Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
File:                     OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json)
Hash identifier:          71qoNnHw+CUmti+KVwFXbq6VEGb5E+IaWVEyJsalssw=
Subject key identifier:   0D:C7:53:39:09:00:19:4C:B5:B9:89:A9:7F:F7:E6:E4:5E:97:3D:D4
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Certificate issuer:       /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
Manifest number:          EE
Signing time:             Thu 21 May 2026 06:37:03 +0000
Manifest this update:     Thu 21 May 2026 06:37:02 +0000
Manifest next update:     Thu 28 May 2026 06:37:02 +0000
Files and hashes:         1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: ZI6q+ZC+sokfQmMsixYVx0ijEYIgS6+CW0XGNfTkyWY=)
                          2: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: aNrWLrutR5ArzXGRsTtMLurkk5UM/Q77zEZqj2DNM6w=)
                          3: 41C8C708244111F1AF80D04DBB833773.roa (hash: P0OVA8RnrCkxwGNC5Oj/FAk/vhkA7eOmVQFaY4OMLYg=)
                          4: D759EECE244011F1B0BBBC37BB833773.roa (hash: 4ZLnEVH62B/fFZNl3E3aTQ7rJ1PwOzf217E+4KcGPOw=)
                          5: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: lVJ/wAuLoxmXnwU3EkGNm9UUsAUB6qqvPi8MZYUo1FY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
                          rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
        Validity
            Not Before: May 21 06:37:02 2026 GMT
            Not After : May 28 06:37:02 2026 GMT
        Subject: CN=6a0ea80e-ff47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:f3:90:06:c8:7f:cb:ae:70:e3:33:00:18:
                    6d:4a:78:fb:e4:c1:56:91:08:6c:a8:76:dc:1d:91:
                    cd:76:a6:bc:2f:85:84:cf:60:bb:9b:2f:8c:de:51:
                    8a:84:74:0d:20:9e:d7:e9:8b:a6:87:e3:a1:f1:84:
                    c1:b5:76:d8:65:0c:f4:73:b7:21:0e:e6:d0:37:44:
                    68:be:b0:67:a4:9f:6f:f0:bf:8a:59:c5:4c:e5:5c:
                    05:87:e3:f4:4c:9c:51:11:06:a5:20:2a:44:33:42:
                    63:07:41:65:1e:0f:e9:2b:de:2a:c6:c0:fd:9c:bd:
                    b7:56:85:4f:63:ee:fe:3b:cb:51:32:1a:92:4d:0c:
                    c2:bb:5e:f9:1b:3e:db:44:81:2f:26:1f:fd:fa:c2:
                    5c:b4:90:79:aa:68:71:7e:23:99:21:6e:b8:9c:82:
                    43:65:54:5b:bb:8d:c7:ed:ad:c0:b7:ba:19:fc:da:
                    49:28:ab:4c:37:35:40:46:b1:c9:10:7c:5e:03:67:
                    0d:f3:91:46:c7:fe:67:3b:28:da:5b:67:87:f5:c1:
                    b8:c7:6a:10:c6:87:37:ae:55:76:49:0a:61:b2:e6:
                    f7:a9:b6:8d:39:f3:e9:17:86:87:95:94:9c:2b:97:
                    97:c3:c8:30:f3:86:7c:72:fa:68:d7:a6:ad:a2:ce:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C7:53:39:09:00:19:4C:B5:B9:89:A9:7F:F7:E6:E4:5E:97:3D:D4
            X509v3 Authority Key Identifier:
                keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5c:78:38:5b:a6:a0:2d:6e:45:a1:6b:3d:f7:61:c1:4a:45:
         44:9f:d4:9d:34:b6:3e:33:df:0d:79:6a:8c:17:93:d4:3e:ca:
         8d:dc:a5:17:32:df:39:e2:4f:2b:d9:ba:e8:33:43:74:c3:08:
         65:44:66:9c:23:ee:2b:5a:84:7a:90:63:99:5c:d8:35:5e:f4:
         09:e1:f0:cb:82:94:9b:64:99:9e:26:4a:99:25:b0:05:71:0d:
         0c:bc:5b:7d:65:f8:08:31:60:e4:bb:8c:ae:62:16:10:70:a6:
         6d:bf:05:d6:04:51:65:3e:eb:bd:6b:a1:b5:ae:21:a6:78:a7:
         c0:1c:17:e8:ba:1a:bf:1e:80:07:8a:9f:54:27:2a:68:60:4a:
         61:3a:61:07:01:95:7b:5d:18:f3:08:e2:4a:5e:10:6d:3d:8d:
         57:4a:98:ce:b4:ec:bf:7d:31:12:bf:8d:86:6b:36:3f:6f:ac:
         99:ef:02:c7:f5:70:2d:96:20:fc:85:ce:69:03:9b:2b:73:37:
         22:5a:31:f4:56:41:90:82:de:98:c8:d4:f1:b0:b4:60:f0:b9:
         18:c6:f2:93:84:b6:d5:19:bc:3b:68:0f:af:9a:3b:71:3f:91:
         1a:bd:88:ea:2a:b7:04:21:d0:57:43:12:37:27:9a:8a:19:ef:
         6f:1f:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:03:35 2026 by rpki-client