Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
File:                     odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json)
Hash identifier:          9n4RgUkrrFc7om9jAhCG+hwhgEbhEJV6/lkslyoKXS4=
Subject key identifier:   F2:F7:6A:94:39:D7:C3:28:2E:3B:1F:A2:23:9A:32:0A:7E:7A:91:E8
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Certificate issuer:       /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial:       039B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
Manifest number:          0387
Signing time:             Tue 23 Jun 2026 00:53:45 +0000
Manifest this update:     Tue 23 Jun 2026 00:53:45 +0000
Manifest next update:     Tue 30 Jun 2026 00:53:45 +0000
Files and hashes:         1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: BbkrVnggj7F7Ev+HJ0HJTvAAXiWo/5G5lTkAIisDGj0=)
                          2: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: B6PZEfx1FpWYd/cLyu0E3zqt+xcDVuPHL9C0o/8CHOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
                          rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 00:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
        Validity
            Not Before: Jun 23 00:53:45 2026 GMT
            Not After : Jun 30 00:53:45 2026 GMT
        Subject: CN=6a39d919-316d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:86:4d:45:7f:59:70:25:96:87:eb:f2:39:
                    84:58:cb:2f:19:9b:f6:22:72:6a:09:0b:e4:be:f4:
                    52:34:d3:61:53:e0:e2:65:95:2c:bd:9e:11:a5:04:
                    86:c2:ee:30:ac:da:c3:30:65:16:87:be:dc:3b:25:
                    ca:30:72:9d:55:bb:4f:8c:6e:d5:67:b4:98:3a:c2:
                    87:74:38:1c:ad:2a:ed:c1:50:6d:40:c2:c9:9a:6d:
                    b2:1c:00:e4:b1:cd:4d:8c:53:ab:a6:88:82:e9:0d:
                    82:13:b1:5d:72:c1:25:04:f9:b0:b7:11:6d:08:b1:
                    f6:e1:cc:02:5d:5f:cb:1c:05:1a:cf:c8:a0:5d:c8:
                    54:b4:63:68:e6:8f:74:f8:70:c3:a8:35:02:78:cc:
                    e4:3b:9c:21:7b:fb:92:32:2b:26:60:79:4c:5f:ab:
                    69:46:c0:ca:d6:71:d3:a8:b6:af:26:0e:51:da:dd:
                    19:6f:2a:42:64:f3:66:a8:ba:0b:0f:31:05:4f:31:
                    e3:2f:97:4e:ee:73:87:84:6c:6b:f0:99:ab:3b:91:
                    f8:7d:17:20:5e:cc:c8:42:4c:43:5c:39:73:45:9d:
                    e6:fc:5e:69:b7:18:44:24:50:2c:7d:cd:98:02:6a:
                    ab:da:9e:6c:87:75:a8:97:7e:37:f4:66:da:e1:29:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F7:6A:94:39:D7:C3:28:2E:3B:1F:A2:23:9A:32:0A:7E:7A:91:E8
            X509v3 Authority Key Identifier:
                keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7a:de:6f:58:ea:44:66:d5:33:f5:96:ac:b6:74:1d:e5:4c:
         99:e5:0f:8f:da:9e:a2:c9:94:6a:8a:21:3b:c0:f8:af:a5:b8:
         d8:23:4c:fa:01:b5:d9:c1:9a:ab:5f:40:21:7b:92:86:b3:49:
         7e:1e:46:bf:2f:7f:9f:ba:c9:40:2d:67:b7:bb:d9:a8:54:28:
         e7:39:35:7c:eb:6c:59:3a:96:97:0c:93:26:13:19:bf:2d:db:
         a2:ff:89:c6:37:4e:12:d9:44:e4:c0:20:b0:0b:01:76:12:0a:
         bc:6f:53:97:b3:a6:b3:a3:dd:3f:ab:98:5c:b1:d7:11:6c:73:
         7f:87:f4:fe:ef:b4:97:b1:e6:65:b5:4b:ec:d1:7d:c7:6b:19:
         75:ff:85:e1:50:ef:7b:7c:b2:05:16:6a:ed:32:b3:9d:49:1b:
         50:43:34:e8:b2:15:a3:37:38:df:7b:dc:70:75:c2:70:70:1d:
         d0:0f:48:fd:6d:57:a9:c6:27:79:91:69:8d:3f:45:88:04:63:
         59:db:75:85:c4:ab:34:2b:7d:95:95:70:12:5b:71:ae:25:43:
         e9:b0:83:cc:64:2a:9a:ac:1b:20:20:df:15:2d:a9:6a:5d:57:
         52:64:62:c2:a1:26:a8:a2:40:e4:91:f6:1e:9d:ab:36:0f:01:
         24:ba:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:32 2026 by rpki-client