Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
File:                     o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json)
Hash identifier:          xsESrTbqfjg/8SikLHeDWZlwU/3734bPRj0qyR18+y8=
Subject key identifier:   A1:8C:3B:0E:11:82:08:D2:AB:3C:0A:03:A4:DE:74:A1:CF:3B:A3:94
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Certificate issuer:       /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial:       024D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
Manifest number:          0247
Signing time:             Thu 21 May 2026 02:28:38 +0000
Manifest this update:     Thu 21 May 2026 02:28:37 +0000
Manifest next update:     Thu 28 May 2026 02:28:37 +0000
Files and hashes:         1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: vnVbfGBStRrzNe6jW8r2AwADfW1ZJ8SpBEJYrmKNBuI=)
                          2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: HLxpBgf2BiS9RoMk9148N++nqSRKey+SFnFlfYeHOnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
                          rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
        Validity
            Not Before: May 21 02:28:37 2026 GMT
            Not After : May 28 02:28:37 2026 GMT
        Subject: CN=6a0e6dd6-ab21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:8a:85:ed:d8:57:09:7c:9c:98:7c:9d:9d:
                    66:b8:5b:d1:8f:17:cc:9e:b4:6c:15:dd:10:e3:48:
                    1a:34:18:70:df:66:48:f6:bd:e5:7a:8e:9d:1e:03:
                    5a:51:c3:9a:f5:4c:f9:0b:72:9d:31:fa:46:0d:c3:
                    f7:39:a3:c3:14:e4:33:88:a8:90:e5:7a:03:7c:1b:
                    0d:dd:3f:5e:21:67:aa:a9:d9:0a:8b:1f:0b:95:c1:
                    7d:c3:e3:c0:72:2c:e0:53:fd:18:9b:93:47:23:64:
                    d9:7b:85:64:e2:01:76:0e:ef:03:b3:39:57:92:24:
                    f9:7d:be:74:67:63:e6:75:08:e6:24:45:1e:b0:25:
                    8e:42:05:d1:ac:58:81:bf:7a:ac:22:de:51:38:6a:
                    86:e6:84:0f:2d:63:58:cf:2d:91:00:90:7c:c7:7d:
                    8a:7e:9f:bf:6c:59:97:40:b3:5b:94:29:8c:0b:a5:
                    df:11:64:b1:89:a4:ff:21:c1:d4:4b:97:b8:a0:ef:
                    a4:d2:83:5f:3f:17:04:5d:a1:29:71:a3:df:e5:6b:
                    5c:e9:92:03:a3:78:85:f8:33:f4:42:fe:a3:59:1b:
                    ee:cf:b0:f8:32:83:07:66:a4:db:33:f9:98:32:3a:
                    b9:7b:aa:36:50:e7:dd:6c:b4:ae:c9:d9:27:67:46:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8C:3B:0E:11:82:08:D2:AB:3C:0A:03:A4:DE:74:A1:CF:3B:A3:94
            X509v3 Authority Key Identifier:
                keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:28:2f:04:e9:0e:ec:ce:19:46:24:9c:16:ab:b4:9e:46:6f:
         ae:d0:f4:90:1d:e0:0f:15:61:8d:7b:f3:55:99:54:6d:3a:b4:
         2b:ac:5c:b7:76:1a:76:ba:2c:02:5d:5e:1d:9c:02:34:f4:c2:
         59:89:fc:ab:03:f8:60:96:08:80:84:91:45:71:8b:55:a0:4f:
         62:c8:ea:5c:ac:0d:92:88:ff:f8:4e:c3:af:f8:57:67:99:65:
         29:ea:1f:86:ea:71:3c:0f:bb:a3:aa:92:eb:b5:b1:e7:3c:bc:
         d8:30:d2:6b:10:9b:54:72:58:6b:0d:7b:81:56:52:38:43:20:
         f2:bd:df:35:89:07:48:eb:3d:16:1b:3f:85:fa:a9:b8:0d:94:
         e3:89:9b:56:32:27:98:0e:9f:c6:5c:7e:9a:1b:76:1e:92:06:
         95:4d:c8:98:77:c0:5a:19:38:3b:c3:99:f9:00:fc:e4:96:95:
         dd:48:f0:98:5c:c2:46:c8:ae:0c:45:55:fe:4e:31:dd:e9:b8:
         d5:f9:38:7d:c8:7e:19:3e:b1:79:82:70:80:c1:39:a5:23:8b:
         77:8b:8c:38:b7:35:6c:94:80:d4:ca:6f:f0:29:dd:43:10:fd:
         2f:fe:c8:e0:96:61:08:0b:1e:83:33:cf:bd:b6:b0:34:06:eb:
         ad:b3:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:14 2026 by rpki-client