Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File:                     oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier:          fFBhJz0Mr4vtXhcOqIIaSOuHTRO8bN5vW4rrxaT4ckU=
Subject key identifier:   4A:07:2C:AD:B2:AB:1E:AB:A3:13:ED:3C:0F:29:32:E4:89:E4:C2:BF
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer:       /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number:          0589
Signing time:             Thu 16 Apr 2026 23:10:44 +0000
Manifest this update:     Thu 16 Apr 2026 23:10:44 +0000
Manifest next update:     Thu 23 Apr 2026 23:10:44 +0000
Files and hashes:         1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: jsZ3i8LaIoiSpH5iqVbgNNsNXPrZysrLWM64KxAk2K4=)
                          2: B9D90E00606311EE8844F941C4F9AE02.roa (hash: 9NLlN3W75sGcxpsbJYQQO4z8VLfzpHn4F0TnxLk1jJo=)
                          3: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: 5d1XnWQ6pR76M6L2odGawB/ntn61DTd/opa315TiVjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
                          rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
        Validity
            Not Before: Apr 16 23:10:44 2026 GMT
            Not After : Apr 23 23:10:44 2026 GMT
        Subject: CN=69e16c74-dd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:9c:c3:2b:6e:ac:39:16:af:af:a6:2c:5e:
                    5f:bd:60:35:c8:21:75:31:fa:74:5f:82:dc:c1:ad:
                    53:eb:d2:ac:1e:8a:c8:96:29:93:ec:58:ba:3f:af:
                    12:bd:03:53:d8:50:79:21:bb:1b:87:b8:5b:6d:98:
                    4b:8f:cd:7d:b6:5b:07:11:2d:c7:c4:ce:4b:d5:06:
                    4c:d2:05:71:87:11:8b:b4:b9:92:a5:21:b3:d8:42:
                    02:7b:25:11:48:c5:00:d1:77:aa:bf:7d:ce:73:a4:
                    ad:d5:dc:43:bb:d9:2f:9d:4f:98:4b:3a:ad:46:67:
                    ec:ad:ec:06:ca:9b:43:4a:d8:36:2a:2d:95:82:2a:
                    71:b5:29:df:b0:ea:5a:a7:e4:42:6e:5a:f2:00:36:
                    8a:09:6c:64:bd:04:69:67:83:6b:8b:0f:58:48:96:
                    7a:77:60:a4:7f:e5:43:29:65:b4:43:99:16:81:cd:
                    f9:5f:60:c0:05:59:e2:38:91:9b:7f:77:e2:2f:13:
                    d1:9f:fb:86:5d:97:ae:f5:0b:58:90:60:0c:56:54:
                    ad:ec:18:37:1b:bb:0b:37:b6:d7:d1:20:af:91:78:
                    6b:e3:6c:08:13:b2:25:5e:99:a5:7d:37:da:86:14:
                    af:61:b2:39:c4:55:3e:56:ab:c5:08:0e:24:65:2f:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:07:2C:AD:B2:AB:1E:AB:A3:13:ED:3C:0F:29:32:E4:89:E4:C2:BF
            X509v3 Authority Key Identifier:
                keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f4:fe:48:e6:fe:df:2b:eb:01:cc:ba:ef:c0:d8:5b:c1:9e:
         90:4a:85:a0:49:9a:e9:2f:38:78:10:c3:c6:b1:97:5b:28:a8:
         55:e9:0d:16:b3:fe:c1:a0:41:62:3c:87:44:73:fe:50:d0:e9:
         8f:f8:1e:0c:e4:88:f2:5d:44:38:ce:61:b4:b6:03:e3:48:ea:
         e0:42:fa:1e:d4:69:83:4f:6e:51:00:69:cd:d0:49:76:28:bc:
         90:45:0c:53:b6:69:3a:c5:6a:72:b6:e0:8c:3f:8a:99:be:61:
         6a:87:72:e3:fe:d9:ee:aa:3b:11:86:79:c6:e9:0a:8f:16:c9:
         1e:63:bf:17:c1:10:24:cc:4d:8e:67:13:ee:a3:10:f6:3d:6b:
         3e:e0:c3:c5:cd:d2:9f:50:22:e4:2c:29:1e:29:cb:79:f6:8a:
         e8:be:2f:a3:76:c9:7a:9d:85:3e:d7:03:a6:63:1d:18:5f:42:
         3a:c3:fd:35:a0:c1:05:2a:3f:54:ab:ff:de:92:c6:ec:31:d1:
         b0:fc:7c:80:b7:ea:b7:50:ba:12:ee:bd:15:4e:d1:b6:bc:60:
         fd:d3:a2:e0:9a:0e:43:5b:3b:18:a1:98:bc:3c:5e:ef:65:1a:
         0f:90:63:fe:dd:f0:61:14:82:59:a8:b4:38:6e:1b:db:88:77:
         ed:f6:d7:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG
MTNCMEM5M0MwHhcNMjYwNDE2MjMxMDQ0WhcNMjYwNDIzMjMxMDQ0WjAYMRYwFAYD
VQQDEw02OWUxNmM3NC1kZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoucwyturDkWr6+mLF5fvWA1yCF1Mfp0X4Lcwa1T69KsHorIlimT7Fi6P68S
vQNT2FB5Ibsbh7hbbZhLj819tlsHES3HxM5L1QZM0gVxhxGLtLmSpSGz2EICeyUR
SMUA0Xeqv33Oc6St1dxDu9kvnU+YSzqtRmfsrewGyptDStg2Ki2VgipxtSnfsOpa
p+RCblryADaKCWxkvQRpZ4Nriw9YSJZ6d2Ckf+VDKWW0Q5kWgc35X2DABVniOJGb
f3fiLxPRn/uGXZeu9QtYkGAMVlSt7Bg3G7sLN7bX0SCvkXhr42wIE7IlXpmlfTfa
hhSvYbI5xFU+VqvFCA4kZS82CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoHLK2y
qx6roxPtPA8pMuSJ5MK/MB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE
QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5
VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODNGRS8zMjk1RjkwMjFEQjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJs
TmRrZ1E0SzRTWFR4T3d5VHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp/T+SOb+3yvrAcy678DYW8GekEqFoEma6S84eBDDxrGXWyioVekNFrP+waBB
YjyHRHP+UNDpj/geDOSI8l1EOM5htLYD40jq4EL6HtRpg09uUQBpzdBJdii8kEUM
U7ZpOsVqcrbgjD+Kmb5haody4/7Z7qo7EYZ5xukKjxbJHmO/F8EQJMxNjmcT7qMQ
9j1rPuDDxc3Sn1Ai5CwpHinLefaK6L4vo3bJep2FPtcDpmMdGF9COsP9NaDBBSo/
VKv/3pLG7DHRsPx8gLfqt1C6Eu69FU7Rtrxg/dOi4JoOQ1s7GKGYvDxe72UaD5Bj
/t3wYRSCWai0OG4b24h37fbX2A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:36 2026 by rpki-client