Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
File:                     oYXAxXSCnF_NcURUSeU0za70E5Y.mft (raw, json)
Hash identifier:          U+I/Gfj90XeqrmWFWczM6U0M+nCoVxLVYlKf+iBsLBI=
Subject key identifier:   60:C7:A1:33:B1:BD:81:CE:88:03:C9:2B:11:A3:AC:25:FF:CD:86:36
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
Manifest number:          0393
Signing time:             Fri 13 Mar 2026 00:33:50 +0000
Manifest this update:     Fri 13 Mar 2026 00:33:50 +0000
Manifest next update:     Fri 20 Mar 2026 00:33:50 +0000
Files and hashes:         1: oYXAxXSCnF_NcURUSeU0za70E5Y.crl (hash: dZXEdbJslAjbF8K3mu4QGk+yDIPM9ciufrWi0fPylt4=)
                          2: B111111288B411EF80480527C4F9AE02.roa (hash: ERFGJsSUFqUqUH2+aB83gavANEDKi02Z8fvMs7VPc/s=)
                          3: F9C0DF84BC4111F09D031660C4F9AE02.roa (hash: v+IMCk1QKXV1myDls8FZGCVLQkvmM82UNEFppPlEWlM=)
                          4: 205AD1805C8A11F09D065A67C4F9AE02.roa (hash: jzliHD9p9VBPFQH3cs9dpYZduyBWUj6S6T4IuIvTvCc=)
                          5: 5F9F1738A37B11F0B0ADF652C4F9AE02.roa (hash: eynEZAFOoFMy/xuYyuLdNHt4VeaWDqCeHNzL/ERhSTY=)
                          6: A3571FDE47EC11EFB51C3666C4F9AE02.roa (hash: HZqCvdeGHsP/6NvJbld74YoHrCzB+uyqkSUL6rM4Krs=)
                          7: C5FA2070D5BE11F08FAD3430C4F9AE02.roa (hash: o5WlhFegrunl298udJ6RMR3PSjbICpygcszPCkIxPQQ=)
                          8: 212691F85C8A11F09D065A67C4F9AE02.roa (hash: GpFi4qWfLH3/Bor9liB/z27o/eFfVUNzo/Spgg2Kwhc=)
                          9: 836865ECD0DB11F086463D52C4F9AE02.roa (hash: ceAxo9+Fdyi5P0HsH2wnjJofUWLA3mwVeu0l0LHg0Tw=)
                          10: 2C155C38E62911F0B525CBC56F6F56BC.roa (hash: SGksm6VTqM61tXFsVwhp+M8haNtlkDq4gGqjHiqh65E=)
                          11: F2F59366E93211F0977E0D6F386F56BC.roa (hash: mJMHg3iUauwTmfzAX67ctynfw2aWN8PZsnA4LlIG7Ko=)
                          12: 1C8BEF04E24511EF96354978C4F9AE02.roa (hash: LdPaVpIHiFCviJ4atJWEzsKTvmcrhcuE0nckBT360kM=)
                          13: 2D153A4648B711F0B6D4592EC4F9AE02.roa (hash: eZ62tcC+oCrr0OwV7JhPtt2KQGPwxM8cNygG2lJcXC0=)
                          14: CD90ED68057211F0B6E2301BC4F9AE02.roa (hash: 9yLq1fcTY/+ONs/+aAdKdKRJn1+ep6hUevFi1Yok7fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 00:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Mar 13 00:33:50 2026 GMT
            Not After : Mar 20 00:33:50 2026 GMT
        Subject: CN=69b35b6e-97f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:94:df:e0:cc:65:cd:d4:a3:27:e5:d1:bf:
                    de:c7:73:2f:94:ed:57:e6:7e:6a:8d:cf:a2:84:fa:
                    4e:16:ac:cf:d1:65:7e:71:30:e2:de:3d:77:00:b5:
                    51:3b:33:dd:11:4f:e2:0e:f3:7d:54:5b:ff:61:f5:
                    9b:28:bb:a0:fc:24:2b:92:29:6b:ff:72:af:04:c0:
                    23:62:5c:3a:70:9b:5f:79:21:7e:cf:62:85:a1:6b:
                    e9:4d:bc:51:70:ef:e3:62:f3:71:d5:63:a5:df:a8:
                    46:f1:c7:05:12:a9:3b:21:5e:96:0f:3b:6a:cd:60:
                    f8:de:4d:ce:9c:08:51:08:06:88:8c:d1:38:ef:02:
                    e8:f7:4e:ba:8d:78:09:12:4e:b9:0b:28:5d:db:27:
                    5b:ea:14:f7:91:ab:79:51:24:a0:be:95:33:f2:23:
                    a6:0a:8b:08:43:12:0f:3e:9c:ac:9a:55:e1:f3:57:
                    db:27:32:07:62:bb:4f:35:3a:57:af:04:b6:0a:1c:
                    a7:5d:f8:4a:2f:af:65:5a:fe:e0:f0:03:23:bb:d3:
                    76:e8:17:6f:d8:1f:be:b9:30:fe:21:11:75:1c:dc:
                    f2:ae:ab:8d:c9:d7:a3:40:d7:a7:f9:ae:01:47:25:
                    93:10:93:46:7f:53:d8:78:4a:5d:7e:da:3b:83:2b:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C7:A1:33:B1:BD:81:CE:88:03:C9:2B:11:A3:AC:25:FF:CD:86:36
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:42:e6:ad:34:a9:fe:3a:2b:70:46:ec:4c:61:f4:5c:52:
         8b:5c:dd:c0:c8:df:ee:f4:f6:82:dd:6d:8e:00:62:86:a3:5b:
         94:8f:69:66:ab:16:c2:36:0d:ab:f0:08:6a:d9:4f:ef:fd:42:
         3b:fb:d7:18:e5:29:28:a4:1e:c2:2e:cc:96:55:6a:bb:62:06:
         3d:47:ff:34:ed:39:54:fc:77:73:77:72:87:b0:11:1c:e7:5b:
         52:b9:93:fd:f1:16:e4:66:17:0b:ac:51:7e:5f:b1:f0:40:52:
         09:c7:7e:10:47:a1:16:8a:52:79:71:c4:16:46:b3:66:03:ae:
         e6:aa:98:60:26:fa:49:03:16:44:52:45:21:eb:ef:2c:b4:ba:
         3d:e1:e0:f4:0b:8e:09:10:87:0d:e6:ee:c4:09:45:8c:72:b2:
         8b:70:b0:04:3f:07:4e:c7:cb:b1:33:2f:c7:6a:87:d4:1d:51:
         01:3f:75:f9:e2:ab:fa:09:ff:c6:c4:ce:76:75:a1:ae:ea:48:
         89:89:31:a3:b7:ba:78:8e:43:21:34:db:be:0f:15:01:cc:d8:
         ba:c6:9f:f0:7d:42:dc:ea:35:a0:3d:64:3b:71:70:bb:07:2c:
         e7:75:b2:2e:dd:ce:30:70:a3:df:24:86:f6:1b:34:c9:24:64:
         4c:c3:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:38:00 2026 by rpki-client