Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
File:                     oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json)
Hash identifier:          NH7u/FFr38JMzyJPTsXTcKD5tYJR+1kS4M3at/6Z608=
Subject key identifier:   14:CB:51:2C:83:38:E4:1D:1D:2E:2E:E7:2C:FB:FC:58:D5:01:54:04
Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
Certificate issuer:       /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
Manifest number:          56
Signing time:             Sat 13 Jun 2026 08:16:23 +0000
Manifest this update:     Sat 13 Jun 2026 08:16:22 +0000
Manifest next update:     Sat 20 Jun 2026 08:16:22 +0000
Files and hashes:         1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: 5eUfv/cyK9E5uxRTwYIFTj4B/7FmXl4307wHOjfdpEc=)
                          2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
                          rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
        Validity
            Not Before: Jun 13 08:16:22 2026 GMT
            Not After : Jun 20 08:16:22 2026 GMT
        Subject: CN=6a2d11d6-220d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:7e:7b:70:09:ba:c8:0b:2a:d9:c1:14:db:
                    61:2f:02:00:24:d0:69:0e:25:53:ea:11:fb:77:ef:
                    83:be:ee:51:1f:91:c8:a1:78:d7:e1:0f:7d:71:a3:
                    58:de:09:d8:f9:6b:30:8b:54:65:0a:81:50:c7:ca:
                    e3:85:35:74:5f:3a:ae:8c:5d:13:33:51:ad:d3:f8:
                    da:4c:1b:b4:c8:2c:20:09:71:69:fc:1d:25:98:1e:
                    29:61:a4:2a:f5:23:6e:c0:60:b8:71:e5:06:08:60:
                    95:85:a9:7d:26:bb:5e:94:7f:b3:de:11:cd:63:27:
                    53:3e:01:ec:67:b7:c6:1c:6c:e7:16:fd:73:07:64:
                    33:61:3f:94:78:e0:df:3f:ee:5b:47:c5:7f:81:37:
                    ed:48:ae:17:bb:b6:75:14:27:59:07:94:de:5a:68:
                    b4:8a:9b:6b:f7:ae:ae:06:86:c2:38:79:c1:18:9e:
                    13:90:e1:85:a1:0b:a6:0f:55:32:9b:66:ca:dc:c6:
                    b0:a2:80:d6:9c:0e:82:da:0a:aa:ed:69:73:76:82:
                    2a:bc:8e:5f:a6:07:bf:d5:a0:c7:26:55:b9:82:de:
                    64:87:03:9f:c7:2d:a1:ef:71:2f:d3:bc:66:00:96:
                    e3:e4:e2:ad:d9:e8:55:51:c3:ed:40:28:d6:2e:b4:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CB:51:2C:83:38:E4:1D:1D:2E:2E:E7:2C:FB:FC:58:D5:01:54:04
            X509v3 Authority Key Identifier:
                keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:15:eb:1a:e1:bd:10:c9:9e:fe:c6:4b:c3:76:c9:9e:e1:92:
         e9:97:58:c1:08:fe:c7:b1:da:e9:0c:19:fb:bd:81:43:73:38:
         6f:c2:b1:07:61:81:61:3a:7f:12:21:0f:9f:58:75:b9:0c:c7:
         01:13:45:de:a6:a0:2f:7d:f8:ff:2b:e4:de:3a:27:a8:9c:ac:
         a0:4f:ad:a0:ba:83:d7:fd:5b:a0:28:bd:67:0a:e1:5b:5e:da:
         67:50:a5:39:64:11:17:84:4f:69:d3:91:bc:02:79:a6:f3:57:
         de:e5:a0:50:c6:a6:5c:0c:e2:d6:18:97:6f:b3:9d:92:e0:7b:
         30:94:87:ef:f4:18:ca:50:75:a8:60:0e:5f:a0:5b:82:00:7e:
         32:2e:15:56:40:1e:58:e8:86:b7:74:4f:31:40:dc:64:61:73:
         73:55:01:63:0d:93:01:93:9f:78:e4:76:66:f9:b9:5c:6a:4c:
         0c:4e:a7:74:8b:a8:48:09:2c:19:ef:c4:c1:92:95:cc:7a:a4:
         fc:93:dd:a0:ce:1e:c5:6a:a0:be:db:bf:f1:ef:6a:98:21:f7:
         6f:25:fd:4f:7b:5f:70:b8:24:ab:04:b8:25:3e:ec:87:d2:48:
         6a:36:83:7e:8d:0a:4a:04:c9:a8:bb:7f:11:99:7b:45:71:29:
         31:37:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:13:59 2026 by rpki-client