Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
File:                     ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft (raw, json)
Hash identifier:          3QvN0/CZwjN7F31kdoSUe2+LRlr1GOuWySd8q/Y+908=
Subject key identifier:   B5:15:CA:3C:CD:F3:F6:11:CC:9B:41:6E:D9:56:87:AA:88:F1:37:2F
Authority key identifier: A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D
Certificate issuer:       /CN=A912B1E4/serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
Manifest number:          26
Signing time:             Thu 11 Jun 2026 11:09:39 +0000
Manifest this update:     Thu 11 Jun 2026 11:09:39 +0000
Manifest next update:     Thu 18 Jun 2026 11:09:39 +0000
Files and hashes:         1: ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl (hash: POqgRWggZZ40z1ZCyOHVO81ucefSqoRrIb+xBHY9drQ=)
                          2: 3BE765AC2E5911F1AF1402DA99833773.roa (hash: 4vN9DxDqav8XQy5RbRHkPzQNR/xKvXelfPI7Z+9SlN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl
                          rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B1E4, serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
        Validity
            Not Before: Jun 11 11:09:39 2026 GMT
            Not After : Jun 18 11:09:39 2026 GMT
        Subject: CN=6a2a9773-1e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:45:fa:75:30:c4:7e:d4:b9:9d:aa:31:8e:
                    30:9f:ec:74:73:10:5f:63:32:c1:bd:41:c9:ed:df:
                    28:5c:ca:e4:e5:9a:ba:30:c4:f2:32:60:03:a9:d7:
                    e5:8b:04:7e:de:dd:84:f9:a0:44:48:31:8d:70:8e:
                    97:be:6b:18:be:61:03:ee:27:c1:4c:39:93:e0:b5:
                    c6:b4:41:30:f9:fd:fa:bf:ac:be:64:52:c7:13:a6:
                    77:8d:de:90:fa:41:a8:40:05:63:6c:86:e9:34:49:
                    17:5a:95:09:52:e7:d6:86:d6:69:2b:71:44:cc:9f:
                    87:65:ab:3b:55:53:74:2f:66:a5:33:df:77:51:e6:
                    8e:7a:20:d4:87:83:4e:e1:63:07:0d:ff:08:af:ee:
                    38:2f:12:12:79:ac:9a:d4:56:c8:c7:c1:d0:f6:1f:
                    7f:3a:f0:1a:9c:5e:1b:4e:b8:61:f0:3e:45:b3:e4:
                    1f:8b:5a:17:3f:fa:35:bb:5e:fd:b2:8f:30:ce:44:
                    b1:2f:7b:6e:fa:5b:ca:0a:74:1c:1c:ab:59:11:a7:
                    a9:01:1d:39:90:42:16:16:62:18:47:dd:3d:9f:cf:
                    fa:46:7f:a2:b6:e5:8d:35:60:d5:c4:7a:73:36:b1:
                    59:8a:1c:7c:9e:48:c7:8d:ef:7c:c6:9e:b4:d0:e3:
                    4e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:CA:3C:CD:F3:F6:11:CC:9B:41:6E:D9:56:87:AA:88:F1:37:2F
            X509v3 Authority Key Identifier:
                keyid:A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:41:24:bb:3c:14:6f:65:ee:bc:e2:e8:1d:31:5e:f8:4f:bf:
         a3:2b:f0:69:95:88:ff:84:64:a0:e2:af:54:fe:23:9c:5c:e6:
         ba:bc:f8:50:ac:45:0c:e9:e4:20:4f:a2:ae:79:73:02:e9:df:
         18:23:d5:06:f0:dd:09:23:ec:fb:4b:bd:2a:66:02:23:7b:68:
         54:52:fa:aa:16:74:c0:41:7d:5d:94:d1:04:00:5c:61:fa:d9:
         17:8a:8d:4b:b1:23:3b:00:45:4c:18:4d:22:3c:18:0d:7f:09:
         75:91:17:0b:a2:5c:18:f9:f8:60:34:78:64:a3:9f:bf:c0:05:
         38:d8:42:7d:9e:f6:48:79:f9:cb:44:77:79:e3:a4:57:ee:3c:
         04:04:42:de:f4:d0:3b:ac:19:3b:95:54:47:a5:ac:5a:7a:44:
         fe:46:84:e1:70:2d:eb:d6:97:63:8b:55:7f:85:00:db:1f:07:
         10:d9:91:74:2e:1e:ec:0b:65:28:7c:39:c6:f0:4f:15:05:87:
         34:90:f2:b2:f9:d3:5a:65:30:fc:3a:e8:61:e3:d7:79:43:50:
         48:71:41:5e:b2:1c:82:c8:33:e2:a2:a1:e9:dd:d5:ba:6e:f0:
         f0:37:16:be:0b:61:8c:d7:5f:55:88:da:80:61:c7:1d:0a:7c:
         72:06:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:51 2026 by rpki-client