Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File:                     Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier:          pnPS28bqCL8nRmTBBbBXjAYvsT7qoe6yFbsnudqFpJs=
Subject key identifier:   6D:B2:DF:82:76:00:F0:80:0A:95:90:5F:97:55:52:65:FC:AF:FF:C6
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer:       /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number:          90
Signing time:             Fri 17 Apr 2026 07:12:33 +0000
Manifest this update:     Fri 17 Apr 2026 07:12:32 +0000
Manifest next update:     Fri 24 Apr 2026 07:12:32 +0000
Files and hashes:         1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: fjK03lxf8R4QD3ZwAvg/vBMTjw73OdRuzfzn/juZLZg=)
                          2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: rWKDZcXDRvxkeevoTmv1zvdbGFQP1gVAwd/TCsKJ1Qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
                          rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
        Validity
            Not Before: Apr 17 07:12:32 2026 GMT
            Not After : Apr 24 07:12:32 2026 GMT
        Subject: CN=69e1dd60-3ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:9f:28:19:63:37:5e:63:3e:78:45:f1:8a:
                    5a:43:6d:47:82:26:56:cd:fb:72:f0:7b:8d:14:16:
                    48:12:3a:0d:fa:2a:d4:07:90:a1:31:f8:b4:55:b7:
                    93:68:f2:c9:eb:d5:34:82:77:e8:06:54:cf:4d:93:
                    62:68:d5:9a:70:75:1a:be:9b:ec:30:61:15:75:cc:
                    a0:56:33:ea:fa:1f:fe:aa:f6:cf:36:2c:86:00:7e:
                    93:f4:30:d2:0c:07:8e:de:8e:e4:12:7b:07:fe:15:
                    f8:57:ce:5c:33:78:44:97:70:67:96:27:7a:54:50:
                    f4:b2:e6:c7:3e:2a:b9:ef:05:c0:34:42:d5:65:fb:
                    56:90:71:b0:04:f8:95:88:56:1e:23:7d:50:16:0b:
                    82:be:4f:06:80:72:5b:d7:93:f2:80:95:fe:54:27:
                    27:19:90:07:0a:fa:b3:49:f9:04:4e:c5:d1:8e:0f:
                    9c:2a:24:be:a5:99:cd:d4:31:0d:7c:04:97:29:cb:
                    4f:8a:a0:61:26:4d:62:2e:b7:df:54:02:75:49:c1:
                    d6:94:b6:a0:d6:e6:e3:09:91:dd:b8:84:5b:df:ae:
                    30:e4:56:b9:99:a2:58:47:98:19:26:02:c2:e8:e6:
                    ee:06:9e:46:95:6d:4a:56:9e:14:c8:33:2d:7d:cd:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B2:DF:82:76:00:F0:80:0A:95:90:5F:97:55:52:65:FC:AF:FF:C6
            X509v3 Authority Key Identifier:
                keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:e4:2f:01:d8:14:1a:72:8c:0a:ff:9f:ae:c4:2b:3c:d2:
         51:a6:45:dd:05:10:f8:89:25:7d:8b:cc:96:0f:5f:0f:76:c5:
         25:6c:d9:f0:b1:7f:48:1d:00:32:eb:3d:36:3a:b1:9f:f7:b1:
         7b:f6:1a:0e:36:d6:15:af:a1:c8:0f:6f:03:fa:8c:a4:74:6c:
         74:d1:f2:ea:41:b2:f8:6e:1d:63:d8:ca:3b:e9:21:f1:22:83:
         1d:23:b8:e2:a0:47:83:5f:22:16:55:83:df:c1:76:b0:4d:cb:
         4a:1c:f0:7e:78:d0:14:5c:87:04:e4:86:c8:23:0c:89:7f:1d:
         ed:79:c3:d0:cd:7c:38:09:90:05:79:6f:66:5a:c1:40:b5:86:
         fb:df:b0:15:66:af:d5:aa:95:fa:f7:5a:4d:f8:a2:53:74:15:
         bd:4e:41:9d:51:e7:5b:c7:1e:aa:1d:f9:a9:7c:a2:56:7d:90:
         90:b7:36:58:e9:6a:88:c4:8d:20:81:19:d1:81:66:3a:50:c0:
         cd:78:0e:35:15:b9:cb:af:c2:2e:46:e6:12:4a:48:0a:92:4e:
         d2:82:19:11:47:38:fc:4a:01:f3:54:08:4a:01:1e:8f:6d:ff:
         ad:9b:ed:7d:49:d9:09:9e:26:40:4b:f0:b0:94:72:4e:57:ef:
         5a:eb:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:23:45 2026 by rpki-client