Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File:                     OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier:          0XFi7S1mZ3v0aZZpkT55Wv+PdYd28FaCgIfkGTlsHJw=
Subject key identifier:   16:E8:75:24:15:88:1F:31:84:28:A4:CD:18:4D:10:96:69:A6:96:54
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer:       /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number:          0199
Signing time:             Sat 13 Jun 2026 02:23:06 +0000
Manifest this update:     Sat 13 Jun 2026 02:23:06 +0000
Manifest next update:     Sat 20 Jun 2026 02:23:06 +0000
Files and hashes:         1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: ZHk6tfqQFddJQNCIFsxshT17MYlmBxjaBDm6jWDAFeQ=)
                          2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: +DCvPGD1gJzVRYp0NyLyo9qI/LocUFsJLWMxD2e8AY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
        Validity
            Not Before: Jun 13 02:23:06 2026 GMT
            Not After : Jun 20 02:23:06 2026 GMT
        Subject: CN=6a2cbf0a-70c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:5f:fb:56:36:80:b0:21:ce:ef:d3:58:6e:
                    7f:68:1d:e3:44:3b:63:24:25:02:70:43:96:71:08:
                    00:2c:27:56:44:9f:3a:ff:d2:58:e7:16:c9:38:09:
                    ec:c6:71:d3:08:10:ea:e6:6b:b0:91:96:ad:57:48:
                    56:74:60:1e:87:98:28:81:4a:c8:e2:5a:56:7a:37:
                    9f:1c:3f:7c:68:61:bf:cb:0e:f1:67:66:d5:23:04:
                    25:6a:c8:aa:75:09:19:c8:e5:a1:fe:a8:01:eb:e9:
                    b2:fd:02:bf:17:77:c0:f8:f7:0d:1d:f9:74:dc:7a:
                    49:cc:51:d9:3a:4f:45:2e:69:b3:6c:0d:3a:e4:41:
                    ad:c3:83:ef:ec:fe:71:fc:96:f5:c3:98:0b:29:be:
                    20:08:5e:78:09:65:4f:1b:b7:64:3a:3e:28:e6:95:
                    31:0a:7e:b0:de:4a:54:86:c2:61:a9:c2:63:a3:e7:
                    d4:e4:e0:3b:73:57:0e:bf:18:1a:63:73:db:9b:2a:
                    53:05:f9:9a:1a:3b:97:50:5b:a0:f8:75:e1:bc:7c:
                    3a:68:aa:4e:b6:d7:4e:e2:7e:68:9e:71:a1:f3:89:
                    6c:cf:9d:3c:f0:d6:92:b0:1f:5d:ef:ff:89:e7:fd:
                    fd:9e:95:50:14:57:19:b5:2a:d6:09:26:fc:88:df:
                    b4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E8:75:24:15:88:1F:31:84:28:A4:CD:18:4D:10:96:69:A6:96:54
            X509v3 Authority Key Identifier:
                keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4e:57:a7:18:cc:10:e8:f6:ec:f7:26:a4:07:04:d5:d6:02:
         a2:aa:bc:bc:d5:ed:d4:21:1d:22:b9:be:7b:52:79:76:40:47:
         28:08:58:b4:af:f2:87:19:67:c1:a5:b1:6e:06:b3:25:90:7e:
         55:2e:01:df:75:e4:70:46:f5:7e:e8:d8:cd:26:42:88:f0:2b:
         63:11:34:bb:cc:40:82:a7:f9:71:43:f4:f4:2c:68:dc:ac:55:
         dd:03:21:fd:76:fc:41:87:d4:37:b6:4f:aa:7b:9c:7a:38:57:
         5c:d1:b0:68:d1:06:4d:75:11:e5:81:79:3e:3e:3c:34:00:ba:
         bb:63:01:3d:91:9a:8a:55:28:00:d6:47:20:a7:83:22:70:bd:
         0b:2d:df:08:8f:04:91:b6:12:31:c3:ce:b3:92:92:38:57:d1:
         13:f7:e4:eb:34:61:fc:0f:51:51:1a:4b:49:48:ce:c2:87:a0:
         5e:8d:e6:b9:68:07:6e:cb:1e:30:68:33:85:92:40:c5:46:c8:
         59:ca:40:a2:38:e9:0a:52:0c:ff:a9:03:4f:8f:f1:44:b6:f7:
         2e:6d:ee:1a:7b:12:92:ad:92:34:f5:d1:85:ff:d8:3e:72:64:
         64:1d:39:3e:8f:44:d3:ec:dd:0d:9a:1f:69:e4:76:12:3c:1b:
         3e:6c:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:16:31 2026 by rpki-client