Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
File:                     ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json)
Hash identifier:          +Y2/AHST8wdqK0twy0nenbaQ1MYipU3K4ygBQSfiYZQ=
Subject key identifier:   2C:C0:B8:62:F1:D5:F9:57:E4:85:A2:5F:82:1B:98:98:2B:DB:F5:91
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Certificate issuer:       /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial:       0DD2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
Manifest number:          0DC9
Signing time:             Sat 28 Feb 2026 18:01:52 +0000
Manifest this update:     Sat 28 Feb 2026 18:01:51 +0000
Manifest next update:     Sat 07 Mar 2026 18:01:51 +0000
Files and hashes:         1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: lF3ppkPOkxMogB5J/qC4TYWz/gnHNnNVBCooddDv/hU=)
                          2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: fj3ZfIuv46WZhy463ZrSDMi8tHMNYlPpfD2upEYX6Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
                          rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3538 (0xdd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
        Validity
            Not Before: Feb 28 18:01:51 2026 GMT
            Not After : Mar  7 18:01:51 2026 GMT
        Subject: CN=69a32d90-a87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:74:cc:0c:9c:e5:2d:09:a6:cb:c7:7c:2a:
                    9e:e8:84:f9:44:96:41:49:75:73:d1:be:15:04:83:
                    36:b9:da:c2:ae:8e:de:d0:3a:b0:c1:12:5d:04:68:
                    f7:01:07:c6:38:10:b8:3e:ec:7b:58:9c:28:87:f4:
                    e5:d8:a6:ef:d0:ef:ac:34:75:52:e6:b2:95:19:df:
                    a2:8d:05:cf:ad:f9:64:76:23:5f:c6:6a:3f:6d:eb:
                    fe:78:e7:0a:77:55:7f:76:b2:11:ea:e5:ae:27:6e:
                    33:64:bb:b0:2b:b5:2e:59:7c:3f:6e:85:dd:00:bf:
                    e9:fc:4f:1e:01:86:aa:e2:48:7c:2b:0f:99:f7:2f:
                    c0:d7:d7:16:48:49:af:6a:4a:c3:75:12:b7:b4:bc:
                    27:6e:5c:fd:ac:41:ef:b2:0b:8b:c0:13:5f:43:6a:
                    45:22:82:c1:87:47:e7:42:39:66:5e:e3:86:3a:06:
                    a7:ca:65:c0:4b:85:b2:b4:30:9c:34:95:37:7c:c2:
                    e2:a8:33:ec:7c:49:e1:9c:00:53:ca:42:0e:99:37:
                    67:cd:0f:6a:3a:f7:bb:8e:59:36:6d:90:50:1a:71:
                    c9:f7:aa:91:89:a1:49:08:18:c1:cf:e9:4d:73:b0:
                    e9:4e:fb:43:a4:61:8a:bb:e8:6c:84:58:41:a7:f6:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C0:B8:62:F1:D5:F9:57:E4:85:A2:5F:82:1B:98:98:2B:DB:F5:91
            X509v3 Authority Key Identifier:
                keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:23:c1:31:23:99:10:e9:53:f5:e9:46:e5:65:70:1c:6c:b3:
         6b:b3:64:5d:b9:22:01:20:d7:5a:d3:c0:f3:6e:ab:c3:57:ed:
         eb:1d:46:4e:de:12:e1:b3:2d:94:96:96:78:d4:f4:06:a8:8c:
         de:0b:02:20:11:01:84:1c:ef:5c:5c:92:4c:39:3b:7c:c7:45:
         62:18:af:19:1e:c2:99:71:dd:52:bb:17:b8:b7:c0:5e:32:0b:
         b9:8a:79:c7:ba:29:bb:92:ed:4d:c5:2f:2d:80:06:30:f0:e6:
         e8:de:17:bc:ad:ba:4c:64:6f:c5:bb:79:39:42:f9:b1:39:ba:
         bf:18:f4:68:6a:ed:05:19:ee:1e:d6:4d:53:ef:ae:c4:a9:64:
         3b:59:f9:f2:92:67:29:ed:cc:49:36:56:64:8d:81:df:8f:ef:
         34:c9:93:61:13:38:41:0f:0c:94:b6:08:35:f5:7b:0d:23:b9:
         ae:20:6c:73:6d:cb:de:57:3c:2b:d0:6e:18:f2:e3:83:6a:04:
         64:e2:62:70:7c:c1:8a:b9:48:cb:1f:be:9d:75:b9:8e:a0:6e:
         b2:20:b6:9d:84:51:6e:6b:a3:4e:25:61:b8:48:df:0d:72:d9:
         54:03:f0:46:5a:c4:f5:20:41:4b:6d:37:db:e8:86:82:fb:93:
         25:1c:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:31 2026 by rpki-client