Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
File:                     OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json)
Hash identifier:          +VsPNmmCoQwtIJ1KKvZmISBacbtXW/Y4xGDXKpZIjdo=
Subject key identifier:   B7:58:8B:05:EF:DB:39:8D:2F:D5:C1:82:98:37:5F:EF:B9:42:3E:F2
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Certificate issuer:       /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial:       02B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
Manifest number:          02A5
Signing time:             Sat 13 Jun 2026 01:41:25 +0000
Manifest this update:     Sat 13 Jun 2026 01:41:25 +0000
Manifest next update:     Sat 20 Jun 2026 01:41:25 +0000
Files and hashes:         1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: Qt00AHVSVWqCR8wyEyRoUAQ0+lm+5oej5IXDHzRFSzY=)
                          2: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: wHMAYibew+x1AYfuE7BluYMkxk01iW8RsGQGMAVOxuw=)
                          3: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: 99MSdD0Bt5MeBMSX17ngnXwJ7ZzUJ4PBVC3nYuIVduQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
        Validity
            Not Before: Jun 13 01:41:25 2026 GMT
            Not After : Jun 20 01:41:25 2026 GMT
        Subject: CN=6a2cb545-a616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:20:d8:23:24:37:0f:77:d6:f8:45:05:11:
                    4b:c9:78:da:22:ad:96:99:e5:34:d2:9f:86:71:e4:
                    d4:db:c5:25:3f:ed:2f:01:40:88:fb:b0:af:ff:c0:
                    c3:89:62:5e:ff:20:70:e8:6c:46:e7:8d:b8:24:fe:
                    62:8e:fd:73:73:1c:49:e6:c1:f9:d4:8e:94:ad:16:
                    95:cb:45:3c:fe:f3:8b:ff:94:ec:de:1a:83:49:be:
                    98:14:5a:c8:00:00:67:5f:fe:bf:ea:c0:ab:f1:21:
                    5d:66:f6:95:96:51:ab:df:40:d6:94:61:23:ed:02:
                    49:cd:2d:0e:10:9b:0c:c8:17:75:d0:22:fd:77:cb:
                    a8:b8:88:2f:46:af:74:2e:b8:3d:df:01:35:25:dc:
                    5a:36:60:be:e2:58:0d:eb:79:8a:d4:45:7a:38:fa:
                    a5:6e:0a:e4:e4:4c:df:d6:66:cd:66:79:1d:07:63:
                    68:3e:b5:d5:f5:08:cb:f4:11:ec:86:cf:b5:3f:6e:
                    d3:54:32:29:74:1b:c4:19:42:24:9f:60:2c:b2:51:
                    e6:88:e4:9f:eb:b5:20:05:9a:95:c5:59:30:5b:65:
                    d9:f1:3e:7d:8b:ca:3a:7f:ec:16:2c:3a:ca:4d:8a:
                    fe:6f:46:eb:9f:05:13:42:d7:c6:91:66:ef:75:49:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:58:8B:05:EF:DB:39:8D:2F:D5:C1:82:98:37:5F:EF:B9:42:3E:F2
            X509v3 Authority Key Identifier:
                keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:91:0b:ae:bf:7b:0e:ff:a5:00:6a:97:51:75:c1:cc:39:52:
         e2:fa:0d:b4:bb:1e:82:1f:49:f2:93:05:69:16:53:1b:da:d5:
         79:f3:ce:0f:ac:79:1a:59:5b:2f:b7:14:0c:04:02:ca:bb:bb:
         9f:af:ee:4a:1c:dc:b2:e0:a7:a4:42:98:59:8d:48:db:8e:90:
         8e:9f:ab:bf:c7:83:59:d0:25:97:2e:52:f8:d2:8f:49:06:0c:
         45:e9:ed:de:be:07:f7:f7:5a:b6:ae:32:4f:d2:45:18:b8:f5:
         0b:0f:53:0b:dc:81:98:f7:d9:b7:b2:7f:58:ba:d2:bb:0d:36:
         64:7a:66:60:83:ad:f0:59:c3:d0:66:67:de:d0:84:ed:54:12:
         66:bd:a6:b7:8e:39:00:1b:9b:6d:66:88:d2:d0:e7:86:f9:bc:
         47:72:e7:5e:5d:86:77:92:b7:e5:c1:82:e3:ce:d3:44:9f:6e:
         ab:e3:e4:18:79:43:77:8e:21:50:97:ad:98:7a:4b:c4:2a:34:
         65:4b:46:fb:6b:17:57:2b:88:6d:f0:5a:f6:14:93:3e:3d:b3:
         21:3f:cb:cc:9a:a0:b9:3e:02:de:01:1b:71:e2:b2:4c:02:e6:
         fc:94:ab:3f:99:c1:ba:d9:e6:55:0a:a5:52:7a:25:53:09:a2:
         08:3d:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:57:03 2026 by rpki-client