Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
File:                     oqIX1KQS-1OPXJGjSzbOcYed22U.mft (raw, json)
Hash identifier:          mQXhoris8WE844NOndZfmexsvVwTrEUNU0SRhPlUAHE=
Subject key identifier:   ED:10:CE:EF:5D:AA:ED:52:65:59:95:5D:77:E6:04:2F:89:17:13:52
Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65
Certificate issuer:       /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
Manifest number:          01E3
Signing time:             Sat 13 Jun 2026 03:40:13 +0000
Manifest this update:     Sat 13 Jun 2026 03:40:13 +0000
Manifest next update:     Sat 20 Jun 2026 03:40:13 +0000
Files and hashes:         1: oqIX1KQS-1OPXJGjSzbOcYed22U.crl (hash: 7eQR6xwWlbM2AAaR0/SgQXv8D65Kb5nVF6pAVu1BGPY=)
                          2: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (hash: 7HiiQTV5zY5tbTdYcm8BulZ0FRGrmhKFMlzgoK8qTu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl
                          rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF9B0, serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65
        Validity
            Not Before: Jun 13 03:40:13 2026 GMT
            Not After : Jun 20 03:40:13 2026 GMT
        Subject: CN=6a2cd11d-3beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:0a:38:bc:f7:94:3e:7e:13:bc:17:1b:31:
                    33:0c:99:cf:bc:69:a6:6a:42:83:63:8f:9c:fb:d5:
                    45:5a:03:ba:95:1c:03:78:13:55:2d:99:3a:44:b5:
                    47:03:b4:d5:86:ec:5b:a8:eb:e5:75:35:82:fc:d9:
                    ae:d7:43:0a:51:ea:7e:88:52:4e:8c:31:24:ea:9c:
                    26:42:a5:bc:67:dd:83:a1:72:20:cb:ee:32:f1:a7:
                    f4:45:d6:0d:62:dd:79:47:91:df:0f:42:55:aa:ac:
                    6c:a3:e2:da:a6:09:ec:e5:42:af:d3:39:3d:49:5c:
                    8f:49:d6:ba:d5:bb:84:35:b3:ae:4e:68:cb:e8:f7:
                    04:4f:ab:5c:7c:3a:c6:d2:79:f6:c7:2c:e9:30:94:
                    30:22:be:49:e8:73:4b:ae:6a:94:fb:5b:a4:2f:50:
                    60:53:ef:39:e8:1a:ad:20:ec:58:5c:87:ab:a5:95:
                    5d:45:ae:39:b2:1a:70:b2:18:35:6d:52:96:da:17:
                    72:c4:f8:67:07:fe:6e:09:96:1a:cb:bb:26:27:68:
                    d4:22:4c:8d:05:67:14:6e:84:3e:a3:e6:8b:60:5c:
                    fe:64:4e:b7:3e:36:ad:f9:dc:46:56:5b:3c:97:e8:
                    06:58:bc:70:67:cf:0b:bf:5e:ab:bf:42:42:d9:27:
                    76:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:10:CE:EF:5D:AA:ED:52:65:59:95:5D:77:E6:04:2F:89:17:13:52
            X509v3 Authority Key Identifier:
                keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:4f:39:f4:d7:5a:6e:1a:39:a8:77:cd:4f:ee:5f:5c:42:
         0f:af:08:25:6b:79:95:5a:0b:f5:a6:2a:35:f3:67:f3:27:32:
         4e:00:fa:4f:d1:9a:16:05:50:2d:ca:47:9f:7d:c0:b4:c2:60:
         e7:f9:42:59:be:75:51:cd:6a:11:64:d4:ec:38:03:9a:41:1a:
         5c:57:e2:a8:17:8f:a2:7e:cb:2e:e0:9a:f5:e8:6b:14:f0:99:
         1b:f1:34:2b:78:58:da:3e:69:56:2d:e1:d8:84:57:24:f8:e3:
         cf:ce:c7:9b:b5:8e:7b:fa:57:71:9b:5c:59:3e:a9:ea:1a:24:
         c4:09:12:3e:be:a0:40:b8:d1:e9:4c:81:81:c1:c1:bc:35:dd:
         37:0f:56:90:56:1d:90:4e:7c:28:23:aa:af:a9:f6:22:e7:88:
         b1:9f:2e:0d:f2:df:59:95:0b:b3:62:9c:12:06:11:f3:99:38:
         90:b0:6c:87:15:90:24:13:27:4d:69:ac:5e:5d:bb:57:68:33:
         3a:ca:0a:ae:61:f9:f0:a4:c0:8d:16:e3:b2:93:c8:b0:9e:54:
         e3:35:a8:b2:eb:ee:11:2a:52:34:40:26:e3:bb:d3:3d:48:63:
         4b:2c:bf:2f:dc:af:92:85:a0:77:de:a0:7d:02:d0:9d:87:39:
         3d:80:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:26 2026 by rpki-client