Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
File:                     OgLv98yci6oS18hStv_Gn7BgmJs.mft (raw, json)
Hash identifier:          WE30BFxqT5KA7+USySL0w1fgODmxRPmKamMaYluv7YU=
Subject key identifier:   13:71:7D:20:89:BF:76:42:89:05:33:CD:C0:3E:59:BD:8A:E4:CE:B7
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       10FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
Manifest number:          10D2
Signing time:             Fri 12 Jun 2026 17:17:31 +0000
Manifest this update:     Fri 12 Jun 2026 17:17:30 +0000
Manifest next update:     Fri 19 Jun 2026 17:17:30 +0000
Files and hashes:         1: OgLv98yci6oS18hStv_Gn7BgmJs.crl (hash: 2izdQqiYjEXxO+vEQK7icZCs0AGpNJG/DQFYMf1KHsY=)
                          2: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (hash: L+cBg8DZ8MWiGD4ABrUtf99Xn9LyTrz132AQjeQ8FK8=)
                          3: B94D12C0F07F11EBAE5A5934C4F9AE02.roa (hash: +oZqqbSfF7y4PvnGsPCA1za/Eu6HGAUVAMjzcBgpEOY=)
                          4: 66425D7E2B1311EB89CBB164C4F9AE02.roa (hash: Ii/gO0OKf8bIzXuRcAmTcbAZrOkECJjXAFuEdJBjwE8=)
                          5: 3BD3D78AD17B11EF8626DB84C4F9AE02.roa (hash: gYUYL+Jd8BqYDcq6w9aABSq0jEzKxGSrRN4Kct2Vn7c=)
                          6: 9F08E8B2D28E11EB9F83683DC4F9AE02.roa (hash: kQR2rJRw7cibG4+VWuepJmVVMALBPz98kkD/QBlTqb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4350 (0x10fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: Jun 12 17:17:30 2026 GMT
            Not After : Jun 19 17:17:30 2026 GMT
        Subject: CN=6a2c3f2b-31f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:4b:98:ee:3e:28:75:fa:84:68:b4:31:be:
                    9b:a3:b9:81:04:0e:36:e1:38:7b:a0:87:4c:aa:3b:
                    e1:7d:47:f1:9d:9f:73:fd:6f:6a:63:c7:ff:0f:04:
                    64:30:0c:83:c2:73:f2:1a:c0:dc:53:e3:e0:57:70:
                    99:bc:9a:ab:7b:81:54:e4:f5:cb:c9:63:be:bd:8d:
                    cf:7f:43:91:4a:e9:52:3a:6c:ac:ed:ba:2c:e4:7c:
                    cf:4a:e9:75:c8:8d:49:6b:cd:31:11:b1:39:7b:c4:
                    87:be:e9:2e:65:68:74:0b:7b:ec:87:4b:56:ad:87:
                    bf:e2:25:8c:f0:e3:66:1f:94:86:a3:06:d8:a7:ba:
                    47:05:39:fd:90:64:4a:56:b2:4f:9f:e6:bb:4e:b8:
                    c5:fb:be:8d:a6:ef:f5:44:19:ce:56:10:fe:66:c0:
                    cc:4d:1e:56:73:97:0d:d0:60:61:e2:98:54:7e:bb:
                    db:82:fe:6d:6e:3e:9e:be:2a:9a:2f:28:ad:45:05:
                    cd:00:3d:9f:ec:2b:73:89:90:b0:5b:e0:86:11:92:
                    a0:00:c2:c3:85:eb:e3:8d:40:0b:3a:6f:d0:8b:4f:
