Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          a5l+40AaCM7WOaNkpDafrd+70W0Ia4iQDRm18p7iuws=
Subject key identifier:   DF:FF:CB:8D:F8:64:BA:9B:96:75:E7:E6:EE:7C:FC:A1:F8:BE:E7:BD
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1096
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0D97
Signing time:             Fri 12 Jun 2026 19:40:40 +0000
Manifest this update:     Fri 12 Jun 2026 19:40:40 +0000
Manifest next update:     Fri 19 Jun 2026 19:40:40 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: BbwH2NDKrNOwrOjnIuetyHfi9Ed7hZ4B1NdWJvPIlNE=)
                          2: 6D2E74CE119511F18720E261383D8C67.roa (hash: ohbtR0bU4Nw5MTZqq0EScoDeeVXif9T0EFY44v6uECc=)
                          3: 4CE25F844D5211F1B621E394CB833773.roa (hash: qg8/Ls1Uj1/gpLrqzBq1E3uEwVmukE98NL+Us2r+7rk=)
                          4: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: HfE1oxJBV9/OZ3j2t8tmYR1MylA9yl/mZSo2he5GbKo=)
                          5: 65020FA2288011F1BBF58DB5A8833773.roa (hash: ZSdTfWuzS86WLzpkvNdiXv34xqzKQg41A9OfgH776Xc=)
                          6: 4C692978419711F1B231ABB69F833773.roa (hash: j6EC0scEQGwbeez5XUvQrEX6Zct0WAzh456SxbrLHgU=)
                          7: 0F2483DA43C411F19EF40EF49E833773.roa (hash: v1WOhEhUKOCQ3XK7nF8XmWsAvTu3F/dSZv3FoVz4rO0=)
                          8: 849E45A839B811F1B2456B00AE833773.roa (hash: WrHoimy7W3Kh4V/ViVWvGFPYBxuHZRvygLPr6i6VQGA=)
                          9: BE73AF6E4F9A11F1A2D5B2D798833773.roa (hash: lo2u0+WfK+UWYKhemyyCgZa5VVMMfS2jANMqUG3ECZA=)
                          10: F94772A2127711F18BE24F01353D8C67.roa (hash: Ia2OY00mHGLN5kewmPdoukAdUzDfyI0EliOAKlUSYq8=)
                          11: 9C1227FE164511F1992ACCC2403D8C67.roa (hash: B5QpT3KOJZjxftF1mEkAc77f38gbyfCcpBtAmGDEp3Q=)
                          12: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: z0LgFHba0FwF6fQrrQACVyXZeL4NTZdHGfqQ2uiux64=)
                          13: 903D70A063FC11F184F46F1B9447A888.roa (hash: XYmrvWKbqLEHYnHdgBd1ktZ3RAQLXz5YA69DgaTwCtQ=)
                          14: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: 0YoPMQw7ZQ5kCQUd3F7ZIgdfuVPe710u9EKW9PtZo3w=)
                          15: 07AFB46A568111F1BFDD8E7BA2833773.roa (hash: ZvJ5fhIY6CfeJohE5TY8AgeuE4gKHOwKdm8RhUQsacA=)
                          16: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: 24u4HBCO1KtwHfOL7e2RjvlMPalnF3UcOXpG6jE4G34=)
                          17: 1032DBDC43C411F19EF40EF49E833773.roa (hash: TLYnbVCtKL9+DW+fSfcwbZQtNwrqRS1EtGPCUYnEE+c=)
                          18: F85564DA127711F18BE24F01353D8C67.roa (hash: xLEMW1WeRTdeL1parZjm1o3kSVKBhcygphTEuPzcr9E=)
                          19: D9419C8A39B911F1AC578A42AE833773.roa (hash: CQR0r3hWakLl2KylnUXh460lZ2C7wKllS8T4GMraHQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4246 (0x1096)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Jun 12 19:40:40 2026 GMT
            Not After : Jun 19 19:40:40 2026 GMT
        Subject: CN=6a2c60b8-aefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:bc:c2:6a:81:b4:25:b2:c6:ca:97:a7:b8:
                    88:b2:f9:bc:3c:2e:d5:a0:f3:ac:63:99:33:99:fd:
                    f4:3d:47:c5:b2:a7:67:d6:6b:3c:91:f2:dc:e1:89:
                    15:7a:d0:a7:a5:5a:a8:53:49:f6:69:fb:ed:3f:d6:
                    b8:6f:02:9e:fe:70:35:5e:e4:ee:27:b2:fd:10:61:
                    75:54:17:34:12:85:28:39:a3:c8:bc:12:0d:2b:f2:
                    f2:89:f7:83:b1:82:1b:89:0c:5e:5b:97:0d:ba:59:
                    b1:63:2a:84:e4:be:4c:99:2a:40:54:97:bf:2c:82:
                    66:c4:23:e3:c2:1f:e3:d5:0a:4a:53:4d:aa:67:26:
                    87:9c:e2:cb:8f:81:13:8f:76:63:06:1b:9c:e5:b7:
                    96:ad:4f:5c:d2:a3:23:21:62:f5:e8:7f:21:8c:0b:
                    16:b1:9d:16:d3:70:d9:57:50:8a:4f:8b:7b:78:75:
                    2a:c5:66:0c:0a:27:73:34:b7:86:db:a3:35:8d:c4:
                    f5:ea:f7:d5:f3:51:bb:eb:df:eb:db:fa:e2:cc:a4:
                    09:53:8a:e0:50:1a:87:72:2a:23:2c:fc:ba:34:60:
                    9c:7e:95:59:86:2f:8e:d6:a0:e0:1d:43:7f:2d:db:
                    f3:53:ea:46:33:49:44:bd:39:3a:2f:a4:3b:6f:7f:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FF:CB:8D:F8:64:BA:9B:96:75:E7:E6:EE:7C:FC:A1:F8:BE:E7:BD
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:39:b4:9f:d6:fb:f7:86:a9:00:2d:62:67:a2:86:4c:e7:6a:
         0b:d7:36:57:17:d9:b9:24:fe:0f:bd:08:ee:f6:7a:df:eb:ab:
         da:c6:21:3f:17:f8:ba:f6:97:57:56:11:a4:91:da:d7:7c:0e:
         f7:0b:0a:49:2d:fb:27:e2:90:d9:f4:dc:01:4a:cb:d2:ca:0b:
         3d:5d:4a:05:d3:6d:62:dc:da:a6:0e:a9:3c:00:d5:88:09:b6:
         88:15:6e:9a:29:04:44:20:b6:c2:e8:2a:0b:eb:c5:45:1d:f6:
         d1:01:4c:f8:bb:05:f7:e0:e9:63:71:4b:21:88:c6:85:69:19:
         da:54:63:b3:e3:3e:71:e5:c2:e5:a1:98:d0:5e:92:61:d2:c0:
         ea:64:da:e8:13:a1:84:80:df:23:bd:c6:d9:23:ec:d8:52:bb:
         d9:c6:73:94:86:5c:d8:80:90:3a:93:8e:84:34:41:77:fd:62:
         3b:a6:d6:25:7a:f9:5b:6c:00:52:c7:7e:b1:b6:8a:4f:33:02:
         b3:49:bf:10:30:3a:cc:97:10:cc:75:a6:78:e6:43:52:b8:3f:
         c1:ec:ab:7a:38:71:71:81:0a:6f:6a:74:a5:fd:4c:4d:55:73:
         eb:b7:2b:23:ec:0c:95:e8:6f:ba:8d:eb:0b:b1:77:ac:bf:eb:
         d2:c6:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:23 2026 by rpki-client