Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
File:                     oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json)
Hash identifier:          7xFkfYEo+/6Sd7Ak3Mi5lCAePMpSUpM67MoHBvePbXM=
Subject key identifier:   E7:5A:73:70:8B:67:48:51:1A:9D:73:E9:37:62:3C:FF:84:C1:3E:9F
Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73
Certificate issuer:       /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
Certificate serial:       0262
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
Manifest number:          025B
Signing time:             Sat 13 Jun 2026 02:17:22 +0000
Manifest this update:     Sat 13 Jun 2026 02:17:22 +0000
Manifest next update:     Sat 20 Jun 2026 02:17:22 +0000
Files and hashes:         1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: w8f10VIFbMGSKBZsEcEKaqAXbRNbNlcR0hhHgipQQ3c=)
                          2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: zHAD2aRjfS80FrmwnylIxolsBZEI+CFeAtlJuiT/1ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl
                          rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
        Validity
            Not Before: Jun 13 02:17:22 2026 GMT
            Not After : Jun 20 02:17:22 2026 GMT
        Subject: CN=6a2cbdb2-dace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:ff:fc:80:bd:3e:8f:e2:41:ba:45:a5:38:
                    bf:d9:a9:cb:7d:71:87:48:9f:0f:1a:88:ee:b1:ba:
                    b2:a8:34:a7:f5:6a:c3:79:79:ea:f2:d1:e7:dd:8e:
                    4d:5c:00:72:0a:56:42:a7:36:73:f2:0b:a7:5d:6e:
                    82:3f:69:75:4b:77:bd:c5:fb:af:5a:62:3e:ba:9d:
                    88:ef:6a:cd:cf:c7:ab:56:e5:45:1f:73:8b:f9:e5:
                    0e:30:cf:40:e8:bf:b4:a2:c7:7d:c2:6b:44:4e:d0:
                    33:25:fc:b2:56:9a:81:d9:e7:c4:63:20:a3:e7:1e:
                    e1:be:ae:8d:0e:b9:5c:6d:79:aa:ef:f8:1b:a6:80:
                    71:e5:e8:71:e4:33:7f:5d:1a:0a:9b:ab:c1:cb:5a:
                    e4:52:2c:f0:9f:ef:96:91:e4:b1:a2:03:59:f2:c1:
                    e6:ce:58:5f:4f:bd:74:ab:a4:55:b4:15:7f:c1:0d:
                    d1:bb:2d:45:81:d6:66:04:94:fd:66:3b:62:62:55:
                    d4:6d:6d:06:3d:37:3e:68:26:54:13:6f:c6:6c:af:
                    16:0d:58:cc:ee:9f:b2:60:32:4f:a1:c9:58:69:0e:
                    e4:e9:79:ae:40:95:d1:c6:8d:6c:4d:f4:5a:8c:42:
                    69:d8:95:75:40:1e:90:13:2e:8a:be:e6:d4:b3:f1:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5A:73:70:8B:67:48:51:1A:9D:73:E9:37:62:3C:FF:84:C1:3E:9F
            X509v3 Authority Key Identifier:
                keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:11:c6:98:b1:36:dc:ad:f7:7d:fb:cf:1d:6c:a8:ae:a2:d5:
         02:0d:1c:e6:dc:4a:90:38:a5:bd:6b:bd:d3:8d:a8:4b:6b:04:
         0b:a4:b9:fc:a8:5f:92:70:b8:ab:4a:69:16:5d:43:61:57:1f:
         bc:ed:c4:a2:54:80:15:81:75:51:64:05:51:89:7c:c9:a1:bb:
         df:e9:13:83:17:cc:63:70:1c:3b:02:b2:c2:d1:04:c8:19:c3:
         0e:ca:27:d0:ca:e3:4d:a1:3e:d2:fb:da:5b:cd:da:6b:46:5a:
         c9:b3:f2:99:60:d6:38:f4:2b:0f:10:86:a3:99:33:63:87:bc:
         06:a3:10:d1:b8:e9:3c:43:91:8b:8a:5e:c8:08:61:b7:32:4e:
         c1:41:9d:54:09:f3:57:0e:32:22:67:9a:20:8f:45:4e:49:58:
         62:51:ec:45:8b:86:8a:f9:6f:9e:a5:a5:b0:90:40:68:8f:5f:
         2d:3a:1a:8e:cb:52:fc:5d:8e:b0:06:70:85:d8:f2:24:64:9d:
         c9:9c:a6:95:37:aa:8a:93:79:15:28:1f:a8:02:e2:82:f8:84:
         52:d7:47:31:9b:86:9c:5c:20:26:92:4e:6d:c3:e2:57:81:2a:
         11:e1:7e:5f:60:f5:22:13:1b:38:dc:03:b7:22:df:f5:46:22:
         ec:f3:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:45 2026 by rpki-client