Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
File:                     i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json)
Hash identifier:          kOV6Y8U6KLd+ClYA6P/PffIqsRzjKX2xm04imTuG+Po=
Subject key identifier:   19:04:FD:C9:96:7B:9C:E8:F9:D8:FC:5B:FF:52:91:97:EE:A1:AE:A3
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Certificate issuer:       /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial:       0D45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
Manifest number:          0D0B
Signing time:             Fri 12 Jun 2026 18:22:36 +0000
Manifest this update:     Fri 12 Jun 2026 18:22:35 +0000
Manifest next update:     Fri 19 Jun 2026 18:22:35 +0000
Files and hashes:         1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: z80y332CyaIVP/j7AIuT329S41566UoNCnQdPvGfsIU=)
                          2: A0C1D666451911F1A50ED04697833773.roa (hash: vRJyMNJ4KrDOIdOdKlShLmonDHmEMHH8Xt3hyYOcOF4=)
                          3: F315E40E545811F1A4AA7BC6AE833773.roa (hash: mQCN8GGTKlZamLj2u8NmpeyO8hy09UCVcvX6A9tbhCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
                          rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3397 (0xd45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
        Validity
            Not Before: Jun 12 18:22:35 2026 GMT
            Not After : Jun 19 18:22:35 2026 GMT
        Subject: CN=6a2c4e6c-39d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:42:53:7f:72:54:14:24:8c:f9:20:20:73:
                    a3:d6:f7:0b:31:51:ba:16:35:42:25:17:6f:83:97:
                    5a:12:0f:79:4f:39:63:a5:3f:66:ec:91:0e:86:13:
                    a6:e5:3e:62:73:37:21:0a:f5:08:be:e1:a6:bc:a1:
                    f5:54:be:3b:86:a6:92:fb:90:39:13:cf:1b:4b:06:
                    20:b4:63:70:a8:53:8e:69:38:1d:d7:f9:58:9d:34:
                    bc:a4:d9:59:70:57:90:c6:9f:6d:e6:00:18:3a:5e:
                    0b:c9:c1:1e:9d:31:31:4f:3a:ec:f7:a4:46:94:07:
                    bd:5f:9e:56:ad:06:be:13:27:63:32:cd:6f:6d:a5:
                    20:90:b1:2b:b8:fd:36:f8:a9:6e:02:3c:5e:3c:c6:
                    e4:50:f1:bc:61:37:91:6f:1b:7e:a2:3f:13:38:90:
                    21:66:ae:3c:96:04:f7:58:74:55:d6:1c:a1:3e:fe:
                    04:df:47:89:61:bd:28:65:41:e5:12:c1:e3:54:f2:
                    a5:85:40:b0:8c:04:c6:54:b6:40:b5:fb:5d:4e:11:
                    d1:f6:15:ec:95:cd:59:fa:51:24:e1:3f:11:2b:9e:
                    a5:c0:5e:42:5b:20:a5:bd:18:28:2f:b6:1b:7e:50:
                    53:84:4d:12:c5:fb:ac:0d:85:e1:96:45:7a:51:af:
                    7b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:04:FD:C9:96:7B:9C:E8:F9:D8:FC:5B:FF:52:91:97:EE:A1:AE:A3
            X509v3 Authority Key Identifier:
                keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:7c:e3:49:76:36:30:c9:32:14:f4:56:32:0b:84:31:97:
         2a:c9:d3:9f:d6:7a:6f:df:20:4e:64:3c:84:b0:69:cd:e5:2c:
         9d:18:43:b0:4d:15:cf:0c:81:58:79:70:f7:b5:66:a4:fc:6e:
         54:d6:88:c0:89:c0:60:01:91:64:60:40:de:5b:e8:8e:e1:b8:
         0f:9d:d5:49:0a:fc:7e:56:ac:e6:df:89:9f:a0:95:ec:55:26:
         45:e3:6f:e8:c5:3e:12:eb:2f:94:ce:c6:d4:cf:20:19:59:fb:
         d3:09:92:86:1e:85:e6:b0:fe:ec:3e:bd:db:e8:1e:27:01:a3:
         52:84:b9:b6:66:86:82:72:2e:27:92:77:e1:1c:f3:f4:e6:94:
         9b:15:f7:cf:fd:18:97:87:d6:6e:97:6f:c7:7c:e7:0b:9c:e1:
         59:bf:75:c0:1f:7c:27:fa:8c:0e:45:86:92:85:5e:f8:7b:ff:
         11:ff:a3:f1:44:97:9d:d8:da:94:cf:03:6a:2a:06:ee:9d:4e:
         c2:a6:ad:8b:18:3f:37:7a:d2:c1:2d:6c:e9:8b:02:fa:df:f7:
         63:df:79:ec:a8:a6:0d:45:9f:f0:39:c0:0e:fb:8f:1e:b8:46:
         90:77:60:21:b0:1b:ae:74:a0:21:bb:77:3d:f6:b2:95:33:33:
         09:46:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:49 2026 by rpki-client