Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
File:                     oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json)
Hash identifier:          UeDcGLonuRxhe0tP4Fuhz2BqMFMmlHckQvgyXiLTJEk=
Subject key identifier:   3F:D1:81:84:25:64:8D:CA:A5:35:3C:6B:3E:F9:9E:62:C2:85:55:27
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Certificate issuer:       /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial:       0A9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
Manifest number:          0A8A
Signing time:             Fri 12 Jun 2026 19:37:21 +0000
Manifest this update:     Fri 12 Jun 2026 19:37:21 +0000
Manifest next update:     Fri 19 Jun 2026 19:37:21 +0000
Files and hashes:         1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: xigcYOmIh0MoGYuc3cYj0vcAvfa7PMaleQJo1TsplnQ=)
                          2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: +xcD+XJAzMs34Apsat7Enhn+9h/kEqw5O2ozBTodW3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
                          rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2718 (0xa9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
        Validity
            Not Before: Jun 12 19:37:21 2026 GMT
            Not After : Jun 19 19:37:21 2026 GMT
        Subject: CN=6a2c5ff1-45dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:46:59:bb:8a:d6:0a:98:3c:0c:d3:89:1a:
                    a0:fd:15:6f:32:7c:14:bc:38:99:87:ed:f3:70:78:
                    dc:88:a4:5e:f3:5d:c0:1f:ec:a0:78:c1:01:75:eb:
                    c5:30:9a:de:71:62:a0:df:07:11:4f:ce:7c:ed:61:
                    48:aa:b0:9f:b7:27:be:f3:e1:2b:0f:18:ea:62:bd:
                    7a:89:5e:da:13:c9:d2:59:5e:ad:51:12:10:03:71:
                    17:2f:80:32:1d:65:04:ef:c2:dc:5b:54:c5:21:42:
                    40:aa:23:8d:52:9c:95:90:d4:30:6c:ca:8d:76:e5:
                    08:6b:a2:48:6a:1c:a9:c9:ea:f9:92:c5:b9:ae:c7:
                    8d:61:47:18:72:a5:1c:9b:61:62:2c:25:8b:79:a1:
                    78:fe:88:d1:51:8f:9f:63:0c:a9:e3:9c:f9:1f:98:
                    80:a6:33:a3:26:e7:2e:b1:6a:0f:52:18:fe:d6:e6:
                    3c:b7:52:11:bb:91:f7:17:9e:8a:74:ef:db:5b:17:
                    97:f5:44:d1:a9:07:4b:de:85:c4:83:90:64:32:e1:
                    c1:b3:26:bf:d6:d8:05:e5:61:71:fd:78:2c:2d:5c:
                    b7:d4:82:94:b5:a2:12:34:2f:20:7e:35:61:53:06:
                    7b:1f:d7:e9:58:32:2b:f4:73:3a:b5:c6:b1:a8:b5:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D1:81:84:25:64:8D:CA:A5:35:3C:6B:3E:F9:9E:62:C2:85:55:27
            X509v3 Authority Key Identifier:
                keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:92:1f:8b:3c:db:ae:e5:23:27:dd:a6:5a:48:b0:8e:d6:
         0c:72:a5:26:ab:d3:ce:2c:95:d4:b0:e8:56:30:bc:d3:30:7f:
         4a:a2:82:27:b1:d7:e5:6c:23:65:50:ed:69:ac:94:a6:e2:6d:
         ef:c0:48:04:d9:f8:d4:04:fa:2b:77:1c:42:76:0d:21:ae:b6:
         d5:59:ef:ce:c1:c4:4c:d8:f4:38:03:a6:af:8f:7c:e4:36:55:
         c2:a8:1c:29:56:d7:33:c4:8f:36:f3:e5:1b:80:3e:bc:b3:14:
         03:08:45:db:c3:76:54:ad:03:84:b0:1c:c6:2b:e4:4e:74:41:
         d8:9a:bd:eb:e1:18:06:df:e0:26:9f:c7:95:aa:69:75:89:b2:
         f6:c6:07:59:91:ea:1b:7f:cb:e2:3c:4e:e3:be:b2:47:e4:e7:
         b0:42:f8:23:de:01:e6:51:a3:09:ef:71:26:74:8e:e1:f7:71:
         6e:ef:a1:6d:1c:e9:f6:2f:a9:b6:4e:0c:d4:e6:ff:07:32:12:
         fc:28:a5:4f:3f:78:6c:58:d0:f6:1e:5e:7b:58:73:1a:0e:fe:
         47:cf:12:34:cf:c7:f6:c5:dd:63:76:6e:b5:2f:59:5c:94:0f:
         4d:05:fb:4a:8b:d6:61:b6:84:19:21:b5:b1:a2:4c:46:3a:1a:
         29:37:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:56:03 2026 by rpki-client