Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
File:                     ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json)
Hash identifier:          OTVlG3dEJWvkq+g2zmVkhJNRv/QEytAbGbph6CzJdOM=
Subject key identifier:   69:0D:8F:B5:4C:12:61:9D:3E:04:B1:52:7C:6B:6E:69:A6:7E:60:93
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Certificate issuer:       /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial:       0487
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
Manifest number:          0480
Signing time:             Sat 18 Apr 2026 23:59:03 +0000
Manifest this update:     Sat 18 Apr 2026 23:59:03 +0000
Manifest next update:     Sat 25 Apr 2026 23:59:03 +0000
Files and hashes:         1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: XmV/kBTPF8+Qknw7xJVXoVSMbTfFkHVfTsp/cXYI+sM=)
                          2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: qu+ajiL1JZYRW5m42zxrTG99jy7/rsQd9oPljdycO/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B6A, serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
        Validity
            Not Before: Apr 18 23:59:03 2026 GMT
            Not After : Apr 25 23:59:03 2026 GMT
        Subject: CN=69e41ac7-299d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:57:c7:e9:69:e9:a8:a0:ed:a9:02:b9:d8:
                    3f:1b:79:8c:e0:b8:8b:27:cb:4f:16:e6:76:16:46:
                    ef:c8:bc:57:e2:40:41:18:05:2d:b3:6e:64:d6:93:
                    29:d0:7f:48:52:fb:b1:a4:05:b4:2d:b8:2d:cd:ce:
                    2d:d1:b1:b9:d2:ba:74:85:29:3b:25:e2:ae:da:72:
                    b4:53:f9:74:4c:c7:b5:48:8a:77:b8:07:b3:66:48:
                    5b:a7:f5:9a:50:5f:b4:55:76:b3:5d:5e:bf:5b:20:
                    75:d1:c5:52:4d:48:b8:cc:4c:da:7e:aa:e6:89:a1:
                    12:f3:b2:f6:ef:3f:c1:a4:3f:94:c9:9b:60:c5:e7:
                    6d:73:c9:d2:ba:d4:50:01:73:27:ae:43:94:7c:08:
                    b0:51:0a:78:56:e9:1a:30:2b:65:70:df:59:80:48:
                    0a:10:ae:be:2c:d3:4e:60:d1:b2:db:2a:54:03:59:
                    fe:b8:bb:6c:c5:e5:68:73:ac:d8:c1:2f:26:1c:cd:
                    a5:09:cd:d7:e8:4e:ac:0b:e4:41:e6:2a:16:fc:28:
                    0e:fe:e1:8d:0d:1c:22:61:45:ad:31:83:db:f5:e4:
                    cf:6e:a5:98:a8:a5:04:db:37:fc:54:0e:ba:69:87:
                    12:17:de:cd:15:3a:c5:8b:82:79:a3:78:3b:2e:b0:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0D:8F:B5:4C:12:61:9D:3E:04:B1:52:7C:6B:6E:69:A6:7E:60:93
            X509v3 Authority Key Identifier:
                keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:5d:50:c0:79:30:01:93:da:ae:44:7d:78:50:9e:87:1e:
         51:ee:4e:50:d7:43:f8:41:31:25:91:80:bc:ae:6d:74:de:9f:
         fc:8f:8a:ee:13:47:1c:63:95:3b:33:8d:a2:1b:d7:9a:6f:9c:
         f5:c7:77:36:89:89:0b:34:31:87:a8:64:63:d6:cf:19:be:57:
         4a:b0:53:02:9f:3f:47:17:88:b5:04:3b:f1:e1:27:15:98:65:
         27:85:ad:08:a5:89:d2:49:a6:64:1e:e8:0c:93:e0:e5:e2:6a:
         6c:11:13:a7:0d:34:74:ab:82:e0:95:a9:a5:06:f4:d4:0a:75:
         2f:5e:ee:56:75:9f:26:5a:aa:5f:26:d4:1c:70:c1:d9:49:37:
         6f:7b:3b:f1:d0:48:3e:b8:13:6e:ba:97:d8:b2:dc:a2:e2:18:
         c0:52:06:68:13:8b:46:24:9d:f8:2c:97:6c:e4:68:fc:0f:05:
         49:93:cb:56:52:91:57:7c:1f:38:8b:6c:d8:7d:dd:cb:cc:a7:
         60:ea:43:9b:bd:39:4e:c9:b8:0f:c9:5b:7c:db:32:0c:59:83:
         fd:b0:ae:1e:c6:6b:fe:08:46:94:7e:9f:1f:f2:c3:1f:8b:6c:
         f9:a0:2a:a3:31:e5:c5:c0:b9:be:dc:42:ec:3e:73:76:28:4e:
         53:73:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:23 2026 by rpki-client