Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
File:                     oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json)
Hash identifier:          0d88e7yRmaJvAKGrtSI2sIxl5keUjE8FVaWCos2TRj8=
Subject key identifier:   87:73:0D:2D:C7:25:1E:B5:F2:E4:76:A9:F3:8A:1E:01:A9:E3:FE:0F
Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1
Certificate issuer:       /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
Manifest number:          7C
Signing time:             Sat 13 Jun 2026 07:44:03 +0000
Manifest this update:     Sat 13 Jun 2026 07:44:02 +0000
Manifest next update:     Sat 20 Jun 2026 07:44:02 +0000
Files and hashes:         1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: TiN3/0WGwkSfMe//66thbYWyUTaxWjK3iptQrYc0jwo=)
                          2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: E1LMJ9mOfZjZ4jDPtBlQdeKYtT0/MoH4POXsIIJkVvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl
                          rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
        Validity
            Not Before: Jun 13 07:44:02 2026 GMT
            Not After : Jun 20 07:44:02 2026 GMT
        Subject: CN=6a2d0a42-68ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:19:8d:f9:f9:4d:85:23:b9:8b:f5:d0:37:
                    aa:9b:88:9f:c6:be:6f:9a:3d:26:72:34:ea:d8:eb:
                    66:5a:b2:2c:f1:43:c9:48:38:a3:66:78:58:93:aa:
                    5c:bb:1d:14:40:f7:c2:76:21:75:74:a5:1f:31:66:
                    16:b3:39:5f:c4:d0:72:83:9c:24:30:2d:11:cf:f8:
                    fe:f8:fc:96:7a:5f:71:cd:c3:ec:93:90:cc:68:32:
                    79:ae:05:0a:f1:81:ef:66:54:d3:d1:ba:eb:80:38:
                    9d:4e:2b:35:6c:05:23:65:c1:9b:7f:2e:c6:b5:9b:
                    d2:13:96:b7:06:bc:1a:38:fd:90:87:60:4a:3d:21:
                    3b:6c:35:98:e0:c0:9d:fb:fe:9b:24:61:94:84:63:
                    7b:bd:87:24:c7:6b:d4:ca:c4:a0:a6:08:60:22:59:
                    00:29:21:b0:e5:3a:0d:58:c0:0a:e4:df:f4:43:7a:
                    85:8e:95:6c:af:4c:21:f0:6b:95:37:97:d5:d5:82:
                    01:fe:00:38:b6:c2:c0:5b:51:51:33:dc:2f:7b:65:
                    4e:c3:5b:b0:1e:a0:59:49:fb:92:d8:41:a5:c8:0a:
                    8c:a7:90:d2:f8:5e:23:97:8d:e8:21:69:0d:3a:7b:
                    14:2c:98:65:40:80:bb:d4:ae:c7:73:9e:0a:1f:81:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:73:0D:2D:C7:25:1E:B5:F2:E4:76:A9:F3:8A:1E:01:A9:E3:FE:0F
            X509v3 Authority Key Identifier:
                keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a4:ab:b9:0a:74:f8:7e:34:57:b8:e7:48:a1:f5:d5:1a:97:
         7e:6b:97:bf:a9:5c:41:04:f7:2b:2b:20:79:70:db:67:7f:64:
         c8:9f:36:4c:4d:92:1a:d5:aa:02:05:69:c2:6d:84:21:bb:2a:
         fa:08:c3:aa:26:a4:95:70:86:39:c0:6e:bf:9b:8b:e3:78:16:
         f5:b6:6b:2f:1a:99:b0:3b:76:dc:62:c8:7f:1f:a9:37:dd:2d:
         c0:15:03:39:85:4c:e3:a0:20:08:33:2b:2b:da:3c:5d:87:e1:
         b1:08:83:54:da:ec:45:15:95:46:a9:d2:7d:80:73:4f:07:06:
         f8:87:88:f6:7d:7d:b4:a6:26:af:e8:ac:c3:d4:07:da:ab:3e:
         d4:2a:97:d1:59:2f:0d:72:ec:a4:f1:78:15:44:a3:22:c7:26:
         3d:47:0d:94:25:5c:03:45:90:c4:f4:cd:ee:4d:ee:9c:60:2a:
         e3:c4:5b:37:eb:2f:02:85:ac:85:76:55:cc:8f:c7:d3:e1:35:
         bf:a2:98:df:14:93:5a:98:5c:3b:15:ae:b9:69:3d:fe:16:61:
         77:f5:23:c7:34:df:0c:c1:8c:d6:82:04:c5:0f:f2:1f:a1:7d:
         73:4b:f1:27:13:02:66:eb:6f:cf:3d:76:d6:05:9c:e6:1a:00:
         be:ab:3b:9c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RDBERTExMC8GA1UEBRMoQTEyNEQyRDEwNEY3NzI0RkJCOEYwRjI2Njk0OUUyOTA1
NDhDMDFCMTAeFw0yNjA2MTMwNzQ0MDJaFw0yNjA2MjAwNzQ0MDJaMBgxFjAUBgNV
BAMTDTZhMmQwYTQyLTY4YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDY6BmN+flNhSO5i/XQN6qbiJ/Gvm+aPSZyNOrY62ZasizxQ8lIOKNmeFiTqly7
HRRA98J2IXV0pR8xZhazOV/E0HKDnCQwLRHP+P74/JZ6X3HNw+yTkMxoMnmuBQrx
ge9mVNPRuuuAOJ1OKzVsBSNlwZt/Lsa1m9ITlrcGvBo4/ZCHYEo9ITtsNZjgwJ37
/pskYZSEY3u9hyTHa9TKxKCmCGAiWQApIbDlOg1YwArk3/RDeoWOlWyvTCHwa5U3
l9XVggH+ADi2wsBbUVEz3C97ZU7DW7AeoFlJ+5LYQaXICoynkNL4XiOXjeghaQ06
exQsmGVAgLvUrsdzngofga53AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh3MNLccl
HrXy5Hap84oeAanj/g8wHwYDVR0jBBgwFoAUoSTS0QT3ck+7jw8maUnikFSMAbEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzVCNUY0NTE2QTk4
RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2stN2p3OG1hVW5pa0ZTTUFi
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb1NUUzBRVDNjay03anc4bWFVbmlrRlNNQWJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE
MERFLzVCNUY0NTE2QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL29TVFMwUVQzY2st
N2p3OG1hVW5pa0ZTTUFiRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAMpKu5CnT4fjRXuOdIofXVGpd+a5e/qVxBBPcrKyB5cNtnf2TInzZMTZIa1aoC
BWnCbYQhuyr6CMOqJqSVcIY5wG6/m4vjeBb1tmsvGpmwO3bcYsh/H6k33S3AFQM5
hUzjoCAIMysr2jxdh+GxCINU2uxFFZVGqdJ9gHNPBwb4h4j2fX20piav6KzD1Afa
qz7UKpfRWS8Ncuyk8XgVRKMixyY9Rw2UJVwDRZDE9M3uTe6cYCrjxFs36y8ChayF
dlXMj8fT4TW/opjfFJNamFw7Fa65aT3+FmF39SPHNN8MwYzWggTFD/IfoX1zS/En
EwJm62/PPXbWBZzmGgC+qzuc
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:29 2026 by rpki-client