Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File:                     mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier:          rN/5TZiqVbeY4nDJCkZlxwZR9M3vtJPr3CEn19WW92E=
Subject key identifier:   CF:F7:BC:41:2F:FB:9D:B8:9C:8D:42:AE:42:2E:25:33:44:6C:B0:6D
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer:       /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial:       0825
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number:          0817
Signing time:             Fri 12 Jun 2026 21:14:54 +0000
Manifest this update:     Fri 12 Jun 2026 21:14:53 +0000
Manifest next update:     Fri 19 Jun 2026 21:14:53 +0000
Files and hashes:         1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: v33XPBZAqLsBEKGh3n7wrUA2KxSdk07+IdMvRpal5kg=)
                          2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: SEGLZJRsG8d/oF/uE/MLRtBE/snz3gSEd4tQtKL1yRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
        Validity
            Not Before: Jun 12 21:14:53 2026 GMT
            Not After : Jun 19 21:14:53 2026 GMT
        Subject: CN=6a2c76cd-67fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cd:12:cb:b9:49:59:71:dc:68:9d:f0:74:63:
                    da:6b:47:fd:ca:97:04:1e:cf:d6:c8:c1:98:73:f3:
                    94:e6:6b:ad:8b:9e:af:21:62:08:df:6e:46:83:cc:
                    41:77:ab:01:de:34:60:95:bb:e1:f3:10:02:2c:1f:
                    a7:61:47:92:15:6f:32:2c:2c:f7:e1:8e:d0:57:b9:
                    e4:d3:90:72:8a:be:5e:22:e7:59:72:87:f1:96:89:
                    9a:27:d7:0a:98:29:8e:ca:26:2f:6e:ac:09:dd:8f:
                    56:5b:de:8b:39:88:11:54:87:91:5e:b6:10:f6:6e:
                    af:f5:ae:b9:e2:bf:8a:f9:19:1c:ff:89:5d:27:c8:
                    87:5e:e2:53:e3:fb:3b:c9:0a:ae:d7:8f:50:6c:e1:
                    b6:f6:ae:20:12:48:0f:e4:78:d3:cc:76:7f:ac:ee:
                    5d:c8:f7:75:07:43:fc:f8:9d:d1:70:c9:18:52:5a:
                    0e:72:98:c2:8b:9d:42:a1:76:f4:5f:98:e9:bd:87:
                    27:ec:d0:9d:f9:3c:1a:c5:40:70:db:a1:81:13:9e:
                    88:73:77:7f:7c:d3:41:35:3e:91:94:00:d0:c4:62:
                    31:f9:b9:ed:5c:ed:2c:d0:d5:a9:98:4b:fa:ba:bc:
                    5e:63:66:54:66:3e:01:78:d6:4c:76:33:90:fc:6d:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F7:BC:41:2F:FB:9D:B8:9C:8D:42:AE:42:2E:25:33:44:6C:B0:6D
            X509v3 Authority Key Identifier:
                keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4d:c9:c1:84:96:99:0a:a8:74:a7:82:e9:a3:1b:54:b7:10:
         6f:5e:cd:6e:b7:93:36:c9:62:e6:78:2c:7d:5f:ee:5b:21:fd:
         0d:25:19:1f:f7:eb:2d:2e:76:e8:2c:c5:4a:22:2c:e3:c6:eb:
         b7:88:05:54:e4:00:d4:7f:71:fb:1d:38:92:66:56:d3:8e:58:
         5b:1b:52:4d:01:c1:50:a7:c0:73:01:dc:7f:41:a6:c5:93:60:
         bb:19:0a:49:b3:86:3b:fa:20:71:75:4d:58:6f:6a:f2:8e:dc:
         9e:a0:fe:a9:93:2d:4e:a1:7b:f0:14:c8:44:93:9b:b5:a0:a9:
         27:52:87:98:de:ba:27:7d:d0:9c:71:9a:b2:62:5c:be:9a:4a:
         30:61:0e:cb:44:46:89:49:e7:12:0d:2c:fb:97:ff:75:c3:41:
         67:3d:36:9c:0c:a3:d3:fa:5f:2f:d6:1d:d3:cf:22:af:53:a3:
         89:95:82:a2:e8:1a:0f:57:5e:da:58:ba:0e:ab:c6:9b:21:eb:
         19:ef:87:9b:70:06:e0:eb:13:0a:51:99:16:01:d6:3b:50:90:
         86:3a:bd:ed:42:2b:80:f4:83:3d:dc:60:67:1e:a0:9a:c6:32:
         2d:66:64:00:59:a5:d6:4c:ad:af:98:71:df:12:eb:84:5b:25:
         31:9f:99:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:06 2026 by rpki-client