Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
File:                     _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json)
Hash identifier:          d2LijbsVVF/JrxTnQI6W6EgrfMcDNmWpi2/3NcfMKSo=
Subject key identifier:   1F:E6:D6:16:C7:A6:63:21:70:50:21:25:00:48:08:E7:25:F0:4C:D5
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Certificate issuer:       /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial:       35B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
Manifest number:          3592
Signing time:             Tue 18 Aug 2026 14:32:02 +0000
Manifest this update:     Tue 18 Aug 2026 14:32:02 +0000
Manifest next update:     Tue 25 Aug 2026 14:32:02 +0000
Files and hashes:         1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: LvAcHcp92D/LNULCV/Pr2pGr1usEMckZvipuDMbJelM=)
                          2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=)
                          3: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13746 (0x35b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
        Validity
            Not Before: Aug 18 14:32:02 2026 GMT
            Not After : Aug 25 14:32:02 2026 GMT
        Subject: CN=6a846ce2-d583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:21:9a:a6:ee:a9:2a:eb:56:88:e7:3e:5e:
                    63:39:44:86:d8:29:12:2a:fe:92:61:4c:b1:13:a0:
                    0f:43:a3:1d:a5:dc:df:74:b1:68:6d:01:57:46:e1:
                    a8:97:a7:5c:d9:c6:ee:39:32:95:69:cf:44:cf:02:
                    49:c2:80:1b:02:4f:61:e6:bd:82:2c:ff:64:09:05:
                    52:2b:1d:25:10:6b:f1:00:42:d3:7a:05:cc:8d:a9:
                    26:5a:e7:ce:fd:d1:ef:3f:4f:67:7a:ec:ef:10:10:
                    e8:01:24:e9:e5:2f:50:e3:e9:81:16:69:06:d0:ab:
                    95:c1:45:55:3d:57:cf:32:7e:f9:6a:4d:2c:f4:fc:
                    64:11:89:d3:3a:73:3d:a8:87:c9:d4:e7:d1:4d:53:
                    3c:b7:5a:34:18:c1:9f:c1:db:c4:fc:a4:e3:d7:a5:
                    bf:ee:ed:8e:e9:11:91:98:09:8e:c3:c1:7d:22:fe:
                    a1:51:ec:59:19:69:e7:38:02:8e:3e:2a:4b:07:6c:
                    bc:3c:dd:a0:1e:22:ed:d7:97:82:af:56:b7:37:f4:
                    3b:3d:9b:47:be:0f:ee:84:76:c6:3e:41:08:05:4d:
                    d2:9b:7b:9c:9d:4d:4c:73:ff:50:b1:80:f9:af:dc:
                    2e:5a:98:eb:6f:62:d7:61:78:66:3b:a3:f9:4e:d8:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E6:D6:16:C7:A6:63:21:70:50:21:25:00:48:08:E7:25:F0:4C:D5
            X509v3 Authority Key Identifier:
                keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:46:c9:56:2c:20:a5:81:ce:29:c2:34:14:17:29:de:dc:
         39:0f:62:a1:d0:c9:e4:2c:07:ff:3f:30:ff:71:01:19:56:98:
         f2:b6:15:ec:61:bd:9e:b9:93:4f:fc:c0:8c:a0:57:9f:74:f3:
         06:6e:ef:70:e9:aa:89:29:11:dd:06:9c:77:ae:ac:aa:5f:b4:
         4c:ae:90:43:9a:64:9c:35:81:bd:8e:7c:f8:31:51:6d:24:e9:
         15:cf:d9:42:b1:02:91:5d:05:a2:f4:fe:f6:a7:cb:c5:8c:30:
         22:a4:7d:fd:4f:f4:fa:96:c0:4f:3b:b8:29:25:ba:17:34:ee:
         9c:7b:d7:22:3f:1c:39:fe:21:95:72:87:95:0a:1e:4f:bc:f1:
         62:11:e1:cb:28:b9:a0:0a:ac:16:19:ff:3a:a5:5f:8c:ec:fb:
         35:d4:0a:c1:ee:d9:1b:da:2b:7d:24:bf:f9:07:ff:cb:e0:88:
         c2:12:b9:c9:b0:bb:d6:b8:dd:a4:08:44:86:f0:09:2b:4b:3a:
         84:b4:30:ab:5e:5b:21:a0:a9:cf:c2:54:bd:26:81:c2:2b:13:
         85:2e:58:b3:e8:ab:ee:77:e8:98:bf:2e:34:26:c4:e7:fd:43:
         4b:71:4f:5f:e1:95:04:c6:ad:44:8a:11:12:82:22:6d:d3:c4:
         6f:7b:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:05 2026 by rpki-client