Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File:                     O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier:          xeOqec2VQIRDjkUY+bto2nY+ZJYhh5y0ZYphclzVL60=
Subject key identifier:   2F:DA:B2:B9:03:3B:4E:82:05:71:C9:27:8F:01:50:91:6B:96:95:62
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer:       /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial:       0374
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number:          036C
Signing time:             Sat 13 Jun 2026 00:53:33 +0000
Manifest this update:     Sat 13 Jun 2026 00:53:32 +0000
Manifest next update:     Sat 20 Jun 2026 00:53:32 +0000
Files and hashes:         1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: 7FXPdxYy5GZfk0xHVv/JiFYvVvLMlcUpzY1x+Ow9prk=)
                          2: C78C216A070211EDB5178252C4F9AE02.roa (hash: fyu14Jx6k1oTAKIdxEeJ8rrmDDiNJP7D4BIKAgsLJek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
                          rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884 (0x374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3873, serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
        Validity
            Not Before: Jun 13 00:53:32 2026 GMT
            Not After : Jun 20 00:53:32 2026 GMT
        Subject: CN=6a2caa0c-103b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:8f:53:07:00:1c:99:8e:32:75:12:27:ec:
                    5a:22:55:b6:cd:c8:f9:d1:25:9c:58:58:ce:82:74:
                    03:47:c7:c3:da:a6:b6:d9:4d:84:7f:e6:fa:d5:bd:
                    d4:ca:19:33:c8:0c:08:4d:90:da:94:f4:53:09:71:
                    01:8a:cd:ca:37:ee:ad:43:11:c0:df:dd:be:b2:4f:
                    4a:4e:c1:f7:66:57:f4:b7:12:cb:0a:e5:2e:22:9c:
                    8e:81:23:77:56:05:6a:da:14:eb:23:e6:99:ca:16:
                    e9:4e:8f:01:76:3e:91:cb:d5:e4:2c:f1:86:68:b5:
                    85:78:a7:5b:48:ed:e6:d1:6f:8e:c8:1c:94:14:45:
                    93:fe:80:8f:c6:e9:c2:26:10:e1:41:ea:9a:05:8f:
                    37:15:f3:ea:40:2d:02:03:e2:89:0e:10:e9:79:5c:
                    ac:e2:ae:2f:0e:9f:86:8c:74:a1:ae:18:fd:8c:23:
                    30:05:67:d4:d6:c8:11:c4:12:5e:54:be:a8:98:03:
                    94:87:fa:5c:98:ae:a6:68:9e:93:72:7c:12:6c:d9:
                    c9:2f:46:c4:ec:0e:7b:18:ba:a4:84:70:e3:a7:70:
                    3e:09:e5:ba:75:69:16:e1:32:b4:60:f6:eb:49:27:
                    16:a9:7d:57:5d:a5:dd:67:c1:a7:cf:3c:99:e6:5d:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:B2:B9:03:3B:4E:82:05:71:C9:27:8F:01:50:91:6B:96:95:62
            X509v3 Authority Key Identifier:
                keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ed:b8:67:0f:c5:7a:b0:99:fc:91:f8:89:b4:8e:2b:be:ec:
         ac:77:29:61:77:16:c8:e9:cd:7b:a4:3e:f3:3a:d9:d6:5b:d8:
         20:0f:c7:e9:49:16:83:15:57:1b:4a:79:5b:b7:04:63:96:98:
         18:a5:b2:85:a5:c9:c4:d7:5f:20:4f:07:fa:c5:02:d6:89:2d:
         cf:53:87:7d:6b:66:1a:1a:28:7b:75:d7:80:bd:43:d0:bf:76:
         cb:95:79:31:e7:3f:0a:0d:42:e1:12:ae:aa:a3:82:e5:cf:d3:
         e3:27:8d:e4:ab:06:6e:01:83:c0:6e:8e:ee:6c:cd:f6:fb:78:
         bb:16:1f:8a:fd:a7:4a:85:ce:32:13:89:45:71:d7:78:a8:40:
         93:19:b8:84:70:02:d5:ed:02:e0:b6:a7:c0:bf:82:b1:f1:56:
         e0:1a:95:87:15:f8:8a:c8:c3:c8:d6:00:ca:a0:11:b0:04:e8:
         81:14:07:3b:97:54:f6:4b:da:f5:68:74:a2:3e:c5:b3:94:82:
         df:4d:96:5b:07:94:f1:73:a5:43:a9:a8:72:78:e5:96:1c:5f:
         48:67:c7:fd:d2:80:a5:bf:56:7a:b8:7c:52:4b:07:24:2d:9c:
         93:87:f3:26:47:71:94:d6:ca:ef:c5:94:d3:a0:88:f9:90:2d:
         27:5e:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:52:11 2026 by rpki-client