Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
File:                     oUDUgGrgz2DnP-FYvyQvOag60AU.mft (raw, json)
Hash identifier:          kD1HEYgmlAz8O+OT/5g41CtVgtdP0VV1SLiGeNsVlds=
Subject key identifier:   47:66:26:A7:67:82:96:4D:BA:CA:D6:06:08:18:A3:85:92:42:5F:B7
Authority key identifier: A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05
Certificate issuer:       /CN=A91E1B78/serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
Manifest number:          011C
Signing time:             Sat 03 Oct 2026 06:37:54 +0000
Manifest this update:     Sat 03 Oct 2026 06:37:54 +0000
Manifest next update:     Sat 10 Oct 2026 06:37:54 +0000
Files and hashes:         1: oUDUgGrgz2DnP-FYvyQvOag60AU.crl (hash: Eyjh9pxA3Z0cIrDdiEVZJ0P11JTKBW5rkOIcxnZXx70=)
                          2: 47131A44145511F082FDAA7AC4F9AE02.roa (hash: or+wWY02saveHL2n16cR48CIFiLFzU62AjgfsBRVCxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B78, serialNumber=A140D4806AE0CF60E73FE158BF242F39A83AD005
        Validity
            Not Before: Oct  3 06:37:54 2026 GMT
            Not After : Oct 10 06:37:54 2026 GMT
        Subject: CN=6ac0a2c2-0812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:6e:aa:28:10:9a:c0:0a:21:c4:05:c2:df:
                    01:73:b8:12:db:55:82:45:32:ef:68:07:20:a7:33:
                    f4:f9:5b:9f:70:34:16:8a:5a:9a:cc:3f:4a:12:71:
                    8c:d2:a9:83:e3:ad:92:99:c5:11:2d:37:69:59:39:
                    1b:1e:0b:82:c4:6d:20:46:fd:e2:f7:bd:cf:44:a1:
                    6c:6b:a9:0f:9a:a6:f9:08:f4:9b:2b:fe:51:c5:5c:
                    dd:62:b3:77:63:83:4d:53:a8:cb:cb:97:09:af:dc:
                    6d:d0:42:b6:f6:4a:66:10:0e:d4:05:19:83:da:4a:
                    01:f3:a1:9f:c5:d1:ad:8b:17:59:fa:2e:5f:81:68:
                    a1:9c:7c:45:c4:14:fe:f0:e6:68:9f:2a:9a:3d:15:
                    54:c5:de:99:b4:99:83:78:10:42:45:85:e3:cd:8a:
                    2d:48:5c:c5:a7:56:bb:0e:91:48:53:aa:3a:75:34:
                    59:59:b3:7f:fa:02:aa:08:df:6f:c9:c3:bc:4d:39:
                    81:4c:27:f3:14:34:77:40:19:ea:c3:ee:3d:f9:45:
                    4d:22:7a:79:f7:7b:05:41:fa:40:b6:04:ea:cb:89:
                    e9:45:a9:a6:98:b0:18:a6:4c:d4:2a:1d:eb:86:1f:
                    92:c5:24:24:5b:34:6d:0f:74:c8:67:17:93:19:77:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:66:26:A7:67:82:96:4D:BA:CA:D6:06:08:18:A3:85:92:42:5F:B7
            X509v3 Authority Key Identifier:
                keyid:A1:40:D4:80:6A:E0:CF:60:E7:3F:E1:58:BF:24:2F:39:A8:3A:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUDUgGrgz2DnP-FYvyQvOag60AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B78/C8DF41AC145411F0B3B7C679C4F9AE02/oUDUgGrgz2DnP-FYvyQvOag60AU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:51:ce:19:19:6e:a9:a0:93:61:76:e0:4e:38:d7:5d:8d:
         e6:59:9a:00:84:89:7e:33:0e:1d:17:ca:39:9a:43:6a:75:8e:
         d7:7d:b1:38:1b:60:bd:db:14:42:37:27:0d:10:64:97:7d:c4:
         4e:5b:af:b7:0e:30:c0:ef:f0:2b:5e:44:65:14:88:17:22:52:
         e7:b9:ba:87:27:f8:cd:01:c8:23:7b:ed:94:0a:5f:9b:41:28:
         0c:e2:2d:bd:fb:dd:bc:d7:68:50:b6:de:df:22:79:3c:23:2e:
         ac:a6:71:ba:1e:cc:ce:e1:3c:2b:d6:e0:07:cc:a7:a7:ce:98:
         d1:1e:c9:85:d2:b8:95:8e:8f:87:fb:65:ae:b1:86:16:33:b2:
         65:ff:71:07:b0:f0:60:1d:8e:f4:0f:3e:b4:a0:5f:25:0d:6c:
         ab:d9:0a:56:a2:79:ac:00:c7:e3:80:dd:e0:3d:70:c1:38:2c:
         24:d5:38:62:71:6e:74:0d:81:b4:11:a9:da:f1:77:37:c9:e8:
         45:7d:6b:cd:3d:c1:5a:30:e3:a8:e0:81:73:f8:64:41:05:08:
         81:74:e0:45:f2:94:ae:1c:9d:72:a7:da:6f:3e:a2:5c:bf:f3:
         e9:07:0a:51:fd:5f:17:01:a9:57:ba:3d:b3:a5:c5:49:2b:03:
         68:f6:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:53:04 2026 by rpki-client