Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
File:                     oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json)
Hash identifier:          eALq4kQSiJ4RwhMo5ddrJ4FH5+7jDKEoxUTNi9ZkXNk=
Subject key identifier:   2E:AE:00:9F:FD:9E:D0:1E:D7:1D:2E:13:15:4C:B4:57:82:61:89:DB
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Certificate issuer:       /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial:       0491
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
Manifest number:          048A
Signing time:             Sat 13 Jun 2026 00:04:29 +0000
Manifest this update:     Sat 13 Jun 2026 00:04:29 +0000
Manifest next update:     Sat 20 Jun 2026 00:04:29 +0000
Files and hashes:         1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: f537E2LqarxIrEqP50oNNV9EkmLSYO0loC866Ci1NM4=)
                          2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: unCQmTbZm4pgrTVUyuiudS71668sOfsE5vQDTSaCxiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
                          rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
        Validity
            Not Before: Jun 13 00:04:29 2026 GMT
            Not After : Jun 20 00:04:29 2026 GMT
        Subject: CN=6a2c9e8d-95c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:17:de:7b:77:3b:2e:62:b5:41:f4:27:02:
                    bf:6e:42:5e:6a:6d:de:8a:aa:4e:d9:8d:bb:83:55:
                    d3:61:11:02:05:3d:ee:3c:7f:b5:45:10:23:10:58:
                    26:e5:09:8e:2d:c0:1b:85:9b:0f:a6:ba:6d:e8:88:
                    36:5d:b5:fd:f0:1f:c2:b9:d0:bf:58:7a:ae:66:d5:
                    da:2b:0f:d2:3e:7f:2d:6b:7b:c8:0b:f3:1f:7a:14:
                    3c:50:c0:6f:56:3a:42:db:e9:c9:3a:74:b1:96:d6:
                    dc:29:72:3b:ff:31:b1:a5:fd:8c:c5:10:73:2b:2a:
                    56:f8:49:a7:2b:dd:93:30:91:79:d4:d2:9b:d8:4d:
                    37:8d:ac:df:32:9d:ed:30:e6:92:0a:9a:3b:3e:6a:
                    4f:3f:e1:6c:27:8f:e5:e2:6c:30:3e:11:31:ab:52:
                    4c:96:39:ff:28:51:11:4d:55:ff:65:d7:0c:72:02:
                    30:9f:2e:3e:d4:b1:41:85:c7:d9:28:90:32:5e:2c:
                    14:b1:f7:6f:16:f4:de:73:27:6f:ce:84:37:dc:4b:
                    56:2a:d7:c7:c9:11:c5:23:0c:e3:8c:26:34:be:4f:
                    5e:e0:3b:a1:21:c9:da:32:4d:63:32:31:0a:3b:e3:
                    46:e3:76:ef:64:d1:d9:a3:5c:68:21:5c:c4:4e:84:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AE:00:9F:FD:9E:D0:1E:D7:1D:2E:13:15:4C:B4:57:82:61:89:DB
            X509v3 Authority Key Identifier:
                keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d8:e9:3e:17:d8:e4:67:a1:dc:5e:69:f0:cd:b9:c2:6b:98:
         11:93:e9:f8:fb:83:72:5e:94:20:c7:ed:88:c2:4e:5b:38:22:
         df:68:53:10:67:31:92:41:b5:77:64:3e:a8:d9:44:66:5d:94:
         b6:c6:2a:cb:2f:e8:02:01:0a:30:ad:50:81:9d:0c:93:b4:d4:
         19:2f:9e:a2:99:47:00:0d:6e:7e:18:58:7a:d9:b4:cc:5d:e4:
         de:fd:8f:ef:ce:fc:db:b2:71:88:02:d9:d8:e0:5f:cf:17:ae:
         5d:0c:fb:1f:39:e9:b9:68:32:25:5b:37:c3:6d:98:60:1c:f5:
         8e:86:bd:8e:ef:3e:2c:cb:7e:05:73:bf:37:fa:8d:1d:4a:a9:
         73:6b:6c:a4:4b:77:99:65:18:dc:1a:21:38:a6:27:76:07:c1:
         55:45:5f:65:7a:b1:f9:ed:e1:54:e1:68:24:eb:8c:7d:42:d0:
         f5:3c:d2:a8:1f:a1:02:13:ae:c7:b9:28:42:1f:57:65:95:44:
         3b:28:fd:a3:a8:85:68:62:a6:05:67:5e:c7:b0:6b:4b:0e:7d:
         4b:58:ef:da:2d:a6:ee:33:c0:9f:75:d1:d6:d8:6b:31:e1:90:
         97:3c:8a:70:5b:87:79:69:4f:88:91:0d:e1:22:7b:2f:d1:43:
         cd:c1:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:35 2026 by rpki-client