36:65:bf:1d:06:76:f2:37:cc:d3:b8:32:bf:77:34:af:
         41:8e:9f:e9:ff:a9:29:49:df:e7:e6:f7:39:01:c8:e4:1a:da:
         5b:00:67:46:08:40:8b:ed:9c:12:cc:ae:b0:16:fe:7f:b5:75:
         eb:e1:98:f6:d3:1b:1b:d8:b1:04:bc:a6:cb:29:8d:d2:72:f7:
         06:55:92:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U2MjAxMTAvBgNVBAUTKEExNkMzRjg3MjQxQTgzRDFBQTU0ODBENDJBNzRGNEY3
RDFDRTVEMkUwHhcNMjYwMzAxMjMzMDQ2WhcNMjYwMzA4MjMzMDQ2WjAYMRYwFAYD
VQQDEw02OWE0Y2MyOS0xMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzFWoekX5xZmLgJFKqafHYzPGM7TRYd1O5n85+IM3x35MUcQjMk0rIs99PjJ4
Gf/kbJo6t5/VVoKjKHG+Dp5zyZKH7akHjmWi8NtXWDQSDCEAa0VuMR4RzPP2hy1v
D9hu/Xr+oMazemvW0CiD37ZaSTFsj5dn1d89QPKPXIHfTF5i5SHu46hFDJsLDCsD
4eEQf4FRjvHn1LtF4vYvHtC6FcCIwcblKcwfF1EgIUmYr7Ag+/DZbltrtjIDjK7S
ryB/Inmxl4O+cI/2nuyz8RQtLAjt7tizTq7WTRAzr8kkanbKfb+8FyHl/ZlZDd/s
L9/GoIIVOq6YCahrsiPA4ize2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmEHlta
Q9ZyjoW3MKgVU3SFslswMB8GA1UdIwQYMBaAFKFsP4ckGoPRqlSA1Cp09PfRzl0u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYyMC8zQUE1OUFEQzkx
OTAxMUVFODdGRUUwMEJDNEY5QUUwMi9vV3dfaHlRYWc5R3FWSURVS25UMDk5SE9Y
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Xd19oeVFhZzlHcVZJRFVLblQwOTlIT1hTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTYyMC8zQUE1OUFEQzkxOTAxMUVFODdGRUUwMEJDNEY5QUUwMi9vV3dfaHlRYWc5
R3FWSURVS25UMDk5SE9YUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAipTQ1JOqIH7m+fVlScO+RyVaxYA1AhHx4xFqbF9hhwS29PNv0R4lKwn8WXg5
9ga1aG1o6nLsTPKDk/tQvGjiJBRoccT54XOmEjMkSafbqD3oAVYm7nG16D7+qHbC
LaRzd8575e1Rh53xXLNtZb8V2qw3XST2vXtwORdJZwpMGoRQGLfSYn0CitgR7Lbb
DvUL591sspvnur5UIsn42XHfitLvLAe5/QAMK20441tgTHzhdsNZLu82Zb8dBnby
N8zTuDK/dzSvQY6f6f+pKUnf5+b3OQHI5BraWwBnRghAi+2cEsyusBb+f7V16+GY
9tMbG9ixBLymyymN0nL3BlWSDA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:56 2026 by rpki-client