Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
File:                     oRR-hHvP7urdnompeo2fM2ecp-I.mft (raw, json)
Hash identifier:          6DTpXDAoNL+IB5UaLsJ4/1Z1YfC3mMHZK85SRJGijtU=
Subject key identifier:   20:CF:26:F9:C9:9D:90:52:73:56:3E:69:F1:B5:87:1D:73:24:32:A8
Authority key identifier: A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
Certificate issuer:       /CN=A91EAD80/serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
Manifest number:          0176
Signing time:             Mon 19 Oct 2026 05:26:43 +0000
Manifest this update:     Mon 19 Oct 2026 05:26:43 +0000
Manifest next update:     Mon 26 Oct 2026 05:26:43 +0000
Files and hashes:         1: oRR-hHvP7urdnompeo2fM2ecp-I.crl (hash: fdZxL61Ru47Jc/wdyiO3mCOpL671SSqWDlHh3nRUr0w=)
                          2: 52DF0E62B2FA11EFA36E0387C4F9AE02.roa (hash: QqqXcy0rlKoYg63rZeBH+t86JUXNBkFgw10UvyH6Mls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl
                          rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 05:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAD80, serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
        Validity
            Not Before: Oct 19 05:26:43 2026 GMT
            Not After : Oct 26 05:26:43 2026 GMT
        Subject: CN=6ad5aa13-7b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:57:03:4f:bf:f8:84:35:36:63:11:9b:12:
                    fc:2a:e7:66:9d:06:4c:36:1b:2f:35:f9:d5:aa:ee:
                    b3:3a:e1:8c:1b:58:13:b6:45:0b:80:ca:01:32:8d:
                    ee:f6:f4:3f:e9:15:3e:1f:bf:02:77:09:9b:25:1f:
                    69:a8:eb:9b:22:3a:9a:76:88:1e:34:7c:a8:ea:5e:
                    9d:0b:1a:a9:68:7d:95:4d:6e:92:10:96:c6:5a:fd:
                    6d:a7:19:23:d3:ee:39:03:d7:35:58:1b:9b:6c:9d:
                    50:a1:a9:52:e1:15:ae:c8:11:67:e0:fb:42:e0:6f:
                    23:9e:60:dd:9c:85:6b:fe:66:fd:78:5b:29:71:50:
                    8b:5d:3d:42:3d:3b:70:72:c7:8c:75:90:94:aa:d8:
                    5a:bd:c9:38:2c:30:26:78:35:0b:bc:aa:71:ad:f2:
                    07:09:d2:5f:17:f0:2e:38:db:3d:97:4c:2e:d0:01:
                    03:7d:a8:03:61:85:fe:dd:8c:fe:83:16:6f:25:30:
                    19:01:bd:aa:2e:a8:45:03:55:a4:b1:07:a6:92:4c:
                    c6:8f:cd:d2:21:4a:d3:83:71:54:70:4e:fd:55:f7:
                    68:3d:e8:03:ea:8f:33:29:c2:6d:e2:b1:11:9d:0d:
                    27:5b:17:53:7e:7a:85:3d:22:79:01:8f:08:ad:67:
                    b7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CF:26:F9:C9:9D:90:52:73:56:3E:69:F1:B5:87:1D:73:24:32:A8
            X509v3 Authority Key Identifier:
                keyid:A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:0c:78:1e:d4:f5:0d:7f:7c:20:ca:49:1a:34:36:c0:1e:b4:
         0e:6b:71:22:0b:fe:44:73:f4:72:49:eb:0f:63:b9:e3:5e:77:
         e2:cf:f0:c5:30:f9:76:e4:7e:c2:b6:b6:88:85:74:d7:3a:fc:
         59:b7:16:9d:29:73:b3:e4:3c:49:44:01:ee:db:22:da:0d:1d:
         67:68:55:8c:bc:3e:fc:bd:97:b7:19:b7:cc:b7:ee:4f:99:4f:
         c3:71:0a:27:3d:f0:c0:48:cb:93:20:17:32:85:b7:11:a7:93:
         c2:d8:ab:3e:2c:4a:d2:16:6c:76:e6:92:9b:9c:0b:9d:3c:23:
         f5:ef:56:a7:7b:c4:1a:77:49:51:2c:1a:10:fd:8a:2f:ab:69:
         04:fc:ea:50:73:20:4f:f5:eb:24:47:ba:bc:96:7c:87:68:db:
         23:a1:19:f2:4a:1b:d4:ed:a2:3e:7f:bf:99:ad:15:be:60:44:
         ae:80:cf:94:19:57:88:2d:cf:07:dd:7c:c4:f0:df:4d:b5:e5:
         d2:f1:31:94:ad:c9:d5:89:32:54:c6:a9:0b:7b:2f:98:f3:d4:
         59:da:ed:7d:61:eb:6f:4a:77:8b:86:e3:09:b8:51:7f:ef:a8:
         80:02:17:57:ff:9e:b6:34:4b:85:06:cb:4b:ee:88:39:47:7d:
         42:b1:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:47:00 2026 by rpki-client