Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File:                     oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier:          tlEoMJ0BnEv459AOrOsx6M91vDca2PwN6bFc7tz1TGU=
Subject key identifier:   C0:32:3C:99:28:2C:A4:1A:E7:F3:B8:2C:4D:3D:BD:43:B0:01:C3:23
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer:       /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number:          0215
Signing time:             Fri 09 Oct 2026 03:28:34 +0000
Manifest this update:     Fri 09 Oct 2026 03:28:34 +0000
Manifest next update:     Fri 16 Oct 2026 03:28:34 +0000
Files and hashes:         1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: 6Py0sAU77HY36NkdZKXuYMmzIXZ4/m/BTjCQPeS0TQU=)
                          2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: I602UprS0PuPZg6+swMqCR4Z7j5cFK9kxKEJsn7QaM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 03:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE620, serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
        Validity
            Not Before: Oct  9 03:28:34 2026 GMT
            Not After : Oct 16 03:28:34 2026 GMT
        Subject: CN=6ac85f62-1d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:b6:ff:14:bd:dd:6b:70:b2:d1:02:c2:2c:
                    a9:cc:ea:01:4e:3b:b1:fb:25:96:7e:64:53:ab:52:
                    4e:87:09:bd:f1:93:e1:da:77:ba:b0:72:90:18:9a:
                    e0:6b:fa:ed:2d:a8:82:6b:5c:44:f5:dc:92:bf:8d:
                    59:00:ae:45:dc:73:ba:00:c8:3b:5c:eb:27:e5:16:
                    90:0a:18:af:e3:24:73:67:fb:a8:c1:d2:71:47:ca:
                    ec:41:9b:8f:e2:08:9b:f7:37:09:e2:06:52:18:7e:
                    05:17:6e:95:f3:de:91:06:9a:7d:9b:99:03:6a:1d:
                    5f:65:18:df:9b:7d:fc:10:80:f5:05:c2:9f:19:1c:
                    c4:74:77:28:c7:87:6a:8b:7b:ea:f5:9b:6c:1f:f7:
                    1c:ea:38:11:6e:3a:df:d4:24:4d:e3:77:2e:58:e8:
                    27:f8:48:ef:bb:3c:9c:27:46:87:46:35:ea:35:d2:
                    96:0e:91:58:e0:61:2a:08:d7:18:85:04:b4:38:24:
                    de:4e:be:17:2e:3e:9f:08:3b:68:20:75:43:3b:9a:
                    67:fb:74:44:12:af:3a:4a:09:95:2d:57:a4:e6:6a:
                    7a:74:dc:21:2f:71:ae:f3:34:d3:94:e0:f5:88:27:
                    33:52:37:28:ee:88:a9:54:5e:8b:d4:5a:37:d6:1c:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:32:3C:99:28:2C:A4:1A:E7:F3:B8:2C:4D:3D:BD:43:B0:01:C3:23
            X509v3 Authority Key Identifier:
                keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:22:40:e2:7b:33:fe:87:1c:b9:9c:53:b6:a7:97:af:94:22:
         9e:bc:93:fc:2d:62:57:47:18:8a:89:fc:b0:50:fa:a0:26:2b:
         dc:08:fc:a3:3b:a2:17:10:4b:0b:17:a7:3a:ef:7c:9a:93:fd:
         fa:1b:37:96:3d:5b:9e:e6:6a:f8:4a:d6:3d:f5:ae:f7:e1:c0:
         ad:fd:44:de:13:f4:0b:7e:06:9e:d9:8c:82:60:a6:18:8b:8e:
         39:4d:85:84:60:84:71:a0:db:6b:3a:80:69:8e:46:66:98:db:
         75:3d:55:e5:4b:29:49:2a:06:ef:00:f0:6c:d1:61:5b:b6:c0:
         1e:91:a7:05:c4:7c:3e:52:ee:9e:5e:4d:41:54:39:ba:25:b2:
         b5:be:da:37:8c:71:49:0a:e8:05:b3:bd:88:ec:f0:c3:e3:db:
         59:a8:7c:80:6a:b1:7c:f5:e9:34:d0:1e:96:b2:7b:a8:d3:b5:
         0d:d7:48:cd:d9:26:6c:dd:00:a5:6d:4b:df:80:f2:c4:a5:8c:
         3d:37:d6:49:e9:a5:38:23:ee:36:0e:13:8f:5c:b4:67:8b:2d:
         f4:a9:62:67:1c:1f:60:d0:70:76:e8:9d:5e:90:d2:90:41:a7:
         5b:a0:73:e4:ed:b4:b9:91:db:5a:38:d3:c7:70:aa:1c:27:60:
         8d:5c:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:15:40 2026 by rpki-client