Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft
File:                     Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft (raw, json)
Hash identifier:          A85x7oGXr9ZzM9/YdmXk5mS7caJvZlQg+dV8Yz1CiJM=
Subject key identifier:   52:55:D0:03:F1:4F:80:A2:66:99:CB:D9:2F:B3:8B:41:B2:BB:A1:8F
Authority key identifier: 3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F
Certificate issuer:       /CN=A91E6348/serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft
Manifest number:          14
Signing time:             Sat 13 Jun 2026 09:06:13 +0000
Manifest this update:     Sat 13 Jun 2026 09:06:12 +0000
Manifest next update:     Sat 20 Jun 2026 09:06:12 +0000
Files and hashes:         1: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl (hash: QN6uIYoqvJWw7EQwb4bE6Azc28ZrTCA4u9hPYhNCmEc=)
                          2: 8001633A4A1711F1B9EC201DC9833773.roa (hash: f7QabRTI7sk2IZG0kdDs+LNBsIzZTK1/4WtgGby64wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl
                          rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6348, serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F
        Validity
            Not Before: Jun 13 09:06:12 2026 GMT
            Not After : Jun 20 09:06:12 2026 GMT
        Subject: CN=6a2d1d85-980b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:af:aa:a4:86:c0:e5:05:2e:1c:ad:72:d3:
                    83:63:c5:b3:32:50:8b:2a:81:8f:7e:0e:65:28:8a:
                    3a:77:7f:46:2b:8b:3c:a5:56:a0:a8:cd:42:d9:d3:
                    0d:7e:a8:35:4a:dc:d6:50:48:1d:ce:cb:18:7b:5c:
                    fe:6d:8d:9a:fd:34:38:b4:c0:88:7f:b1:d1:7f:4b:
                    a3:84:5c:4e:64:7d:a7:7d:ea:65:80:c6:fe:d4:13:
                    eb:d1:51:3e:1d:16:43:b6:8c:e6:a8:f9:f9:3d:fb:
                    9f:9c:d1:f3:4b:75:8d:f2:98:7f:05:93:3d:f2:34:
                    55:23:4e:c0:29:29:e4:d4:ba:09:d1:40:d1:cd:eb:
                    4f:f6:ce:ea:4d:d9:5a:db:f2:f4:35:9b:9d:a7:ce:
                    88:c3:17:b5:1e:f1:90:9e:d9:90:1e:c3:ae:32:11:
                    41:72:4b:b8:51:2a:16:35:e8:a2:37:42:b1:ea:18:
                    ed:29:5c:f2:49:d9:c7:38:45:35:7c:19:8b:0f:85:
                    e7:e2:88:68:cf:92:67:fe:9f:22:29:06:2e:4b:5f:
                    80:78:84:bb:9c:3f:32:81:97:4a:cb:79:0b:40:5f:
                    21:8b:7f:c0:44:68:31:0a:ce:be:3b:f9:17:f1:07:
                    c1:41:f1:b9:a7:4a:c6:1a:43:d9:7b:27:d1:fa:b3:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:55:D0:03:F1:4F:80:A2:66:99:CB:D9:2F:B3:8B:41:B2:BB:A1:8F
            X509v3 Authority Key Identifier:
                keyid:3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:24:11:87:37:0b:3a:ea:ff:f7:67:a9:04:d6:18:bc:2f:6c:
         d8:46:f9:be:f9:0e:41:50:09:21:8e:43:09:dc:d3:85:19:06:
         b3:45:f1:5e:67:0f:a4:e6:8e:6d:64:1a:01:90:d1:a3:fa:53:
         90:ad:e1:c6:71:9d:31:cc:5a:97:58:48:6f:57:0c:b5:bc:b2:
         a2:12:c8:a5:6a:ad:eb:aa:43:19:1b:c0:98:77:dc:d0:c5:bb:
         eb:64:f1:22:81:10:61:e1:c8:a1:d5:a7:a5:1d:5e:0f:41:6a:
         fb:57:23:1b:91:66:cb:c7:56:92:8f:a5:ad:63:c9:c1:5e:54:
         90:e4:3e:d2:dc:b1:72:5d:2e:78:86:e6:95:55:45:5d:f8:40:
         3b:67:38:5b:eb:a7:90:ee:2c:0d:85:c0:40:0e:c8:2d:2c:7f:
         e7:80:22:a2:ec:71:9c:7b:f3:5c:d2:c0:6f:5f:3c:c3:14:2f:
         55:5e:b7:f1:8e:9a:ec:00:e7:b6:18:df:94:1c:2d:cb:20:e9:
         1a:4a:cb:b7:75:17:0c:21:5b:b0:73:a5:c1:6f:70:c2:f6:be:
         60:b7:29:67:b1:4d:49:09:77:17:14:48:23:25:1e:91:3c:40:
         6d:de:81:22:63:e0:5d:58:75:9c:d7:21:26:fb:a0:4b:60:37:
         dd:ed:82:f5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NjM0ODExMC8GA1UEBRMoM0EzQ0I5MkY5OTk2REMxMkZENjkyMUEwRDZGOTY2MjMx
Qzk4RTY4RjAeFw0yNjA2MTMwOTA2MTJaFw0yNjA2MjAwOTA2MTJaMBgxFjAUBgNV
BAMTDTZhMmQxZDg1LTk4MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMU6+qpIbA5QUuHK1y04NjxbMyUIsqgY9+DmUoijp3f0YrizylVqCozULZ0w1+
qDVK3NZQSB3Oyxh7XP5tjZr9NDi0wIh/sdF/S6OEXE5kfad96mWAxv7UE+vRUT4d
FkO2jOao+fk9+5+c0fNLdY3ymH8Fkz3yNFUjTsApKeTUugnRQNHN60/2zupN2Vrb
8vQ1m52nzojDF7Ue8ZCe2ZAew64yEUFyS7hRKhY16KI3QrHqGO0pXPJJ2cc4RTV8
GYsPhefiiGjPkmf+nyIpBi5LX4B4hLucPzKBl0rLeQtAXyGLf8BEaDEKzr47+Rfx
B8FB8bmnSsYaQ9l7J9H6s71BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUlXQA/FP
gKJmmcvZL7OLQbK7oY8wHwYDVR0jBBgwFoAUOjy5L5mW3BL9aSGg1vlmIxyY5o8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzQ4L0VDNUQxQjdFNEEx
NjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JMOWFTR2cxdmxtSXh5WTVv
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT2p5NUw1bVczQkw5YVNHZzF2bG1JeHlZNW84LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2
MzQ4L0VDNUQxQjdFNEExNjExRjE5OTNCOTNGN0M4ODMzNzczL09qeTVMNW1XM0JM
OWFTR2cxdmxtSXh5WTVvOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBnJBGHNws66v/3Z6kE1hi8L2zYRvm++Q5BUAkhjkMJ3NOFGQazRfFeZw+k5o5t
ZBoBkNGj+lOQreHGcZ0xzFqXWEhvVwy1vLKiEsilaq3rqkMZG8CYd9zQxbvrZPEi
gRBh4cih1aelHV4PQWr7VyMbkWbLx1aSj6WtY8nBXlSQ5D7S3LFyXS54huaVVUVd
+EA7Zzhb66eQ7iwNhcBADsgtLH/ngCKi7HGce/Nc0sBvXzzDFC9VXrfxjprsAOe2
GN+UHC3LIOkaSsu3dRcMIVuwc6XBb3DC9r5gtylnsU1JCXcXFEgjJR6RPEBt3oEi
Y+BdWHWc1yEm+6BLYDfd7YL1
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:27:09 2026 by rpki-client