                    55:52:96:f6:30:aa:e8:50:dd:c9:d6:23:ac:fc:02:
                    49:cc:fa:57:82:f5:40:b0:22:6b:37:94:86:0c:53:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:71:7D:20:89:BF:76:42:89:05:33:CD:C0:3E:59:BD:8A:E4:CE:B7
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ae:3f:97:ea:7b:58:2a:18:29:34:95:ff:8d:7b:08:28:c3:
         2b:06:ba:7b:cd:36:a4:2f:5a:7e:1b:5c:1f:f7:da:92:8f:3f:
         af:0d:f4:08:2e:ec:c2:92:bf:fe:3b:6a:fd:a7:7e:1e:fd:3f:
         17:37:a0:eb:38:e3:70:ec:4e:6a:b0:9c:03:92:e4:a6:47:fa:
         70:62:39:f9:e3:2b:72:2f:2d:6b:a3:c2:23:83:d3:c2:74:6d:
         ad:8a:ff:60:e6:9c:7a:7c:c1:53:c1:e1:b9:07:ee:f6:98:a0:
         8b:24:16:a2:cc:ec:33:86:e8:26:38:cd:ba:f4:98:69:db:b8:
         02:d1:af:f6:5d:3f:78:3b:4b:60:b6:f3:52:1d:77:e4:98:45:
         30:4a:e9:0d:f0:e5:f7:10:99:25:76:95:92:7f:8e:f5:d4:b7:
         dd:c5:42:17:76:9e:dc:8f:c5:26:5b:eb:db:cb:d1:fa:81:a3:
         96:32:7e:df:e0:eb:98:fd:17:35:f2:bc:af:70:a1:87:8d:02:
         0b:7b:39:dc:f8:83:35:af:42:c3:60:e6:e4:65:71:02:e7:ba:
         5c:24:2c:c2:d2:29:32:86:c1:39:82:19:de:85:9e:5f:e1:b9:
         20:f0:02:ab:6a:52:e0:e2:6f:7f:6d:1e:60:51:3d:60:6f:dd:
         f5:04:2b:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG
QjA2MDk4OUIwHhcNMjYwNjEyMTcxNzMwWhcNMjYwNjE5MTcxNzMwWjAYMRYwFAYD
VQQDEw02YTJjM2YyYi0zMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvJLmO4+KHX6hGi0Mb6bo7mBBA424Th7oIdMqjvhfUfxnZ9z/W9qY8f/DwRk
MAyDwnPyGsDcU+PgV3CZvJqre4FU5PXLyWO+vY3Pf0ORSulSOmys7bos5HzPSul1
yI1Ja80xEbE5e8SHvukuZWh0C3vsh0tWrYe/4iWM8ONmH5SGowbYp7pHBTn9kGRK
VrJPn+a7TrjF+76Npu/1RBnOVhD+ZsDMTR5Wc5cN0GBh4phUfrvbgv5tbj6eviqa
LyitRQXNAD2f7CtziZCwW+CGEZKgAMLDhevjjUALOm/Qi09VUpb2MKroUN3J1iOs
/AJJzPpXgvVAsCJrN5SGDFM7owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNxfSCJ
v3ZCiQUzzcA+Wb2K5M63MB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB
MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzc5OC85MDE3QjUwQTRBMjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2
b1MxOGhTdHZfR243QmdtSnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzK4/l+p7WCoYKTSV/417CCjDKwa6e802pC9afhtcH/fako8/rw30CC7swpK/
/jtq/ad+Hv0/Fzeg6zjjcOxOarCcA5Lkpkf6cGI5+eMrci8ta6PCI4PTwnRtrYr/
YOacenzBU8HhuQfu9pigiyQWoszsM4boJjjNuvSYadu4AtGv9l0/eDtLYLbzUh13
5JhFMErpDfDl9xCZJXaVkn+O9dS33cVCF3ae3I/FJlvr28vR+oGjljJ+3+DrmP0X
NfK8r3Chh40CC3s53PiDNa9Cw2Dm5GVxAue6XCQswtIpMobBOYIZ3oWeX+G5IPAC
q2pS4OJvf20eYFE9YG/d9QQrEQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:09 2026 by rpki-client