Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
File:                     OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json)
Hash identifier:          PZDKMEETVkm73vUcsnOK3IUTDsDhHiURf6fX8w3Bnl4=
Subject key identifier:   3D:01:0C:7C:2F:B0:3F:E1:4C:4A:C7:83:83:C4:C8:75:DB:7C:D9:DD
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
Manifest number:          EF
Signing time:             Thu 11 Jun 2026 08:46:16 +0000
Manifest this update:     Thu 11 Jun 2026 08:46:15 +0000
Manifest next update:     Thu 18 Jun 2026 08:46:15 +0000
Files and hashes:         1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: sOIzBM88hXNXKRexxhKUFn4a5SMhToGDXtQfE39HlzA=)
                          2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=)
                          3: 16105334922D11F087917886C4F9AE02.roa (hash: rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=)
                          4: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: ioHaAryV52goIPTIw4MmhfdDQAaRIVCGfRVkC5i3KUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: Jun 11 08:46:15 2026 GMT
            Not After : Jun 18 08:46:15 2026 GMT
        Subject: CN=6a2a75d8-ecac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:1c:e2:0d:f0:3a:92:ef:3b:98:8c:4c:f4:
                    19:80:a9:8d:0f:d0:0a:c1:5f:1f:fa:81:22:e8:a1:
                    40:70:7c:db:15:7a:b3:86:f3:da:48:66:46:bd:94:
                    9f:1f:1c:a9:bf:de:5e:1d:ff:9e:8c:4b:a1:5f:15:
                    d2:e4:99:f1:90:45:55:4a:dd:61:a8:6e:c4:da:30:
                    1c:66:09:8d:fe:fe:e9:66:62:86:b8:85:7e:ee:5e:
                    e4:5c:d8:1e:af:c8:9e:e8:49:48:34:d4:66:bd:37:
                    ae:3e:1f:03:05:21:5d:c3:3f:f7:ac:a4:c7:fd:95:
                    6f:bf:32:a7:a1:4d:42:5f:c8:d3:78:6f:fe:e5:50:
                    c0:49:b1:48:5d:e3:97:99:a2:0f:15:84:64:6b:19:
                    f8:69:ea:26:c1:ca:c5:c2:3e:22:6f:af:6a:7e:3d:
                    b1:94:01:fd:42:cf:2e:2a:be:10:7e:54:b3:31:03:
                    be:54:78:01:80:cb:47:e9:3e:b2:de:08:03:eb:54:
                    26:e4:f4:92:c6:24:50:e8:a8:d9:b4:eb:2d:4f:45:
                    06:d5:c4:55:b3:f5:09:bb:61:c4:22:47:79:42:ac:
                    0f:d7:b6:0f:53:85:2f:9b:d6:e0:e0:ee:a6:bc:18:
                    95:cf:72:a0:c9:91:e7:7b:81:15:13:8a:7c:f1:f3:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:01:0C:7C:2F:B0:3F:E1:4C:4A:C7:83:83:C4:C8:75:DB:7C:D9:DD
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a4:0d:bd:68:4a:5b:9a:35:91:52:7a:0d:54:ba:32:6e:60:
         c7:dc:9a:c3:61:96:1e:7f:a6:40:03:dc:98:42:fc:45:d1:a6:
         c9:81:f3:ea:be:17:a5:d3:ee:74:e9:85:62:83:b6:2e:c4:38:
         51:3c:cf:39:26:ec:73:73:90:fd:c2:76:5a:9c:a9:2c:0f:ae:
         2d:18:12:f3:e4:1f:72:c1:2c:f4:c3:f2:a6:28:68:98:fb:92:
         86:fb:58:da:fe:b3:55:ed:45:6e:29:c2:6f:12:05:35:1f:eb:
         6b:d2:73:ea:d0:75:e8:f0:b5:48:55:86:0b:8c:9e:81:d0:f9:
         b4:30:1d:2e:2a:f6:42:62:64:24:c6:ec:b9:99:58:4c:14:e3:
         4b:fa:54:5f:01:e7:d7:b2:4b:32:b0:f5:4d:f4:dc:af:17:1f:
         83:8c:b9:f9:0a:3c:a9:15:db:2b:b5:47:82:9a:29:39:e0:83:
         27:d0:6e:6e:a6:34:7c:5f:d0:b2:63:94:89:ce:ee:49:26:f9:
         0b:f2:19:b2:70:34:41:a1:17:c0:5e:1b:a3:39:d2:92:80:cd:
         23:75:3a:b6:7a:96:bd:3d:dc:b3:21:70:6b:d3:e7:2c:7f:fb:
         b4:4c:64:b5:70:a4:2c:cd:d1:46:7d:8e:f6:b5:a6:3f:cc:2d:
         aa:bb:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:24 2026 by rpki-client