Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
File:                     oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json)
Hash identifier:          UEykqLIXg5IYdPgqsvWkVXRl98sd0Vjlo/qXnMlzOf0=
Subject key identifier:   BA:F4:76:A2:60:FC:FE:CF:A0:F7:A3:02:05:F2:0B:36:24:1D:92:F7
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Certificate issuer:       /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
Manifest number:          CF
Signing time:             Sat 13 Jun 2026 06:51:11 +0000
Manifest this update:     Sat 13 Jun 2026 06:51:10 +0000
Manifest next update:     Sat 20 Jun 2026 06:51:10 +0000
Files and hashes:         1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: bgbsGt7uq0IogKAWUMTiGecw4VkVuf715IL8JD2Lr2w=)
                          2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: Q6hGObTtAZVZ1hsWC5VBV1zlub8rHOzpBaXMIZTV03s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
                          rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
        Validity
            Not Before: Jun 13 06:51:10 2026 GMT
            Not After : Jun 20 06:51:10 2026 GMT
        Subject: CN=6a2cfddf-2a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:cf:0e:0c:73:96:7c:d2:50:bb:66:00:f8:
                    dd:50:9b:71:81:9d:b8:85:17:73:31:7c:92:55:8c:
                    c5:9c:52:d5:67:11:2b:ec:83:2f:70:2c:4d:b5:61:
                    1b:cd:57:c7:76:64:6a:76:9b:34:45:59:bf:26:6c:
                    57:60:ad:bd:0a:15:54:a4:02:23:58:b0:9c:59:36:
                    d4:3c:d6:f5:6c:52:87:66:33:1e:d1:da:19:0a:b9:
                    7a:44:b2:46:9a:02:0c:86:4b:30:c5:9d:51:58:22:
                    cc:52:61:5e:c2:5e:11:1d:e6:f8:c1:07:6f:9a:d3:
                    bf:26:fd:ca:a5:9a:e1:52:5b:ea:c8:39:20:56:87:
                    33:01:29:38:9c:ca:83:7b:ca:a1:da:6c:94:b5:cf:
                    03:45:5b:66:5f:8a:89:56:f2:21:3d:41:02:fb:fe:
                    d6:d3:62:e9:a1:ce:3e:3b:96:00:10:9b:6d:ed:fe:
                    86:1b:8a:47:71:d0:43:3e:bc:41:6e:b0:2f:70:c5:
                    10:37:5d:87:18:fd:ca:a1:66:d4:fc:79:32:c4:2a:
                    36:0d:e0:bb:a0:51:8a:18:2c:7c:d8:02:78:f5:f8:
                    41:9a:84:f3:74:75:ba:a1:8c:7b:61:90:ff:ca:14:
                    b6:3d:90:51:0e:e5:f8:ad:98:13:70:bb:e8:10:bc:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:76:A2:60:FC:FE:CF:A0:F7:A3:02:05:F2:0B:36:24:1D:92:F7
            X509v3 Authority Key Identifier:
                keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2a:cf:41:7a:88:76:10:e8:0a:38:6e:8d:b4:da:43:72:c9:
         3f:b3:53:c8:b8:74:78:9e:82:46:e4:5d:a0:4b:8b:55:ba:fe:
         f9:f0:55:ee:39:d7:ca:8d:54:61:26:e9:c3:e6:cb:a5:2d:ed:
         48:a5:7e:9c:15:3e:4d:5f:3b:5b:1f:6d:f4:62:b6:06:91:7a:
         cf:77:8d:fc:08:17:bd:b8:2b:0e:4e:6d:ee:f0:81:85:4d:f0:
         18:cb:f9:be:f7:47:44:90:c7:d4:d2:60:db:24:ec:1c:d3:b3:
         96:8f:00:82:86:12:fc:8b:fc:f5:44:1b:8a:4d:92:da:81:18:
         e5:dd:c7:76:74:19:28:14:85:b7:fa:c2:ed:6f:07:24:6a:1a:
         ac:2b:37:70:62:5c:79:c0:10:52:07:17:c7:ba:c3:e7:62:97:
         bd:12:23:14:85:ee:70:b3:f9:b8:61:98:43:42:90:e9:53:58:
         56:f1:17:f2:fe:df:34:c0:90:9d:1d:42:97:ec:42:90:e8:b3:
         33:c8:b6:46:57:19:96:3d:c9:e6:b6:14:b5:87:a4:86:a2:e3:
         18:07:f4:a1:f0:44:b9:4a:2d:1a:35:68:0e:ce:83:7e:7b:25:
         b5:61:d3:4d:36:26:bf:97:19:c9:26:6c:3c:bf:a3:4e:1b:97:
         11:f2:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:28:02 2026 by rpki-client