Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
File:                     OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json)
Hash identifier:          OwYN2f1HU850C/8mlquJRzU507TmRuKvmMgIdGJjGcY=
Subject key identifier:   18:3C:CD:DA:FB:93:7F:C2:58:4A:8A:63:17:CF:76:95:BD:4C:88:84
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
Manifest number:          B9
Signing time:             Sun 01 Mar 2026 08:19:42 +0000
Manifest this update:     Sun 01 Mar 2026 08:19:42 +0000
Manifest next update:     Sun 08 Mar 2026 08:19:42 +0000
Files and hashes:         1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: V4RVWp/V8+gYk0y4HbIFjxsZuaKaKQb0BUo/9mR+sGI=)
                          2: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: n88ojmtdqrdiflLIe0+SBb0jpSl3tXT/vbn9UpYcLtE=)
                          3: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=)
                          4: 16105334922D11F087917886C4F9AE02.roa (hash: D5KaIdGc2ZrurRFfjIe8sBVZ5qr9BavnbZqsjgwmDZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: Mar  1 08:19:42 2026 GMT
            Not After : Mar  8 08:19:42 2026 GMT
        Subject: CN=69a3f69e-56eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:73:59:28:83:b4:af:55:cd:c7:92:7a:83:
                    ea:6a:cb:a6:4c:11:41:fc:7f:f5:a0:74:f3:3a:1e:
                    e2:5d:d7:32:20:92:27:27:da:a4:95:8e:07:4d:81:
                    9a:7b:d3:a2:d6:a3:1b:f0:0b:30:f4:18:76:de:5d:
                    12:6e:74:71:09:d7:76:12:a2:fe:a6:c7:e8:ff:ed:
                    86:be:d7:4d:88:b3:1c:54:32:ae:12:2d:a7:8b:cc:
                    49:2f:77:95:76:f1:50:f4:5b:04:b1:99:44:d2:e8:
                    c8:46:cc:cf:37:64:80:1e:e3:0e:53:31:a5:2a:04:
                    97:2a:66:71:89:be:0a:a7:7c:4b:50:42:fb:5b:1e:
                    44:b2:cc:5e:a1:48:07:37:e6:bf:85:da:f3:52:48:
                    27:d3:73:72:8d:04:77:c1:f1:5c:b8:89:11:ca:92:
                    de:9d:d8:d9:5f:62:09:46:e3:13:c6:55:1c:d6:90:
                    15:cd:c4:d3:2d:f3:e7:f7:b2:e5:b0:13:ab:2b:21:
                    89:ed:ac:45:b5:b2:8e:58:1a:c8:4f:65:b2:dc:4f:
                    97:8f:89:78:aa:d3:8b:c5:94:c2:77:52:eb:81:9c:
                    e9:9f:47:b3:95:d7:b1:69:89:62:48:bf:e8:f0:b7:
                    ad:af:d1:8b:8b:09:f7:36:e8:aa:d5:3a:f7:b2:2b:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:CD:DA:FB:93:7F:C2:58:4A:8A:63:17:CF:76:95:BD:4C:88:84
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:98:80:df:2d:a2:5d:e9:76:c5:89:c3:f1:fd:1f:d2:09:
         7c:84:e3:45:8f:6e:c4:ef:ac:70:45:bc:87:93:dd:69:8f:28:
         fa:56:93:c6:0a:c9:39:71:8c:55:b6:02:32:1a:75:b8:4c:89:
         30:37:63:dd:9a:18:b1:75:f3:82:37:56:48:15:d2:53:2e:8a:
         6f:f0:c3:31:c9:2c:be:5d:e5:22:c5:11:bf:82:42:9c:61:9e:
         86:62:b1:06:ae:e8:e6:93:48:d2:ca:70:e4:aa:ef:ff:dc:36:
         e4:af:06:82:76:22:94:6e:f5:7a:42:6a:59:8e:23:99:cf:cf:
         26:35:ac:f8:1b:30:87:ba:98:9e:be:06:2e:0b:d9:30:9c:60:
         bf:73:1b:04:cd:2f:f8:18:7e:b8:91:94:fe:91:2b:c6:e0:ea:
         df:d6:54:a2:54:9c:b4:c5:80:8b:bd:d4:48:5a:25:f2:1c:de:
         6c:bd:35:d0:09:27:a4:98:e1:f6:ca:9a:54:2e:d4:e8:5d:7f:
         5d:bf:26:63:bc:07:16:6d:73:72:ea:43:b7:55:2c:b8:59:eb:
         c2:3d:74:3f:31:9d:45:01:e8:a8:99:7c:52:6c:80:4a:dd:fc:
         08:a4:ce:c7:82:f7:59:03:19:55:36:64:14:f2:12:0c:d0:1f:
         53:9f:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:34 2026 by rpki-client