Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          Zh6OANa2Ksux0ULXDnALgsiRbF+jQnqNHkY4QtNEyFg=
Subject key identifier:   52:F9:5A:91:ED:63:7D:77:AA:6E:3A:81:B6:7E:81:83:82:D7:BA:52
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       03EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          03E4
Signing time:             Thu 21 May 2026 00:37:21 +0000
Manifest this update:     Thu 21 May 2026 00:37:21 +0000
Manifest next update:     Thu 28 May 2026 00:37:21 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: K4iNwa0T5KV1Lkblk3gsTp73uq4nTB7ec8bBQ+DBjuE=)
                          2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: znPEMd590TcR/3IMAM9N/494V66QspV9NulehEdGj6g=)
                          3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: ioqugPebSQF2gysJZ13DhVnh23alifn8w8A9RVCFn1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: May 21 00:37:21 2026 GMT
            Not After : May 28 00:37:21 2026 GMT
        Subject: CN=6a0e53c1-987e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:0e:2f:5f:33:3a:99:f8:ec:d8:1c:4d:2e:
                    b6:15:82:0d:b0:3e:09:5f:09:00:86:1d:0d:d9:3f:
                    17:96:ed:dd:f8:43:4e:f7:2d:c4:f6:50:04:14:90:
                    a4:37:76:f3:17:72:df:d0:11:45:b8:14:4a:7a:71:
                    80:7d:67:bc:49:3c:e3:89:f2:e7:7b:bd:26:ce:48:
                    d4:bc:d0:dd:6e:9e:8b:1d:e9:5b:a8:c5:a8:57:ef:
                    a7:48:8d:56:84:38:fe:e0:40:a3:df:de:7e:fb:14:
                    e4:62:78:72:06:40:b9:67:4f:5f:dd:44:67:2c:07:
                    b6:2c:b0:5f:2e:77:d7:a9:f7:13:e7:c7:ad:2b:1c:
                    97:0b:6c:ef:de:b1:9a:85:02:10:ae:94:b7:dd:fa:
                    ea:06:3a:c3:c2:75:f7:ec:86:07:d8:68:c6:32:0c:
                    b9:ad:1f:de:6b:04:89:62:fc:8c:f8:cb:9b:48:8f:
                    4f:e1:cb:e0:be:c8:67:c7:b7:52:b0:cb:bf:89:50:
                    cc:0f:a6:2d:1d:a7:c6:19:60:7b:4d:23:cf:13:1f:
                    6c:1d:8f:5f:ed:ce:7c:41:d4:2c:9a:87:fb:67:6a:
                    13:3f:d9:e9:0b:b9:a5:c3:43:95:55:ae:63:cb:03:
                    72:63:59:15:db:68:74:a0:19:b1:41:77:e9:57:ae:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F9:5A:91:ED:63:7D:77:AA:6E:3A:81:B6:7E:81:83:82:D7:BA:52
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:3a:03:4c:43:d2:42:06:d3:61:d4:7c:8b:2e:1c:8b:5d:
         86:00:ea:df:69:37:25:71:26:c8:f8:09:7c:43:55:c7:c1:e3:
         58:76:06:27:5e:1d:08:0d:b7:60:a7:d8:2b:b3:0c:81:ee:1d:
         13:68:1b:a4:5e:e8:9d:3b:1c:ad:5f:13:da:9d:45:a6:ad:ae:
         ae:15:d3:34:ce:82:17:0a:10:11:de:f7:ee:34:a1:3b:14:cd:
         7d:50:eb:55:30:bb:29:8e:4d:9e:1c:79:dd:5b:94:29:a8:8c:
         7d:b3:d4:15:7e:df:a4:13:1a:8d:58:04:32:9a:10:1c:48:37:
         c9:63:15:33:80:df:bc:29:01:d4:31:f4:4e:04:50:1b:e0:71:
         60:dd:d6:9a:70:da:c5:04:c2:71:86:dd:bb:b9:8d:a3:de:cc:
         6b:70:84:28:e9:b2:d0:59:b6:26:77:a1:0c:78:55:4c:46:34:
         93:ac:3c:6e:f9:29:b4:53:96:ad:67:db:3e:a4:77:26:ab:1b:
         2d:da:e9:33:b1:ab:d7:86:dc:4c:c3:0b:0c:54:d6:b9:c8:89:
         70:42:ae:9c:7c:f0:88:88:af:3b:8b:5b:f6:76:01:a1:4d:4f:
         7a:6f:d5:f0:d9:5e:32:9e:c8:08:49:34:0d:5b:4d:da:21:b0:
         25:0f:53:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC
QTBCQjFDQkYwHhcNMjYwNTIxMDAzNzIxWhcNMjYwNTI4MDAzNzIxWjAYMRYwFAYD
VQQDEw02YTBlNTNjMS05ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0gcOL18zOpn47NgcTS62FYINsD4JXwkAhh0N2T8Xlu3d+ENO9y3E9lAEFJCk
N3bzF3Lf0BFFuBRKenGAfWe8STzjifLne70mzkjUvNDdbp6LHelbqMWoV++nSI1W
hDj+4ECj395++xTkYnhyBkC5Z09f3URnLAe2LLBfLnfXqfcT58etKxyXC2zv3rGa
hQIQrpS33frqBjrDwnX37IYH2GjGMgy5rR/eawSJYvyM+MubSI9P4cvgvshnx7dS
sMu/iVDMD6YtHafGGWB7TSPPEx9sHY9f7c58QdQsmof7Z2oTP9npC7mlw0OVVa5j
ywNyY1kV22h0oBmxQXfpV64PvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFL5WpHt
Y313qm46gbZ+gYOC17pSMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2
QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO
R19pa0NqS24zZU82QzdITDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPqc6A0xD0kIG02HUfIsuHItdhgDq32k3JXEmyPgJfENVx8HjWHYGJ14dCA23
YKfYK7MMge4dE2gbpF7onTscrV8T2p1Fpq2urhXTNM6CFwoQEd737jShOxTNfVDr
VTC7KY5Nnhx53VuUKaiMfbPUFX7fpBMajVgEMpoQHEg3yWMVM4DfvCkB1DH0TgRQ
G+BxYN3WmnDaxQTCcYbdu7mNo97Ma3CEKOmy0Fm2JnehDHhVTEY0k6w8bvkptFOW
rWfbPqR3JqsbLdrpM7Gr14bcTMMLDFTWuciJcEKunHzwiIivO4tb9nYBoU1Pem/V
8NleMp7ICEk0DVtN2iGwJQ9T7g==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:14 2026 by rpki-client