Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
File:                     O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json)
Hash identifier:          w2mbJjnLlPevwnWPVvg1JqQjdy9OCnCP9vuDAb7pO74=
Subject key identifier:   97:7F:82:FF:10:F8:A9:10:21:C8:C5:88:89:75:EE:39:A5:67:5E:82
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Certificate issuer:       /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial:       0AE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
Manifest number:          0AC1
Signing time:             Thu 16 Apr 2026 19:23:31 +0000
Manifest this update:     Thu 16 Apr 2026 19:23:31 +0000
Manifest next update:     Thu 23 Apr 2026 19:23:31 +0000
Files and hashes:         1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: Hu56gVrw7OALKwWCJsKfjkQ1nckfmmLT+h7iQe6CR2U=)
                          2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: mOy9DmAYzZsYbEQhE2U9Un7tfVf8mtaB1bU3ox64k7k=)
                          3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: 69Hh0J+L+6D5El7B0qbhyv5Br90p9YiCbQw2deQTNhM=)
                          4: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: V0PmmwgVntdjWwqgOyfzApLR6YpbY/HvQB4HeE20/PU=)
                          5: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: gy8HkzaIVkMxQWo5W1rlovO0xcxrRwNFB9e9LFzD4L4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787 (0xae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
        Validity
            Not Before: Apr 16 19:23:31 2026 GMT
            Not After : Apr 23 19:23:31 2026 GMT
        Subject: CN=69e13733-6db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:92:b5:16:17:1d:5c:e0:53:77:5d:27:09:
                    a2:0a:a6:32:ed:b6:89:69:57:b9:12:6c:ef:0a:0c:
                    73:d8:43:b2:e2:56:87:11:81:80:0d:c3:e6:5f:c8:
                    b0:c9:4a:dc:7d:3d:08:65:4f:3b:85:ba:ee:6c:13:
                    5b:c9:1c:b5:f4:48:4d:ed:6b:8f:42:9d:0c:21:12:
                    7c:04:8c:1d:d8:3b:db:2b:6d:68:00:d2:c6:ab:6a:
                    82:fa:2b:df:b4:a3:9f:dc:97:98:87:b6:6b:3c:e0:
                    56:7a:93:d6:f0:5f:95:6a:3a:6b:6b:07:f7:b1:a7:
                    34:52:84:03:b1:9a:ea:52:af:e5:fc:bb:89:f3:ae:
                    04:62:b8:d6:f6:3f:6a:83:ed:0d:2c:ff:51:2e:6c:
                    75:a6:ff:d5:76:f2:fa:d1:54:a7:e5:dc:13:bb:42:
                    32:05:30:a5:8a:b9:87:cf:5a:22:37:52:70:fc:b9:
                    a4:01:4a:3f:1f:92:00:1f:ee:0a:85:fa:1f:32:61:
                    47:1e:df:85:ab:dd:32:e8:bc:3d:79:4b:19:75:54:
                    f3:94:18:f8:85:27:b1:72:ff:4e:46:0c:5a:0d:d8:
                    f6:98:49:9b:70:91:2c:f0:20:7a:3e:8c:c6:1b:44:
                    70:93:54:96:35:65:ce:63:f9:46:76:98:da:f7:c4:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7F:82:FF:10:F8:A9:10:21:C8:C5:88:89:75:EE:39:A5:67:5E:82
            X509v3 Authority Key Identifier:
                keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e5:f1:1d:7b:14:37:d7:05:29:a8:23:d1:30:b9:63:07:8c:
         00:dc:00:50:8e:cc:7c:c7:26:87:f8:db:84:7c:44:ba:6b:54:
         0a:ad:06:53:4a:99:11:41:b6:a2:8a:cb:51:34:11:4b:9f:f4:
         e5:ac:7b:4e:0c:75:2b:67:52:22:c3:2f:41:f8:91:94:32:de:
         7b:fa:64:e4:28:eb:e5:52:1e:fa:36:de:4f:9e:6e:0d:85:80:
         54:74:25:de:c2:c9:ee:ef:e0:26:76:cb:79:ab:f9:e1:c1:67:
         26:3e:bd:e0:17:34:c0:ca:16:43:37:68:42:b0:f1:64:43:50:
         6e:32:62:46:f0:72:e3:d6:de:05:1c:85:ca:e0:d8:fb:68:2d:
         3d:45:43:57:a0:33:5a:c6:f6:99:9c:a8:03:8a:48:78:33:ca:
         ec:cd:6f:73:2c:03:41:bb:36:e1:3e:93:1f:01:8a:60:40:17:
         15:45:48:4f:d6:6c:94:1d:eb:e5:65:d0:b2:bf:38:77:68:60:
         16:0d:47:dd:25:e3:3e:32:09:d7:dd:65:4b:b1:c1:d7:5b:af:
         23:e4:4a:53:1b:c5:e3:57:4b:a3:1c:cc:e7:2a:6f:f7:8c:76:
         b7:52:18:f3:17:1d:ba:77:6d:b3:53:cf:f4:36:f6:d2:af:03:
         34:52:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:58:45 2026 by rpki-client