Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
File:                     OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json)
Hash identifier:          2RdP9Pgl92CNzpHCmm/RGWm0kKPKFMcm3PcyxvQA4FE=
Subject key identifier:   85:D5:AF:AC:3A:D3:5A:9E:6C:20:13:6B:B0:8D:7D:1A:53:C1:B9:79
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Certificate issuer:       /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial:       26E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
Manifest number:          26D3
Signing time:             Fri 12 Jun 2026 15:38:50 +0000
Manifest this update:     Fri 12 Jun 2026 15:38:50 +0000
Manifest next update:     Fri 19 Jun 2026 15:38:50 +0000
Files and hashes:         1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: RI1gurKL/wYwsBm2u9qnrq3ambQBNfDC7c97QqWZvVU=)
                          2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: zCSyGsYCYzFeYmRqymAlfv0PUooJcKVA3RkycjZyUFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
                          rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9959 (0x26e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
        Validity
            Not Before: Jun 12 15:38:50 2026 GMT
            Not After : Jun 19 15:38:50 2026 GMT
        Subject: CN=6a2c280a-b275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:5d:d5:54:20:49:bd:1f:b9:b0:18:f9:fb:
                    b2:1b:65:77:b9:f3:58:b7:21:98:ef:60:27:38:41:
                    04:66:45:ae:31:07:50:79:55:68:4b:08:dd:76:13:
                    f8:43:c4:4d:fd:36:e8:3c:59:cc:f7:6e:a1:ae:65:
                    5a:86:6e:5f:d1:0c:25:9a:0f:b3:5f:6b:ac:ac:2d:
                    4e:2b:46:72:e3:36:f1:03:7f:d7:18:3e:e8:c4:fe:
                    14:6c:85:14:58:8d:04:42:e4:06:b8:04:5f:42:c5:
                    28:9e:4a:ab:97:03:5c:f6:b4:b9:91:c3:a8:24:4e:
                    de:9c:f4:dd:ec:64:29:e2:c2:21:97:a8:47:06:51:
                    b1:25:f2:f4:94:a8:2d:97:64:2e:36:f5:a0:02:3a:
                    60:a0:f1:34:71:90:d6:0a:5d:33:18:8e:fc:f9:29:
                    5f:b6:97:ad:e6:1e:8d:91:d7:db:e9:d6:c6:f4:80:
                    df:6e:07:30:f8:75:48:5b:5f:a5:93:67:a9:01:d3:
                    22:d9:88:74:46:75:70:11:e5:fa:5a:fd:5a:b8:5c:
                    6d:0b:f2:10:28:fe:ca:8a:09:97:e7:ad:2f:03:8b:
                    a3:6f:ca:bb:90:bd:2e:6d:5b:46:9a:66:59:de:2d:
                    f8:16:d2:c3:19:fd:6e:41:13:25:d6:67:18:28:de:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D5:AF:AC:3A:D3:5A:9E:6C:20:13:6B:B0:8D:7D:1A:53:C1:B9:79
            X509v3 Authority Key Identifier:
                keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a7:8c:70:02:9a:72:1f:34:7b:a5:5a:0b:f8:39:c2:e4:19:
         79:5e:64:bf:da:c9:91:ab:74:0e:c5:03:e1:d1:15:13:7b:99:
         6b:41:de:4b:50:ef:d7:2f:fe:d0:25:99:23:d2:65:25:a3:fe:
         33:c6:8d:74:af:2e:bf:73:76:80:06:e3:fc:84:65:5f:b6:0a:
         76:a7:37:a7:fd:55:37:8a:5f:e9:bf:91:a6:f7:b4:f9:24:a3:
         cc:d8:b9:85:b0:dc:b9:b0:69:8b:fc:3a:00:16:d5:c3:b0:c7:
         56:e7:74:ac:5b:1f:ca:33:3f:c2:c0:ec:33:37:3d:8b:e6:8c:
         89:aa:3c:49:57:12:6f:53:7d:38:d5:fb:e6:82:31:8b:f2:b2:
         65:3c:7f:57:f2:5b:c7:6c:f6:30:84:18:3e:9e:3f:ee:a6:7e:
         96:b9:39:e7:83:bc:d3:98:2b:30:45:de:1a:11:ce:1f:77:13:
         be:36:38:10:3e:74:3b:a1:6d:c8:e9:63:2c:eb:a0:ed:da:ac:
         94:4e:d0:02:49:ab:c7:2a:4f:a1:c1:2b:3c:bd:b0:c1:c8:a8:
         5a:5a:86:76:c8:d0:c4:af:7a:99:c5:d8:0a:bb:c8:98:ac:42:
         d7:ce:7d:39:27:e2:7b:34:99:9a:85:c2:be:a9:e8:cb:4e:12:
         e1:22:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:51 2026 by rpki-client