Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
File:                     o9c6Tp8QQ946v09e0Qhor20zW_Q.mft (raw, json)
Hash identifier:          2rWbwV1E15Rohjl8bjnCjQKPNzyU7yolQC2q0idx1Hg=
Subject key identifier:   65:E2:03:00:BE:7D:78:79:CF:87:F4:66:25:3B:A5:22:F4:73:D0:98
Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4
Certificate issuer:       /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
Manifest number:          0462
Signing time:             Thu 21 May 2026 00:13:10 +0000
Manifest this update:     Thu 21 May 2026 00:13:10 +0000
Manifest next update:     Thu 28 May 2026 00:13:10 +0000
Files and hashes:         1: o9c6Tp8QQ946v09e0Qhor20zW_Q.crl (hash: 47QN0aqgQIz1E96nex18W+8zNr1d44zrqvPwZ6H3QuI=)
                          2: 59212E58955D11EC97EC0461C4F9AE02.roa (hash: fiTho/TerZpO+3DrMondjvawf8v6tA9SLzSvEGlCEZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl
                          rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4
        Validity
            Not Before: May 21 00:13:10 2026 GMT
            Not After : May 28 00:13:10 2026 GMT
        Subject: CN=6a0e4e16-fa64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:40:3c:f0:ef:ed:d6:d5:be:ed:6c:ed:b2:
                    5c:31:9d:e2:9e:a9:59:d5:f5:12:db:14:cd:15:4a:
                    b1:53:b3:77:4d:f0:13:86:6c:cd:4e:29:da:7b:b4:
                    eb:f4:03:60:20:f8:5f:6d:ac:58:08:65:09:4c:67:
                    c9:de:5d:70:51:67:b5:27:d0:51:4c:ac:e5:a4:2b:
                    0a:3f:ce:95:cb:75:1a:83:05:7d:73:d3:d4:d7:91:
                    c7:71:46:d6:eb:5b:15:c1:3c:3d:58:28:b5:5d:2b:
                    33:e5:67:b8:2a:0b:54:88:ba:8e:3f:e0:58:05:32:
                    0c:e9:17:37:96:5f:a9:84:d0:51:a2:d9:7c:f4:94:
                    bc:ee:2f:54:fa:ef:53:a8:8a:58:d3:3d:90:d2:53:
                    82:f7:46:6d:4a:02:c4:f7:f4:97:a1:a4:22:62:93:
                    61:30:5d:ac:4b:7d:51:cf:65:e3:61:62:aa:3c:eb:
                    bd:de:9c:5a:79:68:ce:49:fa:e1:c1:7c:1b:1a:f7:
                    a5:2a:8a:c9:e6:42:db:69:8e:ee:97:73:a9:8f:a9:
                    16:ff:17:c7:06:f0:e3:55:46:23:82:a0:dc:c0:74:
                    42:0c:c2:63:36:32:42:41:ef:40:9a:1d:d8:d8:24:
                    89:e2:28:8c:9f:8e:39:8f:33:c1:19:2f:0e:87:e6:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E2:03:00:BE:7D:78:79:CF:87:F4:66:25:3B:A5:22:F4:73:D0:98
            X509v3 Authority Key Identifier:
                keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:9c:7f:2a:ce:f1:98:88:6d:c0:ea:8c:3e:50:b3:ba:77:
         09:7c:dc:f7:4a:ba:3f:86:b6:1d:2a:f4:42:a7:4d:d9:b9:e3:
         4f:bd:07:f9:f8:88:b1:d3:08:08:63:dc:96:95:1a:7d:69:cc:
         b6:b5:25:f3:13:75:31:07:76:f6:49:4e:ae:a3:32:8b:43:58:
         9d:e8:4a:56:9a:5c:ff:e0:5e:bb:7d:6c:1d:f1:e9:b7:fe:d4:
         9e:ad:49:1f:06:40:95:1d:28:f0:ac:e2:0a:94:e6:20:c4:5d:
         58:ed:7b:56:21:b0:b4:f7:33:78:60:6f:df:61:9d:11:25:d1:
         1f:47:61:9d:49:d9:0f:93:c0:51:86:14:48:f6:89:f8:fb:1e:
         d4:31:16:ad:3f:e7:b9:06:e0:69:93:a5:cf:81:9e:49:7f:4a:
         bb:a7:14:cb:40:15:6f:0b:5b:ce:82:4d:ec:46:03:a6:da:75:
         99:5c:1d:38:62:57:6c:49:6a:63:58:83:45:65:c9:94:cc:14:
         28:c6:0f:35:65:36:d3:dd:73:51:5e:4c:d8:ae:43:2e:83:ca:
         d9:ab:ed:4f:21:a6:cf:a6:c4:84:60:16:a7:22:7d:2a:8a:d8:
         a8:59:92:a7:ce:62:7e:eb:7e:17:59:03:37:f4:b9:e4:cb:25:
         61:1c:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:09 2026 by rpki-client