Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
File:                     oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json)
Hash identifier:          GoSn159R0kxCs2G7OUY9fv4WU8J8r8NCbPTnP5hsWn4=
Subject key identifier:   D5:10:E2:F2:C8:60:CA:98:1C:6E:92:65:6D:F2:AB:FC:7D:FD:F8:38
Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
Certificate issuer:       /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
Manifest number:          0239
Signing time:             Sat 13 Jun 2026 02:56:29 +0000
Manifest this update:     Sat 13 Jun 2026 02:56:29 +0000
Manifest next update:     Sat 20 Jun 2026 02:56:29 +0000
Files and hashes:         1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: BB0O5LXQ8vrPrtk62K6BWO6tbxOACeYiw50lE6HshPM=)
                          2: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: UJfcT25TpxMsPXblHXFvDdc06o4EalWiUveKOaWphfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
                          rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
        Validity
            Not Before: Jun 13 02:56:29 2026 GMT
            Not After : Jun 20 02:56:29 2026 GMT
        Subject: CN=6a2cc6dd-fff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:88:5b:c6:67:2d:e8:5b:7c:06:96:bf:9c:
                    9e:00:85:0c:ac:73:4e:53:b7:55:04:f2:66:53:dd:
                    69:8a:57:d1:0b:0d:10:a1:8e:c9:d7:7b:60:69:e5:
                    16:47:69:a2:c1:8b:d3:5d:db:42:02:79:6e:5e:09:
                    dd:c7:9e:a9:3f:8e:ab:53:55:6d:2d:54:a6:98:ef:
                    7d:6a:bc:7d:69:13:e8:f4:21:25:0f:b0:28:a5:e4:
                    50:64:85:b7:f4:6d:ec:95:4b:1c:06:83:de:c0:59:
                    f7:38:73:f7:bc:c6:d9:60:a4:96:94:28:83:e2:90:
                    74:ca:b6:f3:73:d3:77:aa:4c:e9:37:b1:a4:58:90:
                    9e:f4:68:ee:ba:1f:fe:4f:ed:1b:18:ee:c2:55:a3:
                    b1:0c:87:57:a0:b3:a2:e9:83:06:0b:c2:25:59:31:
                    e4:6e:4e:59:51:ab:d0:f4:5a:7e:2b:65:66:d2:96:
                    70:b4:5a:75:8a:a3:3a:5c:da:f5:89:62:e2:67:39:
                    9f:f3:11:d6:a0:24:d5:87:a2:f9:83:df:d7:fb:75:
                    da:7e:12:66:82:d6:e8:68:14:61:08:f8:d1:21:91:
                    33:fa:5b:4d:e4:ad:1d:55:36:17:4a:16:a9:cd:21:
                    32:c8:93:36:c8:b8:e7:7f:3b:1d:b7:90:1a:02:7a:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:10:E2:F2:C8:60:CA:98:1C:6E:92:65:6D:F2:AB:FC:7D:FD:F8:38
            X509v3 Authority Key Identifier:
                keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ef:ec:24:8f:7c:80:be:aa:36:a3:2f:8b:d4:70:21:d0:eb:
         86:3b:3f:55:4f:82:69:c5:7d:aa:3e:b3:12:5d:84:0d:a0:37:
         7f:34:2b:68:b4:17:dd:a6:c9:ea:a8:ff:d8:3a:0d:ee:d2:73:
         0a:4e:bf:bc:fa:e2:a3:15:88:0a:d9:1f:46:07:0f:37:af:51:
         4e:ba:00:f0:9f:5d:35:ab:c5:03:9e:53:57:d8:60:92:a1:f7:
         a2:02:4a:9e:6d:32:4b:b3:82:55:c5:3d:af:8b:ad:1f:a2:9a:
         ee:a0:58:4d:61:c1:aa:9c:d9:fb:b5:51:cc:d8:0a:80:c0:ea:
         e6:d0:42:af:61:b0:b9:33:cd:fe:24:be:80:cc:9a:7f:6c:fe:
         dd:75:49:c3:7e:21:ba:c8:a8:85:40:5a:bb:85:53:4d:17:e1:
         fd:c7:c2:f8:05:e8:a5:6a:b1:d1:20:33:a5:23:1a:91:d0:05:
         7d:eb:5c:a4:65:ca:49:c4:ad:3e:1b:37:31:38:b4:4f:65:f5:
         60:8b:67:21:36:4c:24:7b:3f:f4:a3:96:c5:12:14:92:b2:fe:
         1a:e3:14:b2:a1:66:29:84:4e:ef:48:ee:4f:9b:bb:3b:35:59:
         74:24:c9:a6:26:50:88:51:e4:5b:a6:c4:8d:4b:3c:88:86:81:
         5c:24:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:36:22 2026 by rpki-client