Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File:                     ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier:          af8nHgW5QLrVtV04azQmgeYQeucN/Lb/nd6OsVZn6tQ=
Subject key identifier:   7C:F7:B9:2F:01:B3:55:AC:30:60:E5:C6:FB:F9:99:27:04:D7:84:9F
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer:       /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial:       0292
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number:          028A
Signing time:             Sun 05 Apr 2026 01:22:58 +0000
Manifest this update:     Sun 05 Apr 2026 01:22:57 +0000
Manifest next update:     Sun 12 Apr 2026 01:22:57 +0000
Files and hashes:         1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: kkqv52Ggy0MuEHli3eW2RbwZBpxyEjukdQzJDBZVuxQ=)
                          2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: pGBNoZVQ4x9HykZ/w/nfYdiBRr1XcTrcOsgRSH1bWes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
        Validity
            Not Before: Apr  5 01:22:57 2026 GMT
            Not After : Apr 12 01:22:57 2026 GMT
        Subject: CN=69d1b972-f7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:e5:84:13:03:63:72:fc:f8:69:ad:bb:c7:
                    fc:99:21:e7:61:8b:d4:39:dd:fa:c6:5a:ce:3f:3f:
                    4c:3b:85:91:66:bc:04:9e:f9:b4:8a:48:a8:cc:a3:
                    d4:5a:24:7c:49:ce:a4:c6:08:ee:5d:6e:e3:61:45:
                    05:b8:d2:da:87:11:5a:21:64:94:c1:1a:9c:9c:d9:
                    e3:77:bb:79:85:07:a1:ba:d0:ba:d8:08:f5:16:d3:
                    d2:2f:26:b5:59:d2:19:35:32:32:a8:9f:5f:40:f2:
                    86:0e:8a:f8:1c:df:82:82:7b:ac:60:b6:13:6c:37:
                    a4:58:4a:da:ad:73:71:b1:b3:bf:bb:e5:8c:b7:c4:
                    93:79:a8:f4:18:96:27:ac:d4:1f:dc:c0:f4:09:c8:
                    68:27:22:0f:dc:06:bf:7e:ce:7f:55:99:e9:e6:ed:
                    d6:6b:0b:6d:b5:e8:ff:16:63:c4:4c:8f:c0:1b:30:
                    98:dc:7e:cf:0b:ea:d3:af:7d:2d:6b:53:8b:35:82:
                    de:06:90:d1:0f:a3:a7:33:8c:7b:1c:d3:34:23:f8:
                    2c:fe:15:08:1e:f6:20:4b:09:cc:ef:e1:ba:b8:a5:
                    0c:19:ee:00:e4:c2:6e:04:7e:c8:eb:f4:e6:ed:f7:
                    73:52:1d:a2:c8:64:df:55:9b:25:57:fb:93:c9:10:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F7:B9:2F:01:B3:55:AC:30:60:E5:C6:FB:F9:99:27:04:D7:84:9F
            X509v3 Authority Key Identifier:
                keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c9:85:7f:28:97:2e:88:1f:e6:09:07:09:fa:d8:b2:72:de:
         58:a4:d2:cb:ed:4f:9d:4c:ef:3d:a0:12:8c:92:90:0e:09:4f:
         a1:aa:2a:23:3f:ac:b2:b4:6d:f7:ef:8e:b7:85:cf:f3:46:21:
         c4:c1:70:42:5e:ec:0c:3b:d4:93:f8:12:4b:89:71:3d:02:19:
         b4:38:44:ab:4c:2b:aa:a4:37:2d:2d:4a:73:35:2a:09:49:53:
         94:15:1d:66:79:04:c5:e6:ae:d3:45:f5:34:11:10:25:da:9f:
         89:0e:97:68:55:81:ae:32:6a:30:55:93:8a:0c:db:d5:61:c3:
         7d:f4:c0:89:7a:2b:24:1c:62:35:cd:14:15:94:df:61:27:66:
         9b:27:1c:03:5f:db:74:53:5e:32:81:8b:31:14:2a:73:ca:a0:
         b8:6d:46:8d:a9:e3:73:03:27:8a:af:72:63:12:09:4a:ce:0e:
         c4:93:2b:66:16:e2:be:84:da:68:3c:26:de:44:63:63:97:74:
         c2:bd:6c:dd:b1:9c:0f:61:87:3d:d1:ed:84:ee:67:d1:b0:f6:
         49:ea:e7:3c:01:1a:9d:a2:dc:5e:25:62:4f:63:f2:7a:a3:85:
         d2:dd:bb:58:eb:c2:62:93:50:2c:3c:a6:9a:01:3d:8b:0a:e4:
         25:db:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:40:07 2026 by rpki-client