Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
File:                     O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json)
Hash identifier:          2ddBZ8dzg+uoC+ySeE/pnxpBqjJ5F4wmspoVyALhsNI=
Subject key identifier:   81:08:20:A3:F4:D8:D0:F3:3E:A4:5D:55:DE:91:F3:62:7D:9E:25:8E
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
Manifest number:          010F
Signing time:             Sat 13 Jun 2026 06:11:16 +0000
Manifest this update:     Sat 13 Jun 2026 06:11:15 +0000
Manifest next update:     Sat 20 Jun 2026 06:11:15 +0000
Files and hashes:         1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: 32st45J2efPCvnq4N/pQPUpLZRCHhNczGYCVCDGMCAc=)
                          2: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: mO+BWuAvLE1cVLG5z10U+LtaeF9p3hAXhHEP7QtGd8k=)
                          3: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: d0vm5wncisSlyFIQNK+dAA18qYesSQU/iTYEX3JnVQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Jun 13 06:11:15 2026 GMT
            Not After : Jun 20 06:11:15 2026 GMT
        Subject: CN=6a2cf483-0a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:04:9d:99:91:16:c9:9a:2f:15:f9:2d:f0:
                    2d:1e:e1:a5:4f:39:5d:36:78:e0:0e:7c:b3:58:38:
                    6a:27:a0:02:7b:98:aa:1b:36:d4:c8:1b:a5:f7:a8:
                    fd:c9:4c:0f:02:b6:2f:63:0d:e6:a4:37:02:87:7f:
                    85:8b:f2:86:18:99:28:2a:c1:3e:2e:61:29:15:c0:
                    f3:1a:93:ff:3f:b9:e5:29:90:03:96:10:0f:aa:5f:
                    86:fb:30:c1:40:71:bc:5a:96:8d:d0:c1:12:5f:2c:
                    11:9e:c8:be:91:fd:b5:65:ae:44:e5:34:f1:cd:16:
                    7a:46:57:f2:98:17:a5:47:3a:5d:2c:ec:5b:74:02:
                    8b:82:ae:a7:5e:f0:f4:6d:2f:e2:6c:89:50:14:db:
                    5b:2b:76:b5:1b:69:47:0e:02:11:67:f1:21:c4:2e:
                    f4:f6:83:0a:db:a1:15:80:da:59:bf:c5:45:26:47:
                    1a:39:0e:a9:75:75:cb:68:fd:15:57:18:02:91:4b:
                    7e:ff:bf:d6:8c:b3:fb:33:68:79:1f:09:10:fa:5b:
                    bb:0d:99:1d:8e:30:a9:94:13:83:b9:9e:23:6e:2e:
                    e9:75:fe:a4:c1:c6:30:2c:30:69:62:69:13:87:d0:
                    fb:02:e1:07:29:1d:a0:c7:1c:4c:73:39:f4:61:68:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:08:20:A3:F4:D8:D0:F3:3E:A4:5D:55:DE:91:F3:62:7D:9E:25:8E
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:74:d7:7b:4c:04:7a:26:9d:de:38:55:5f:60:2b:4f:11:c0:
         d7:9a:01:19:4b:4f:61:68:f0:51:65:75:05:2f:ef:bd:06:86:
         74:39:b4:59:ec:da:cb:b8:12:ec:45:9b:7a:d8:68:57:fc:06:
         f3:e9:fc:2c:6c:ba:9f:ff:41:32:f0:82:53:05:f2:45:34:eb:
         23:d9:b1:31:bb:3d:86:9c:85:a5:9a:42:c9:38:37:28:d8:21:
         21:13:5f:69:f5:f1:77:56:99:65:d2:36:1f:85:ed:f5:78:20:
         d8:ab:2f:d1:b2:e7:93:3b:00:e8:2c:e3:5a:21:c1:0c:3c:2f:
         59:1d:58:53:9f:aa:c3:65:dd:bd:5e:0f:dc:0c:fa:1a:2e:9f:
         98:74:46:f6:c4:64:ff:51:ed:71:5e:82:40:d9:aa:10:b6:f4:
         76:6b:e9:bd:6f:f8:81:67:57:d0:51:85:60:02:b4:31:87:52:
         7c:42:65:df:b7:52:45:5a:61:c4:20:25:b2:d6:48:72:4d:64:
         b2:3d:31:ed:93:27:80:96:c1:7c:83:6f:56:a3:f1:35:52:75:
         ee:ac:6a:57:a7:4e:0e:d6:a9:7c:af:40:86:0c:4c:a4:b9:ab:
         7e:2b:a1:84:1f:bc:a3:3a:50:a1:27:80:f0:5a:5a:b5:d2:91:
         88:a5:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:02:09 2026 by rpki-client