Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
File:                     oo2gvpAdmDpDPYM1idFnv0hvZPw.mft (raw, json)
Hash identifier:          3m+VnPDri2FTLNyXMo42Ggk9Mdq2YmKewIu+1dRAMLQ=
Subject key identifier:   D3:F6:52:21:8C:D4:FB:D6:06:22:D5:C5:8E:6F:01:71:A8:77:84:60
Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC
Certificate issuer:       /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
Manifest number:          0232
Signing time:             Sat 13 Jun 2026 02:37:00 +0000
Manifest this update:     Sat 13 Jun 2026 02:37:00 +0000
Manifest next update:     Sat 20 Jun 2026 02:37:00 +0000
Files and hashes:         1: oo2gvpAdmDpDPYM1idFnv0hvZPw.crl (hash: vA02kJksn2W3AA1R1k0iZ+MN6cZwCmOklayjLLQIXjU=)
                          2: DB27568209DA11EEBA18A082C4F9AE02.roa (hash: bQjm4G+Xbuc3BrxcneYGH9ivdneUdSDZ8ioYNeVkHc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl
                          rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC
        Validity
            Not Before: Jun 13 02:37:00 2026 GMT
            Not After : Jun 20 02:37:00 2026 GMT
        Subject: CN=6a2cc24c-fbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:af:8e:71:7c:aa:8e:01:51:ac:9a:b0:20:
                    ff:6a:de:ef:c6:65:ba:0a:23:2d:cd:19:d1:6c:32:
                    66:62:f3:57:d5:57:5c:66:7c:c8:5f:f9:49:f9:06:
                    58:6b:31:f6:cb:76:a9:28:63:f0:3a:8c:87:34:2f:
                    f6:9e:07:a6:e4:03:0e:a0:43:89:b6:bc:c4:8d:1a:
                    d9:80:9e:97:c3:43:f3:6f:08:d5:1d:aa:32:bd:7f:
                    76:aa:65:45:39:47:7b:d4:2a:1b:df:59:12:38:ea:
                    20:65:9b:4f:b0:bd:1f:d5:67:8c:93:bf:7e:c7:48:
                    35:33:a1:68:0a:63:06:1d:37:9a:39:0a:a1:18:2d:
                    9c:ed:28:9d:22:b9:c9:86:aa:ab:22:47:bb:0c:6b:
                    e6:c9:18:b6:09:23:46:d0:4e:e4:6b:5a:51:d6:50:
                    c4:89:ed:8a:ed:bf:97:ca:c6:95:1e:2c:c6:49:54:
                    51:84:94:e4:52:6f:66:bf:19:2c:41:a5:8d:6a:af:
                    66:42:4d:81:ab:f4:ac:0e:9b:f6:46:5b:64:91:08:
                    75:3d:b6:8e:7b:b1:28:90:c3:f1:a2:a0:62:0e:73:
                    69:95:f8:f2:a5:9b:f6:76:d7:f8:9f:91:f2:7e:28:
                    c5:6e:ef:ca:43:d4:c0:9d:84:75:3c:09:cc:59:10:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F6:52:21:8C:D4:FB:D6:06:22:D5:C5:8E:6F:01:71:A8:77:84:60
            X509v3 Authority Key Identifier:
                keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:ba:db:59:02:b9:8d:3a:cd:2c:9a:7a:35:fe:b1:c7:83:
         70:f6:3b:fe:49:61:02:05:b1:78:2f:4d:d4:ee:32:4b:dd:67:
         de:30:ac:91:d0:e1:5e:b0:d5:b7:e8:02:4d:9a:21:ee:24:62:
         24:f2:86:1c:78:f7:97:8e:d0:4e:1e:ff:1d:03:d2:ee:c5:c9:
         17:b8:19:31:a9:9b:b7:bc:d0:ae:3d:da:42:75:ce:20:05:1e:
         c9:20:e7:ba:79:6a:87:e7:12:35:44:89:ee:f8:ba:9d:c6:37:
         b1:30:cc:29:02:06:00:39:02:2b:d3:b8:98:d9:6c:69:16:8a:
         6d:2e:e0:ea:59:e6:22:c5:06:b3:6f:41:e0:31:b9:0a:3d:ad:
         a4:93:63:c4:05:f9:6a:06:95:af:14:29:88:27:47:db:70:e2:
         6d:19:5e:87:87:55:d2:a2:b4:cd:20:94:e9:86:2b:da:a3:a4:
         35:a2:d1:ef:3f:79:81:40:ff:0a:83:b3:95:3f:bf:5a:23:05:
         8d:7c:f3:f3:f4:aa:0b:f9:e8:e4:20:12:f9:3e:c3:10:a1:b2:
         c3:6e:fe:47:2f:87:22:4b:43:8f:1c:a5:75:44:d9:ca:94:d0:
         d5:20:89:81:1c:1a:a7:4d:41:ff:c9:79:96:58:8c:58:89:9e:
         92:95:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:09:48 2026 by rpki-client