Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
File:                     OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json)
Hash identifier:          l5RqBu/eSJlWEVPGxpH/xwQ5a98IgEnQSU1MSTC+x6M=
Subject key identifier:   95:FF:3F:BD:99:CF:7E:49:E1:67:B1:17:1A:C1:0A:31:0C:6A:2D:42
Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8
Certificate issuer:       /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
Manifest number:          0130
Signing time:             Sat 13 Jun 2026 05:36:26 +0000
Manifest this update:     Sat 13 Jun 2026 05:36:25 +0000
Manifest next update:     Sat 20 Jun 2026 05:36:25 +0000
Files and hashes:         1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: a0NppGeAzYxLsBN/iA8RT+cZrXaHcz5K0VW/3I3LNbw=)
                          2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: /TeFmAq6WUrTiuCuPlwLIq4bJylbmUbGhfodPgyaENY=)
                          3: 03FFD61EEF8A11F09F678C04616F56BC.roa (hash: Vq7WOAaGyHrEANMuaydXxs4oGlSE1GWybP72WD+YuWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl
                          rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
        Validity
            Not Before: Jun 13 05:36:25 2026 GMT
            Not After : Jun 20 05:36:25 2026 GMT
        Subject: CN=6a2cec5a-bc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:81:2d:54:e1:32:ef:32:02:cf:88:fe:ea:
                    3c:e1:d5:92:eb:8e:e0:3d:31:0d:cc:29:1d:1a:d4:
                    a8:b6:b5:53:2b:81:db:d0:cd:82:8b:22:b5:9f:7c:
                    91:ab:11:74:d0:ca:fc:65:07:65:1d:7a:47:14:49:
                    b5:a4:f2:d5:71:ea:19:2a:a2:f8:95:49:7d:e9:9b:
                    1b:8c:38:5d:1f:64:b1:45:72:a6:5f:bb:3a:21:8b:
                    d7:b2:52:fb:ef:1d:89:d4:d2:31:1e:80:62:e5:23:
                    cc:54:70:79:b1:b7:87:b6:48:9f:38:44:44:02:97:
                    ea:25:7b:04:05:9f:3c:21:cb:96:2f:14:c5:d1:c7:
                    81:fd:f5:f0:09:bd:f5:5a:f3:08:98:4e:52:e0:65:
                    a5:4c:b5:77:11:fc:31:80:9b:7c:73:d4:62:56:04:
                    5c:b7:0c:ce:87:73:f2:06:b2:cd:66:46:a0:ae:7e:
                    46:d7:10:e0:e7:97:5a:da:1e:d9:80:d2:94:29:49:
                    00:24:d3:5a:54:39:3b:9e:59:91:d6:49:33:ee:5c:
                    ba:60:ea:29:fe:a3:21:d5:85:19:13:a4:d1:9c:f6:
                    f0:f5:6c:70:7e:5e:9f:78:08:6f:89:4a:fd:bc:73:
                    e7:a4:aa:26:24:81:0e:85:51:ab:b4:1b:5d:40:88:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:3F:BD:99:CF:7E:49:E1:67:B1:17:1A:C1:0A:31:0C:6A:2D:42
            X509v3 Authority Key Identifier:
                keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c2:db:1c:06:fe:29:68:49:05:cf:e0:b8:0b:1a:f2:7d:6f:
         16:5c:7c:0c:69:c3:a2:1f:f1:1e:33:f0:be:74:ad:86:c0:9e:
         9d:a4:0e:fb:18:6f:df:78:c1:94:f5:2d:46:80:b5:43:52:27:
         da:c9:4d:0e:9a:91:fc:4e:d4:6b:90:f5:18:19:ec:d1:e3:f7:
         b0:3d:a9:51:b9:b0:92:5b:e6:80:6c:ff:b2:43:61:7f:bb:36:
         a5:b5:be:65:16:1b:cf:70:39:d1:33:3f:f2:d1:7c:16:32:55:
         b8:ed:7d:a0:a4:9b:ef:c5:a5:d6:c1:1c:47:24:cf:31:44:25:
         4d:d1:db:da:56:7d:c8:f6:ae:ad:6b:23:f5:05:8b:1d:54:5f:
         59:99:d9:ea:e4:8a:0f:9e:d2:5e:9b:ba:7b:b6:12:b3:2d:67:
         93:13:7c:fa:a3:89:3d:b0:0d:53:58:42:77:bc:e2:1f:45:5b:
         f5:17:54:e0:9e:2f:83:89:7d:9d:c9:68:84:78:ed:7d:b1:d8:
         70:1f:27:68:3f:d9:75:7e:1f:9a:b1:1c:10:a0:1f:e0:7b:fd:
         c7:51:1e:c7:3f:5f:34:52:17:7d:07:8a:4e:b1:e6:d0:d5:55:
         9c:0a:cc:f8:9f:20:c0:a0:3c:44:cb:8e:65:b2:ea:73:53:37:
         dd:18:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:34 2026 by rpki-client