Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
File:                     OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json)
Hash identifier:          SeNOLpAj+fKrhtpJlTFGquVFDXXlq1ZoivnXWIR+OMo=
Subject key identifier:   BC:C6:FB:35:15:A9:9E:1E:A0:E7:74:34:98:5C:27:87:9B:FC:2B:CB
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Certificate issuer:       /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
Manifest number:          01DC
Signing time:             Sat 13 Jun 2026 03:34:51 +0000
Manifest this update:     Sat 13 Jun 2026 03:34:51 +0000
Manifest next update:     Sat 20 Jun 2026 03:34:51 +0000
Files and hashes:         1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: cw/hHf0V20vH1RhWSnvejBETq2MRPg8t60onQMMD1KU=)
                          2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: 8EuCC6GeDURLjyKUH1rweshuZkTUvieZrlzCd35Hwu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
                          rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
        Validity
            Not Before: Jun 13 03:34:51 2026 GMT
            Not After : Jun 20 03:34:51 2026 GMT
        Subject: CN=6a2ccfdb-cbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:da:e3:cd:cc:c9:ee:7b:5f:7c:f3:0f:1c:
                    e7:15:00:b4:c1:d0:69:36:0c:a6:9c:15:db:d3:2f:
                    a3:86:f6:0d:dd:74:6b:65:3a:7b:ed:01:93:16:50:
                    be:d4:37:0c:03:7f:4f:ce:e1:5e:8c:cf:4c:2b:d4:
                    7b:59:fd:45:7c:b9:82:ba:14:43:d6:07:85:6d:54:
                    8c:78:24:cf:d4:1c:9d:2e:bf:2d:f8:24:ee:54:6c:
                    25:38:65:25:7b:f6:20:46:8a:34:96:33:f3:cb:e2:
                    a3:4d:d2:4f:49:7a:6a:2a:3a:d1:ae:d1:a4:0a:75:
                    87:77:b8:aa:2f:52:4c:54:38:b9:9a:27:87:b2:cd:
                    a6:c8:6c:f6:82:17:a6:5b:30:bb:70:6e:94:e5:34:
                    7b:2b:a3:13:56:f6:b5:a6:b0:47:54:c6:08:45:53:
                    f1:64:f3:6f:8e:29:e4:a5:97:4e:42:09:5f:72:61:
                    24:29:56:1a:fd:de:4b:4b:b2:ac:1a:6c:19:46:b9:
                    c5:8a:dd:68:b8:8e:72:af:ef:db:6c:72:ef:9a:55:
                    d7:e2:71:fc:d7:1c:15:2d:40:f6:db:c5:58:05:fa:
                    64:5b:a2:51:fc:07:1b:0f:4d:74:9d:e0:4c:f2:4a:
                    f6:27:ee:50:5c:99:cf:bf:4f:e8:06:52:60:84:96:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C6:FB:35:15:A9:9E:1E:A0:E7:74:34:98:5C:27:87:9B:FC:2B:CB
            X509v3 Authority Key Identifier:
                keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:43:45:48:86:5c:3a:b1:2c:19:8e:68:7e:c9:d7:de:1f:9e:
         6d:c5:4d:15:98:18:11:c6:bb:89:28:aa:32:a1:40:34:d3:0c:
         7e:8c:3c:40:75:4e:4f:75:f3:14:65:85:a1:bc:0a:51:3f:c9:
         25:ac:52:89:22:4b:ff:59:a6:95:64:1d:98:5b:0e:20:11:2f:
         84:a1:55:15:c2:ce:36:48:eb:8c:c9:85:99:69:52:e0:aa:75:
         67:99:41:e5:f8:a6:cf:43:80:74:30:a6:1e:52:a8:4d:fe:2b:
         c0:c1:89:4d:04:ef:11:4e:9f:a3:83:0b:18:c6:46:ef:21:00:
         e8:28:60:f1:35:5d:f6:06:01:8b:f4:7d:a5:cf:ff:af:d7:9b:
         89:39:98:7f:ef:36:5e:d1:0f:f6:47:5a:09:dd:35:10:85:c7:
         dc:7f:cc:6f:cd:48:9e:7c:40:75:08:ee:bd:03:b8:4b:6f:63:
         8d:50:58:8d:fd:db:3e:88:bd:97:a2:27:11:e8:22:43:72:ef:
         38:fe:47:bb:62:7b:7a:b4:ca:50:1e:04:13:f6:f0:1b:99:a2:
         90:50:9b:ec:ba:13:f5:5d:2b:b1:db:1d:3f:54:cf:10:05:07:
         c6:e2:a3:e3:a3:c5:6b:a7:5f:a6:7a:af:5f:a6:63:66:d5:1f:
         77:9c:8d:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMzQjcxMTAvBgNVBAUTKDM5ODM3Q0I0QkVDQUY2QTYyNkM5MTZBRTk2MDI0MUI2
MDlFNkIyMEEwHhcNMjYwNjEzMDMzNDUxWhcNMjYwNjIwMDMzNDUxWjAYMRYwFAYD
VQQDEw02YTJjY2ZkYi1jYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvhfa483Mye57X3zzDxznFQC0wdBpNgymnBXb0y+jhvYN3XRrZTp77QGTFlC+
1DcMA39PzuFejM9MK9R7Wf1FfLmCuhRD1geFbVSMeCTP1BydLr8t+CTuVGwlOGUl
e/YgRoo0ljPzy+KjTdJPSXpqKjrRrtGkCnWHd7iqL1JMVDi5mieHss2myGz2ghem
WzC7cG6U5TR7K6MTVva1prBHVMYIRVPxZPNvjinkpZdOQglfcmEkKVYa/d5LS7Ks
GmwZRrnFit1ouI5yr+/bbHLvmlXX4nH81xwVLUD228VYBfpkW6JR/AcbD010neBM
8kr2J+5QXJnPv0/oBlJghJZULwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzG+zUV
qZ4eoOd0NJhcJ4eb/CvLMB8GA1UdIwQYMBaAFDmDfLS+yvamJskWrpYCQbYJ5rIK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xNTlBNEFEMDkz
MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3SzlxWW15UmF1bGdKQnRnbm1z
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09ZTjh0TDdLOXFZbXlSYXVsZ0pCdGdubXNnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzNCNy8xNTlBNEFEMDkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3Szlx
WW15UmF1bGdKQnRnbm1zZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZENFSIZcOrEsGY5ofsnX3h+ebcVNFZgYEca7iSiqMqFANNMMfow8QHVOT3Xz
FGWFobwKUT/JJaxSiSJL/1mmlWQdmFsOIBEvhKFVFcLONkjrjMmFmWlS4Kp1Z5lB
5fimz0OAdDCmHlKoTf4rwMGJTQTvEU6fo4MLGMZG7yEA6Chg8TVd9gYBi/R9pc//
r9ebiTmYf+82XtEP9kdaCd01EIXH3H/Mb81InnxAdQjuvQO4S29jjVBYjf3bPoi9
l6InEegiQ3LvOP5Hu2J7erTKUB4EE/bwG5mikFCb7LoT9V0rsdsdP1TPEAUHxuKj
46PFa6dfpnqvX6ZjZtUfd5yNyA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:01:16 2026 by rpki-client