Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
File:                     o5jf1NOXXquW_TgDOWgkbkdeKLM.mft (raw, json)
Hash identifier:          1+g35viAeyYjbEViojbH5aUnNQPayLL6Z8UYGTg76sg=
Subject key identifier:   40:C4:F8:51:66:63:2E:C2:8F:8A:AF:41:00:41:8E:50:19:5F:1F:D7
Authority key identifier: A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3
Certificate issuer:       /CN=A91B915D/serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3
Certificate serial:       048E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
Manifest number:          0488
Signing time:             Sat 04 Apr 2026 23:47:32 +0000
Manifest this update:     Sat 04 Apr 2026 23:47:32 +0000
Manifest next update:     Sat 11 Apr 2026 23:47:32 +0000
Files and hashes:         1: o5jf1NOXXquW_TgDOWgkbkdeKLM.crl (hash: 5BB/lBY7Hb41SE92s8bvg//92nFmTanp728KvPqIduw=)
                          2: 8CA3BAEC7DCB11EC99806E25C4F9AE02.roa (hash: 3dvCT2gOB8rQbKwOX6TGGzUBoVEiCpk9IxITGxHj+Hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl
                          rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B915D, serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3
        Validity
            Not Before: Apr  4 23:47:32 2026 GMT
            Not After : Apr 11 23:47:32 2026 GMT
        Subject: CN=69d1a314-b200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:34:56:0b:5a:2c:8c:31:9c:bc:bf:8b:f4:
                    01:c9:c9:32:de:5b:dd:23:b4:2a:cb:5c:3e:89:f6:
                    1c:cd:90:66:17:49:f2:0d:b9:8d:6b:46:f7:34:84:
                    5a:a9:87:80:1a:63:72:87:02:fd:a5:de:15:87:ac:
                    52:db:e5:51:1c:8b:13:6a:63:c3:57:9b:30:23:e6:
                    ea:ca:ec:ca:1c:86:a7:42:ca:b2:c0:32:8b:88:e3:
                    0e:96:bf:12:b2:ef:4f:5e:56:5b:f6:9a:72:8c:14:
                    67:05:d7:96:89:9f:4e:ad:a0:23:07:17:df:51:e2:
                    9c:0f:a9:d5:95:03:28:51:ad:6c:eb:1e:3f:70:09:
                    fb:58:8f:ce:17:56:7c:fa:99:e0:f6:6b:f0:e7:df:
                    e1:8e:93:eb:0f:7c:03:26:3d:86:eb:ac:16:13:e8:
                    35:c7:bb:66:fb:3d:d3:9e:b9:1f:cf:dc:22:3e:d3:
                    38:bd:6f:89:52:ae:9a:88:5a:dd:74:dd:49:e2:e8:
                    27:fc:7e:58:57:14:de:8f:e1:46:c7:eb:1b:ef:84:
                    81:b5:b2:ac:86:16:e0:78:13:d7:a5:fd:93:21:a3:
                    26:d2:22:27:90:37:bb:9b:52:c9:09:e8:a3:f8:69:
                    a4:da:fa:09:af:5b:90:26:f9:ff:da:04:9b:3d:35:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C4:F8:51:66:63:2E:C2:8F:8A:AF:41:00:41:8E:50:19:5F:1F:D7
            X509v3 Authority Key Identifier:
                keyid:A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:6c:08:31:50:a2:98:6f:15:31:76:d8:dc:82:e3:d9:85:4b:
         2b:88:bd:ca:95:83:6d:43:7d:c4:d1:4f:9a:ec:a5:09:b4:25:
         7c:2c:0c:6e:27:5b:4f:26:ab:4b:fb:60:01:08:5a:4f:6f:c5:
         11:e3:ed:b1:5f:5a:d9:3b:84:38:3b:74:89:85:f9:59:ba:70:
         1e:4f:85:d0:84:3f:f9:49:8a:d3:6b:81:e7:d6:58:8b:e9:53:
         70:09:33:7d:ac:a9:2b:e9:6f:d9:f4:c1:23:04:7b:4b:22:17:
         04:6c:8a:0f:d9:6b:d4:3d:6a:9c:2b:0c:59:49:91:de:b8:d6:
         f8:41:9a:a9:ce:f1:be:90:a7:85:4e:dd:84:1f:d3:be:2b:aa:
         dc:dc:9e:46:86:92:e0:fd:62:20:3e:07:0d:c9:cf:c4:93:0b:
         48:34:e9:f8:11:85:d0:e8:d1:ca:ad:72:c7:4e:75:c6:e0:fd:
         69:e1:ea:82:5d:40:ca:ef:d2:34:ce:43:d7:4f:6c:c6:e2:65:
         1b:02:95:58:49:9a:2c:1f:ce:1f:c4:90:43:17:30:c2:9a:eb:
         5f:a9:6c:45:f8:c6:69:2c:bf:63:f1:6e:30:d2:3c:f0:c5:16:
         4b:a1:dd:0b:ae:f3:9e:c9:ef:18:85:80:41:81:d3:39:bb:48:
         dc:97:cb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:06 2026 by rpki-client