Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          8lIz+Okm6QrWpgY8DPDL2vyJLnOPx8guDQfBYdnL+aE=
Subject key identifier:   DE:58:53:5C:77:C9:51:7A:8A:63:2F:9B:36:BE:C3:7F:65:27:5B:25
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          66
Signing time:             Sat 13 Jun 2026 08:04:33 +0000
Manifest this update:     Sat 13 Jun 2026 08:04:32 +0000
Manifest next update:     Sat 20 Jun 2026 08:04:32 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: yIV/wbSVQ+NfBMNNKIR2L4dhtPa82Wo/IQIapgDLXlQ=)
                          2: BD3AE9AC47AF11F1862D4448A9833773.roa (hash: Sa/+2RDFFnvmTt5yGyNUTGOg6sr8HGm5v/QNH+G6roA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: Jun 13 08:04:32 2026 GMT
            Not After : Jun 20 08:04:32 2026 GMT
        Subject: CN=6a2d0f11-8087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:6b:81:2f:b9:59:68:5b:31:03:f8:24:fc:
                    c5:6b:e7:41:78:51:5e:c1:7f:23:53:0c:98:6f:ed:
                    c9:54:67:ab:81:44:5f:ab:df:48:ed:31:e4:7c:3c:
                    35:dc:4a:d3:e3:9f:77:83:a3:59:e2:0f:81:a4:40:
                    ae:4a:ca:09:01:bb:9d:35:b7:db:eb:30:42:37:a9:
                    06:27:40:cc:ff:73:e6:4d:5a:cb:cb:60:53:c6:e6:
                    1d:89:6c:8a:09:08:bb:6e:43:97:e1:27:60:35:33:
                    77:c3:7f:98:30:6e:16:53:e4:60:63:96:57:70:20:
                    58:cb:e3:6b:ea:07:19:80:c4:5a:12:e9:f1:91:c7:
                    6a:54:1f:31:8b:5f:bc:b5:d2:c9:75:cf:af:2a:ac:
                    1b:d8:75:a3:75:7a:3a:e7:84:61:f0:b2:a7:c0:e5:
                    96:d5:38:08:bf:20:a9:ad:e8:08:48:c0:57:43:72:
                    d2:2b:9c:68:40:0b:06:7a:79:ec:a3:08:d8:7d:75:
                    20:76:2e:89:0e:d0:9b:4f:f0:8c:8f:a0:9b:ca:2b:
                    cc:0f:ef:a5:fa:9e:a3:35:f3:fb:7e:87:1c:fd:28:
                    bb:ab:0b:91:35:a5:af:e1:91:88:38:0c:6e:95:85:
                    a4:81:9f:f3:fc:88:73:73:a7:25:14:3f:6a:d2:62:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:58:53:5C:77:C9:51:7A:8A:63:2F:9B:36:BE:C3:7F:65:27:5B:25
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fe:6a:a0:1f:c9:57:fd:58:2a:3b:dd:9f:b6:2f:f7:4c:2f:
         0b:60:5a:56:16:71:aa:f6:fe:b2:b1:a0:8d:fa:c5:e7:54:a4:
         da:84:de:7a:12:42:30:7a:3c:72:5d:a2:1a:b9:d7:51:72:35:
         d2:df:37:5e:b8:4c:12:7e:46:f4:a4:80:3f:9d:1d:d0:19:eb:
         01:9b:09:57:da:34:ed:e5:f9:f2:ae:2b:83:98:bf:e7:32:8d:
         3f:cf:9c:c7:04:e8:2a:da:ca:40:f7:5d:27:fc:16:70:a6:99:
         c1:1d:f0:3a:47:03:cd:de:ba:74:87:c5:21:d8:a0:85:8e:c0:
         f0:d3:db:e5:d4:5e:72:3d:84:1b:27:14:19:99:02:ec:c1:ab:
         7d:7b:2c:0a:8d:93:cd:da:dd:53:2d:4b:4f:19:ef:6b:19:b9:
         8f:50:0c:f4:d3:fd:4b:6d:f5:60:3d:56:96:dc:2b:0c:1c:00:
         ed:d6:3b:cd:d5:a4:a2:6b:5b:14:f7:63:66:7d:29:f8:cd:88:
         92:d5:e1:05:f4:a5:3b:8b:08:6f:c5:ab:d8:bb:4e:11:c9:a4:
         2e:b1:94:c2:d9:07:c2:9d:c7:2b:e4:f7:73:37:87:88:3e:57:
         b5:c9:0f:03:a1:5a:05:38:ba:2f:b9:cc:70:e3:19:97:9f:13:
         c6:ec:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:30:02 2026 by rpki-client