Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
File:                     OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json)
Hash identifier:          CfE92VB9XYsQtvp3QormXt+0FzJMlwGff1u8LGBkY2k=
Subject key identifier:   91:8D:61:B6:3B:7D:84:F7:95:64:4A:03:2D:B8:38:72:F6:25:8C:99
Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
Certificate issuer:       /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Certificate serial:       13E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
Manifest number:          255F
Signing time:             Fri 12 Jun 2026 16:53:37 +0000
Manifest this update:     Fri 12 Jun 2026 16:53:36 +0000
Manifest next update:     Fri 19 Jun 2026 16:53:36 +0000
Files and hashes:         1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: Cp7JJ9oHg75iPggkylNGW3ny6cFFy3Ur9SOKHDWHlQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
                          rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5091 (0x13e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
        Validity
            Not Before: Jun 12 16:53:36 2026 GMT
            Not After : Jun 19 16:53:36 2026 GMT
        Subject: CN=6a2c3991-4072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:51:d4:8a:f9:34:cc:8f:e4:d7:b7:50:e3:
                    7c:3f:bd:d6:2b:63:c3:d2:b7:45:32:8f:92:4e:c4:
                    67:c0:b4:dc:28:20:3a:ba:6b:07:a2:4d:d7:ac:f9:
                    4a:b7:64:ad:2a:d8:f6:79:1d:c2:d5:7b:97:c2:6e:
                    da:41:81:4e:11:72:17:6c:af:cf:99:4a:02:7c:dd:
                    91:2e:36:24:e7:b4:59:91:fd:c0:84:c4:d6:6a:25:
                    6d:a1:9e:75:5f:ac:18:d5:4d:41:03:68:1e:af:29:
                    b7:12:30:01:65:07:0d:e1:20:a2:7d:dc:c2:d5:68:
                    de:f2:bb:b3:1f:91:49:20:68:d4:dd:5a:e3:7f:9c:
                    8d:57:c7:a6:94:37:92:0d:69:4e:e0:7f:05:4f:c1:
                    b7:ff:ed:32:51:ad:31:78:df:f2:b5:a3:f8:52:36:
                    48:bf:45:9a:53:00:b7:79:98:df:ba:50:76:da:c7:
                    1c:b0:c8:16:ef:5a:7f:ed:b8:4c:a7:54:cb:c5:5e:
                    67:52:10:fc:c9:8e:44:91:b7:fc:a3:4a:c6:6d:01:
                    f1:aa:5f:2a:a4:24:56:27:23:3c:c2:c3:6e:d8:73:
                    2b:cb:05:2f:16:02:0d:bc:67:61:3e:f7:97:61:b2:
                    ac:13:ab:80:e6:7f:14:fd:6e:a2:db:f5:cd:25:28:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8D:61:B6:3B:7D:84:F7:95:64:4A:03:2D:B8:38:72:F6:25:8C:99
            X509v3 Authority Key Identifier:
                keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:39:a0:28:98:43:bb:65:4d:e9:5a:98:8d:5b:14:d8:4a:64:
         80:b9:4c:8c:63:10:e4:9a:ca:5f:fe:24:98:9e:55:b4:79:0f:
         c7:49:1e:5b:43:c6:02:64:40:66:c5:9b:ca:2a:95:ad:7b:0d:
         35:49:26:b6:fd:f5:59:3b:d5:75:1d:da:59:8e:18:1d:4b:4f:
         03:82:c3:cd:93:6e:77:bc:7a:86:54:72:b8:ee:da:c7:26:ff:
         fb:e0:6f:de:1c:aa:c6:52:5a:6a:30:26:04:b9:af:e6:ff:1f:
         af:c3:b6:d1:ea:09:c8:e9:36:4d:ee:4a:d8:eb:17:bb:87:b4:
         c4:46:bc:3a:33:39:cc:15:2e:52:e9:6d:dc:32:f8:04:67:9e:
         9c:d0:83:43:b4:9f:da:1f:78:2d:c9:57:93:c5:26:de:02:a3:
         35:ae:4d:8c:d0:a8:78:ea:e1:71:16:72:c8:92:f1:2d:00:08:
         92:b6:ae:7d:b4:a5:a9:2d:7c:60:eb:1a:50:f9:c7:47:6b:29:
         de:9a:47:e5:fb:54:7d:0a:96:84:fb:00:48:f0:2a:9b:59:b7:
         7e:7a:1a:ae:c4:8f:2c:71:65:2c:ca:da:16:e4:0e:0c:d2:57:
         84:2e:b9:40:ac:d4:8b:48:3e:81:08:62:d0:85:d0:af:e6:1d:
         fd:18:94:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:25 2026 by rpki-client