Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
File:                     oPnraYHccqJ4sYUomQbB4RwLNfE.mft (raw, json)
Hash identifier:          etSFhoWIOOjeU+TaEWe1dyaeOvWeE5dOexx5mXU3lFo=
Subject key identifier:   26:11:9B:CD:56:98:BA:45:93:1D:06:C4:0E:20:FB:47:43:74:AA:0B
Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1
Certificate issuer:       /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
Manifest number:          CB
Signing time:             Sat 13 Jun 2026 06:51:32 +0000
Manifest this update:     Sat 13 Jun 2026 06:51:31 +0000
Manifest next update:     Sat 20 Jun 2026 06:51:31 +0000
Files and hashes:         1: oPnraYHccqJ4sYUomQbB4RwLNfE.crl (hash: JEeokhM34chA3vRCeE5iQ/fsg5AQTYMLmjC2BDOUMUw=)
                          2: 25E96E4C2F6511F0A4430347C4F9AE02.roa (hash: VGC3s72kCEqeNjrQgkhJsVpMANzKAnqf/Eot+fUvV1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl
                          rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1
        Validity
            Not Before: Jun 13 06:51:31 2026 GMT
            Not After : Jun 20 06:51:31 2026 GMT
        Subject: CN=6a2cfdf3-2552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:76:16:d3:c8:e0:0e:ba:4d:13:cd:ce:be:
                    56:4b:a6:fd:36:33:83:78:39:fa:a0:9a:d1:6b:54:
                    74:b7:6b:d4:51:03:bc:d7:35:de:e5:8a:a6:b5:8e:
                    bd:b4:9c:62:ce:e9:c6:2c:4c:3d:70:4d:00:02:99:
                    a3:7a:37:cd:c1:a7:2c:27:70:da:8d:ff:b8:d2:d8:
                    73:7d:16:38:a5:97:9d:b8:c8:34:6d:b6:25:a7:cb:
                    9e:35:0f:a5:1b:c0:f4:79:70:f6:83:c9:32:b4:a5:
                    e6:06:44:e5:dc:ae:a0:bf:ae:bc:8a:29:8d:22:ac:
                    59:fb:50:05:38:e9:de:b8:b5:e6:47:6d:f7:d3:b0:
                    53:d4:2a:f6:e8:b3:72:65:55:5b:d1:4a:9f:10:97:
                    9f:19:37:f3:eb:c4:37:61:ea:af:bd:80:99:40:fe:
                    c6:b1:36:f0:d5:3b:7f:e8:c2:b0:16:fb:67:9f:18:
                    39:72:1c:e4:2a:64:61:8b:f0:47:0a:69:56:9f:cc:
                    cb:ea:40:12:17:cc:f4:54:2e:dc:bd:16:db:c6:e1:
                    e9:20:0b:b4:fe:2f:02:18:ff:cf:9a:62:60:7a:2e:
                    86:d9:e2:90:87:0c:43:ca:76:b5:55:e3:75:07:42:
                    ed:f2:25:b2:bd:4a:c5:cc:d5:bc:cc:92:55:8f:31:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:11:9B:CD:56:98:BA:45:93:1D:06:C4:0E:20:FB:47:43:74:AA:0B
            X509v3 Authority Key Identifier:
                keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:5e:93:4f:ac:bc:15:8d:85:d4:13:51:69:8d:69:07:60:96:
         da:fd:ab:43:94:de:fc:cb:e1:04:56:89:47:08:8c:a4:ee:2c:
         cb:0b:3d:32:2f:1f:9e:c9:a2:6a:3c:ef:33:24:69:00:51:b0:
         3e:09:c4:00:18:db:21:d6:c8:56:25:ac:f3:9b:39:ef:90:b5:
         6f:1a:4d:7c:74:9a:2c:5f:e1:62:da:fd:9c:45:56:29:b4:6c:
         61:c5:14:56:fb:d8:25:72:3a:ac:d7:59:59:88:ff:eb:cb:f0:
         65:aa:36:dc:dd:ae:fe:b1:96:b7:02:67:be:42:59:c5:3d:42:
         9d:de:81:9c:8d:5f:fd:a4:41:36:6f:2f:db:03:4a:bb:9c:41:
         47:70:5a:12:4d:15:f4:45:e7:6e:37:f7:fc:dc:35:55:c8:75:
         46:26:85:99:d2:97:8d:59:1f:b6:cb:e3:e2:2c:26:67:08:92:
         83:ed:1a:79:6a:c8:a2:2c:16:07:3a:a7:85:a5:0b:e8:3a:ee:
         a6:1c:14:13:eb:7e:56:8e:7e:2d:c2:b6:59:34:59:fb:db:15:
         f6:bd:0f:d2:c8:66:69:e4:6e:f9:2a:9c:fc:e4:d5:75:af:22:
         6e:ef:58:16:7a:54:1e:f4:64:89:73:29:7a:4a:8b:53:5f:66:
         a3:a4:cb:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA1QTAxMTAvBgNVBAUTKEEwRjlFQjY5ODFEQzcyQTI3OEIxODUyODk5MDZDMUUx
MUMwQjM1RjEwHhcNMjYwNjEzMDY1MTMxWhcNMjYwNjIwMDY1MTMxWjAYMRYwFAYD
VQQDEw02YTJjZmRmMy0yNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqjZ2FtPI4A66TRPNzr5WS6b9NjODeDn6oJrRa1R0t2vUUQO81zXe5YqmtY69
tJxizunGLEw9cE0AApmjejfNwacsJ3Dajf+40thzfRY4pZeduMg0bbYlp8ueNQ+l
G8D0eXD2g8kytKXmBkTl3K6gv668iimNIqxZ+1AFOOneuLXmR23307BT1Cr26LNy
ZVVb0UqfEJefGTfz68Q3YeqvvYCZQP7GsTbw1Tt/6MKwFvtnnxg5chzkKmRhi/BH
CmlWn8zL6kASF8z0VC7cvRbbxuHpIAu0/i8CGP/PmmJgei6G2eKQhwxDyna1VeN1
B0Lt8iWyvUrFzNW8zJJVjzEQPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYRm81W
mLpFkx0GxA4g+0dDdKoLMB8GA1UdIwQYMBaAFKD562mB3HKieLGFKJkGweEcCzXx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDVBMC85QzUzNzE3ODJG
NjQxMUYwQjRGMkEyNDVDNEY5QUUwMi9vUG5yYVlIY2NxSjRzWVVvbVFiQjRSd0xO
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5mRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDVBMC85QzUzNzE3ODJGNjQxMUYwQjRGMkEyNDVDNEY5QUUwMi9vUG5yYVlIY2Nx
SjRzWVVvbVFiQjRSd0xOZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1F6TT6y8FY2F1BNRaY1pB2CW2v2rQ5Te/MvhBFaJRwiMpO4syws9Mi8fnsmi
ajzvMyRpAFGwPgnEABjbIdbIViWs85s575C1bxpNfHSaLF/hYtr9nEVWKbRsYcUU
VvvYJXI6rNdZWYj/68vwZao23N2u/rGWtwJnvkJZxT1Cnd6BnI1f/aRBNm8v2wNK
u5xBR3BaEk0V9EXnbjf3/Nw1Vch1RiaFmdKXjVkftsvj4iwmZwiSg+0aeWrIoiwW
BzqnhaUL6DruphwUE+t+Vo5+LcK2WTRZ+9sV9r0P0shmaeRu+Sqc/OTVda8ibu9Y
FnpUHvRkiXMpekqLU19mo6TLxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:39 2026 by rpki-client