Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File:                     oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier:          jQIJ5JEhH1dY+05a05VAh5lvuEPR1vAuX8nGn69WvY4=
Subject key identifier:   F7:A8:EB:6E:D6:2F:F9:3E:DE:6F:5C:5D:69:3A:C7:0F:38:68:0C:CB
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer:       /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number:          01D9
Signing time:             Sat 13 Jun 2026 03:33:41 +0000
Manifest this update:     Sat 13 Jun 2026 03:33:40 +0000
Manifest next update:     Sat 20 Jun 2026 03:33:40 +0000
Files and hashes:         1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: Wo2nMq1h9VjGlXOOg5/JxBmQP5HsZSVHaBDYooVb2JQ=)
                          2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: I602UprS0PuPZg6+swMqCR4Z7j5cFK9kxKEJsn7QaM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE620, serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
        Validity
            Not Before: Jun 13 03:33:40 2026 GMT
            Not After : Jun 20 03:33:40 2026 GMT
        Subject: CN=6a2ccf95-b6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:fe:32:1a:48:b2:4f:c6:d7:38:0c:4d:04:
                    34:65:1a:0e:a9:cc:79:b0:a2:4c:c2:5b:60:89:2e:
                    0c:10:de:bb:90:8c:fb:4a:d0:24:8a:4f:5f:d8:09:
                    a6:fe:42:72:42:be:7b:4f:46:c4:be:92:c9:30:d0:
                    fa:31:34:55:84:6e:da:4f:fb:ac:2f:9a:01:ba:68:
                    9f:97:5d:8e:87:93:3b:69:b2:33:4d:e0:c0:c1:05:
                    aa:d2:ca:ae:0c:0f:df:fd:ef:74:87:9f:ee:63:63:
                    26:16:0f:e2:fb:67:75:3a:3c:71:65:4f:c5:b8:69:
                    25:ca:58:ee:75:53:5e:ea:cb:2b:ff:68:2d:fa:02:
                    5a:c9:f8:8c:81:15:57:e6:ff:35:d2:12:3e:11:6c:
                    00:7b:6a:00:36:cb:51:1a:90:0e:97:72:83:12:50:
                    5e:77:3c:1b:0e:d0:55:d8:6c:aa:1e:0d:53:dc:12:
                    10:54:5d:75:7d:91:23:b4:62:3b:0b:c1:03:ac:f9:
                    b0:eb:49:37:2f:10:28:21:29:93:43:d1:b3:39:8e:
                    ec:b3:f6:39:2b:de:c1:3d:17:69:67:44:d8:14:ae:
                    d8:2d:22:ae:de:93:13:07:3d:15:62:a3:86:3d:85:
                    e5:0c:89:98:9a:95:c0:2a:5c:e0:46:4a:31:c3:6d:
                    a2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A8:EB:6E:D6:2F:F9:3E:DE:6F:5C:5D:69:3A:C7:0F:38:68:0C:CB
            X509v3 Authority Key Identifier:
                keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:49:88:c0:05:c4:1b:73:32:f8:16:dd:aa:c7:2a:b3:fb:
         d5:39:12:29:71:c8:dd:35:fe:7f:6a:47:df:a6:77:b7:09:d2:
         cd:d1:26:6c:a2:53:58:8e:6e:e5:a9:e0:21:74:2c:19:7f:cf:
         16:25:88:7b:c4:7a:4f:99:48:bc:99:1d:74:93:3e:42:fd:a5:
         ce:e4:db:48:0d:ce:f7:49:21:57:02:1d:5c:4d:7a:5b:cb:a5:
         a2:87:23:a6:ca:88:2f:e5:80:d4:ea:4c:e0:da:1c:f3:09:87:
         08:6d:99:74:c1:14:9c:9d:85:7a:5b:ca:86:35:38:49:f6:f1:
         e4:20:24:c3:6c:73:91:d9:19:f3:2f:a2:69:ad:c8:13:89:c7:
         de:7d:21:1d:e1:14:e9:e5:61:0d:d3:9f:59:45:d3:e0:c6:27:
         94:a6:ab:dc:51:a6:a7:fb:66:ae:21:0b:9a:6d:61:dc:bf:5d:
         74:e7:de:34:0f:18:fe:22:83:95:72:a3:cc:9b:f3:ed:5e:5f:
         72:35:07:3a:b4:de:53:7f:52:4a:ab:b7:71:bc:9f:ed:4b:44:
         6f:8e:e8:92:71:4a:5e:2d:a7:45:96:5e:47:2f:80:3a:5f:a1:
         4d:64:05:ab:9e:13:fd:57:32:83:e0:23:e4:c0:74:87:0b:6d:
         1c:ee:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:21 2026 by rpki-client