Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
File:                     o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json)
Hash identifier:          e8SrpvyY51byWpbC/gi9vybh1BqYKj17VT/f2YWKfZA=
Subject key identifier:   3B:9D:18:C0:92:E9:BD:6F:63:74:C9:D2:AF:97:64:85:38:BF:12:AC
Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7
Certificate issuer:       /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
Manifest number:          7C
Signing time:             Sat 13 Jun 2026 07:44:17 +0000
Manifest this update:     Sat 13 Jun 2026 07:44:16 +0000
Manifest next update:     Sat 20 Jun 2026 07:44:16 +0000
Files and hashes:         1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: fD1G90Dn24eblDv0z/u5XbzANH6XG2piEMEValFro1o=)
                          2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: ny6KgtWAxAxsP09sSmBzSKP9/SUXwkqR5HeRZHk3STU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7
        Validity
            Not Before: Jun 13 07:44:16 2026 GMT
            Not After : Jun 20 07:44:16 2026 GMT
        Subject: CN=6a2d0a51-e96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:a0:d0:d0:31:c9:d5:ef:f1:e2:d4:aa:e7:
                    57:ba:7f:61:1c:40:6c:65:ab:56:c4:d8:a9:74:fc:
                    03:6c:f1:96:b0:28:02:c6:15:68:f4:3b:cb:ca:73:
                    7a:af:63:c2:7e:75:3f:b0:55:1d:06:38:fd:bf:87:
                    36:d3:ea:18:b5:88:33:6c:f0:44:35:79:dc:1f:01:
                    ce:cc:f4:65:89:c3:15:a6:7e:c8:8d:07:9b:51:7e:
                    a8:73:5b:7f:3d:c4:6a:b4:49:93:56:b1:25:b2:13:
                    47:da:6a:4f:b0:be:59:5e:53:e8:85:0f:88:3b:67:
                    f4:9b:6d:17:22:6f:97:f2:ee:e7:08:ff:bc:6f:20:
                    46:7d:ca:9f:c1:2e:87:b5:c0:6e:90:6d:9a:9d:9e:
                    a6:35:0d:07:b4:10:76:23:70:40:6a:0b:f2:36:8b:
                    91:b5:c6:83:00:9a:17:67:19:5a:6d:e1:ca:47:c5:
                    73:c4:33:91:70:e4:79:e9:c4:d3:4f:72:03:10:2a:
                    83:e6:c4:fc:a6:95:fb:1f:90:ca:42:1c:91:23:1c:
                    6d:7c:5c:b7:8b:c2:49:f1:77:45:5a:ee:12:5d:c7:
                    ad:e5:9f:2e:eb:e6:5b:1c:a8:88:ac:9e:82:7d:88:
                    15:bd:76:91:57:d3:62:61:c9:d1:17:cc:79:9a:86:
                    6d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9D:18:C0:92:E9:BD:6F:63:74:C9:D2:AF:97:64:85:38:BF:12:AC
            X509v3 Authority Key Identifier:
                keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:32:6c:57:e4:2e:71:f9:27:c6:b5:16:ae:ec:d2:54:41:c3:
         2b:61:8b:37:12:f4:a2:af:58:d2:6d:cf:75:a5:74:3e:d6:b4:
         0e:9b:03:9e:a7:82:74:79:d4:81:b9:04:5b:a2:0f:23:83:3c:
         93:08:5f:62:f2:21:7f:65:e8:32:3d:d0:bc:a0:1a:30:53:d0:
         eb:04:cd:29:da:5d:1a:bd:b4:30:f1:45:e1:1b:46:f9:ef:61:
         16:60:d9:a5:30:ec:cc:19:0b:cb:e9:5b:b5:b4:23:d2:6d:03:
         c3:75:f9:64:3d:e4:3d:28:bd:dd:26:d4:b5:cb:0e:79:4c:36:
         4c:f1:a6:bd:f8:af:a2:98:88:ac:55:0c:d0:63:83:7e:42:bf:
         6f:c8:ad:65:f3:97:31:0e:e0:27:5e:d0:f9:cd:43:8d:0a:ee:
         0d:eb:d4:15:74:05:77:69:33:04:20:8a:42:1d:9c:09:ba:c0:
         d5:15:3c:5a:37:b2:36:07:4d:60:eb:90:5b:cf:35:37:9a:7b:
         a3:61:4c:95:5c:2b:23:df:78:52:a4:de:bf:69:96:03:96:18:
         dd:1c:7d:9b:4f:23:b6:ce:9c:0e:cd:85:01:d7:af:e3:98:65:
         76:86:0b:a3:28:ec:51:7e:e2:1f:48:87:0d:18:b7:ba:2e:0a:
         d4:56:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:35:22 2026 by rpki-client