Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
File:                     OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json)
Hash identifier:          4/+IzPKpb7KeQHeho1/jIkiaSLn2TJJUwYi6YROBWvw=
Subject key identifier:   A1:A4:A6:D3:59:0F:40:25:28:38:DB:79:2F:A3:B9:9B:6C:27:F6:3E
Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
Certificate issuer:       /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
Certificate serial:       24AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
Manifest number:          6187
Signing time:             Sun 14 Jun 2026 14:15:17 +0000
Manifest this update:     Sun 14 Jun 2026 14:15:17 +0000
Manifest next update:     Sun 21 Jun 2026 14:15:17 +0000
Files and hashes:         1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: JmGknahYpi1YIQkYeP90F7/5v2euGD3kbARwHx4i2uY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 14:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9389 (0x24ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
        Validity
            Not Before: Jun 14 14:15:17 2026 GMT
            Not After : Jun 21 14:15:17 2026 GMT
        Subject: CN=6a2eb775-73ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:22:4e:94:bd:18:70:16:62:69:6b:8d:2b:
                    a3:ec:3a:9f:f7:7e:7c:89:e0:6f:35:db:c4:68:c6:
                    2e:59:31:61:43:24:39:72:c1:93:65:0e:bd:29:77:
                    0b:7c:11:83:06:5c:b1:f6:96:ca:a0:55:42:c9:4c:
                    5a:a9:f3:7a:ab:97:f0:b5:55:53:72:1f:c1:4a:fc:
                    84:04:b0:66:69:16:4e:7c:4b:38:f0:11:78:76:3f:
                    1a:fd:5d:78:b9:53:02:62:09:d8:51:09:9a:84:e9:
                    3a:1c:22:fa:b2:2f:c4:54:e0:dd:81:16:b9:31:94:
                    ec:98:10:2c:44:a4:74:42:f0:03:b1:d1:63:46:df:
                    37:90:e2:28:a1:01:45:cf:3e:5a:e3:5d:58:dc:3b:
                    72:7f:04:50:39:9f:51:19:9f:4f:fa:69:54:1e:03:
                    be:9d:0b:82:7b:d2:d8:24:c1:af:be:b5:04:88:62:
                    c1:5c:db:6d:cf:d6:d7:fc:5e:84:06:0e:e5:74:ee:
                    fd:6a:a4:19:b3:1c:67:94:01:90:0f:ea:ce:b7:f8:
                    51:5d:8b:2c:c2:e9:74:8c:4f:86:9c:25:78:7b:54:
                    ef:ca:1b:79:3c:b1:d7:2e:d8:2c:7b:e1:76:0d:08:
                    8b:6e:b6:fa:60:25:52:fd:c2:45:a9:c0:a9:3e:bf:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A4:A6:D3:59:0F:40:25:28:38:DB:79:2F:A3:B9:9B:6C:27:F6:3E
            X509v3 Authority Key Identifier:
                keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f2:cd:7a:01:ed:31:ae:02:ed:af:4b:af:b2:be:1f:3c:3a:
         a7:ad:cb:61:d6:51:c7:dd:76:69:6e:38:67:95:78:df:68:8c:
         f5:9e:9a:9d:34:e6:2e:b3:ed:cd:31:0c:28:fe:41:dd:46:2f:
         d4:e3:bd:44:25:0c:c6:88:34:21:e1:9d:ef:dc:4b:f7:ed:59:
         5c:a8:40:00:fd:10:a8:ec:df:f0:f9:6a:d9:47:2f:0f:c2:4a:
         46:fc:2b:6e:95:96:e7:a1:65:10:97:0a:fe:9a:53:ae:b0:37:
         de:4f:bc:18:7f:ee:03:94:bf:79:d7:69:39:7f:ee:b9:20:08:
         8a:8b:e2:51:f9:91:bd:0f:0f:8b:d8:42:a0:eb:74:b3:66:8d:
         d5:89:60:c4:0d:66:0f:65:dd:72:b8:4e:46:65:26:f4:9d:92:
         88:0c:14:6e:9a:16:f8:a1:8b:22:b3:b3:97:2b:e3:12:6a:e5:
         ec:04:2a:f2:4a:07:f7:a5:53:5a:78:cd:b9:00:1f:aa:52:3b:
         6e:e1:6c:86:80:56:f1:c9:3f:33:5a:d8:e4:20:c4:54:0a:b6:
         74:60:99:48:42:c4:48:09:eb:88:8c:06:b6:d0:20:e4:d3:b5:
         65:e3:a0:0b:4d:a3:8c:83:2b:20:03:fa:df:40:ab:c2:1f:5b:
         5f:71:8c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:44:48 2026 by rpki-client