Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
File:                     oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json)
Hash identifier:          OAUg9JJBAASj0+/VGFON4PY6sXzAk0TO6F/oj4oynhs=
Subject key identifier:   F2:DA:6B:3C:45:AF:D3:E6:17:0A:53:D4:04:6E:DE:79:12:FE:E7:72
Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
Certificate issuer:       /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
Manifest number:          0113
Signing time:             Fri 17 Apr 2026 05:38:40 +0000
Manifest this update:     Fri 17 Apr 2026 05:38:39 +0000
Manifest next update:     Fri 24 Apr 2026 05:38:39 +0000
Files and hashes:         1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: EhuNQl7WcbNGrEZlEbShFYHeBck/NCjWlCjSivPLjlY=)
                          2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: aoBTkJouVxyNkkgtw1vmV8sS1BnP7mpfp25E9TCfROM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
                          rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
        Validity
            Not Before: Apr 17 05:38:39 2026 GMT
            Not After : Apr 24 05:38:39 2026 GMT
        Subject: CN=69e1c760-4319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:c2:eb:e8:f8:5b:30:78:33:74:e0:1d:a7:
                    d4:8b:f0:32:27:74:e0:28:f8:11:ff:96:84:d4:ba:
                    35:ea:da:e8:63:46:7b:43:14:35:73:dd:65:2c:6d:
                    e5:37:b2:18:a6:2c:1b:e9:48:5f:2f:66:c5:b8:59:
                    8f:3b:fa:ae:3c:70:4c:37:bd:99:b5:7f:4e:ac:f0:
                    99:94:03:32:02:4f:fb:04:af:3c:44:05:c4:a5:2c:
                    bf:e6:8a:15:b8:67:b1:ad:9a:96:7e:8e:e3:c3:d3:
                    75:2c:1a:1b:76:ad:35:61:e0:53:36:06:d6:a8:e5:
                    fb:5c:c8:02:ff:9a:7b:3a:a2:8a:51:98:0a:fa:96:
                    99:e9:0a:6e:cc:83:19:1b:c9:5c:78:35:6c:05:d8:
                    7f:db:c9:08:d1:56:34:e2:45:a5:1a:ee:cd:23:cb:
                    f6:7a:f3:e7:19:23:6d:0e:64:80:55:7a:47:5e:b3:
                    37:af:0b:cf:ed:52:31:7b:1a:86:b9:d4:11:03:eb:
                    77:36:b4:d4:30:18:0e:65:55:c2:5d:b4:9c:28:d8:
                    34:4b:2c:77:c9:4f:2d:6e:73:fe:c7:24:13:fa:82:
                    06:c8:11:8b:49:7d:44:64:6f:44:b8:cf:43:62:f9:
                    83:75:93:58:58:a7:5a:3d:34:a6:43:d6:18:98:20:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DA:6B:3C:45:AF:D3:E6:17:0A:53:D4:04:6E:DE:79:12:FE:E7:72
            X509v3 Authority Key Identifier:
                keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:78:0b:fe:fa:97:45:50:fa:14:f1:d6:37:d4:a9:a5:cb:97:
         59:ac:4b:2d:54:60:01:bf:4c:04:40:ee:8d:56:41:27:56:84:
         04:9a:14:da:6d:b1:59:c5:2c:51:d8:87:e8:b6:66:08:42:15:
         4a:1c:1a:85:8f:9c:c0:ba:46:58:27:6a:ee:9e:09:2d:8d:89:
         f0:a1:50:82:e5:8e:b0:80:07:b3:76:77:51:a4:1d:4d:dc:d7:
         62:64:d9:ef:b5:5c:4e:3c:19:83:3a:04:79:92:9b:91:fb:34:
         04:67:b5:bb:43:a2:94:34:fc:2e:f0:6e:cb:44:99:82:03:8a:
         3e:de:1d:56:4f:ba:1f:d4:e8:37:72:6f:04:af:3c:47:93:f5:
         47:ed:61:32:41:85:d5:70:19:c2:5a:e6:77:55:ce:ee:f2:50:
         49:8a:bc:a1:e8:01:82:19:cd:13:d1:e5:81:34:0e:87:46:9d:
         5f:38:b7:91:18:c2:88:59:75:b4:a4:e6:dd:0a:d0:e8:7b:88:
         89:87:af:5c:8d:72:9e:42:6a:e6:2b:73:61:de:17:29:78:e8:
         db:c7:91:ac:4f:4b:d8:f9:5c:ca:9b:86:3d:3a:d1:b0:7c:f1:
         1d:6b:12:6b:c8:46:e1:ab:99:87:b4:f5:53:40:4f:94:f2:d5:
         44:75:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:41 2026 by rpki-client