Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
File:                     oRR-hHvP7urdnompeo2fM2ecp-I.mft (raw, json)
Hash identifier:          hIB/1JuIoOKFaCA97dN3LclfoNjc9foTXkT3yVevbUc=
Subject key identifier:   56:A8:AE:88:34:6F:61:09:08:FB:4B:B8:FF:02:22:D9:E1:38:0B:50
Authority key identifier: A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
Certificate issuer:       /CN=A91EAD80/serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
Manifest number:          0135
Signing time:             Sat 13 Jun 2026 05:32:30 +0000
Manifest this update:     Sat 13 Jun 2026 05:32:30 +0000
Manifest next update:     Sat 20 Jun 2026 05:32:30 +0000
Files and hashes:         1: oRR-hHvP7urdnompeo2fM2ecp-I.crl (hash: 0a7chdqSGIWbD7DrdQQ58WnxXIwENIZVDitsJ6CuJrY=)
                          2: 52DF0E62B2FA11EFA36E0387C4F9AE02.roa (hash: QqqXcy0rlKoYg63rZeBH+t86JUXNBkFgw10UvyH6Mls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl
                          rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAD80, serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
        Validity
            Not Before: Jun 13 05:32:30 2026 GMT
            Not After : Jun 20 05:32:30 2026 GMT
        Subject: CN=6a2ceb6e-2779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:1a:e6:a2:6a:38:45:cf:0a:fc:d4:ae:4c:
                    ba:93:97:e5:37:f9:88:c1:9e:ad:1e:f3:99:7a:5f:
                    59:3c:68:ef:68:e7:ce:50:5c:d8:6d:6b:ac:1b:c0:
                    f3:e5:07:96:95:c6:8e:f2:62:ac:d6:84:bc:42:85:
                    34:91:6f:09:bf:e5:68:d1:ec:65:34:8d:39:c2:73:
                    49:ca:7d:a8:df:0d:fb:74:23:00:a6:c9:ac:87:4a:
                    64:54:52:88:5e:56:64:6d:8d:aa:ed:b8:85:09:b9:
                    90:ff:ca:6c:b1:0d:96:f9:45:4a:ca:7d:00:3c:d4:
                    a6:78:a6:94:f0:21:d6:05:95:0d:03:b1:44:e4:ae:
                    46:a7:3a:79:84:45:5c:b7:c1:06:59:2d:09:bd:7b:
                    93:f3:c3:0c:4a:3a:7b:dd:a3:11:a1:b2:42:34:75:
                    28:e9:b7:37:77:3e:48:97:4d:f0:51:32:43:77:5b:
                    f2:32:81:d0:55:09:a3:23:2e:0e:13:ca:b8:cd:3b:
                    9e:67:06:7d:25:af:2e:95:9e:78:0d:21:c8:ec:28:
                    fd:4f:fd:78:c7:85:e9:b9:f3:66:6f:f8:1b:5c:e1:
                    1e:f3:61:4c:92:55:ed:78:5d:7d:9b:16:f5:d7:f5:
                    79:51:2a:0e:8f:5c:42:e9:f2:d1:fd:42:fe:a4:c5:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A8:AE:88:34:6F:61:09:08:FB:4B:B8:FF:02:22:D9:E1:38:0B:50
            X509v3 Authority Key Identifier:
                keyid:A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:6a:e5:b6:2e:c0:d0:74:b8:30:1c:5e:85:4d:14:19:cf:c3:
         7c:d1:bb:8d:50:83:e9:2d:ee:23:65:06:5c:a6:64:0c:62:41:
         04:1e:9c:38:40:5a:0a:39:df:e2:84:e5:c7:ab:62:60:bf:88:
         2e:ab:7a:ff:a0:76:86:cd:94:fa:cf:56:7c:39:41:7d:2b:c2:
         1c:1b:46:a9:91:06:24:96:b0:f4:26:5b:21:f6:1e:f2:66:a7:
         e7:fa:61:a1:cf:ce:86:99:5a:e3:79:32:00:9f:e4:44:18:ec:
         cd:b2:3b:bf:21:66:e2:b7:b4:c8:6a:5d:00:c4:13:a5:f2:77:
         d2:99:48:61:89:c7:92:ce:b2:42:a0:08:75:28:7a:2d:b4:3f:
         48:f7:52:65:53:5b:d2:86:a2:ee:0e:1c:7e:d6:8f:d0:10:0f:
         30:ae:c9:86:90:b0:4a:fe:d2:51:e5:87:d6:d9:2e:2c:02:cd:
         72:b0:18:d9:3e:c2:65:6d:c4:6f:23:a8:e6:e1:a2:0b:84:85:
         cd:c4:2f:c4:8a:c4:0c:91:db:33:ba:a4:ed:45:6d:74:8f:59:
         2d:69:e2:a3:b8:21:9e:1c:68:d1:8f:df:b5:32:19:5f:be:42:
         0b:bd:c8:a6:d5:c0:ed:14:c2:36:e2:8d:7d:b6:b3:5a:56:48:
         a6:93:74:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFEODAxMTAvBgNVBAUTKEExMTQ3RTg0N0JDRkVFRUFERDlFODlBOTdBOEQ5RjMz
Njc5Q0E3RTIwHhcNMjYwNjEzMDUzMjMwWhcNMjYwNjIwMDUzMjMwWjAYMRYwFAYD
VQQDEw02YTJjZWI2ZS0yNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp8Ia5qJqOEXPCvzUrky6k5flN/mIwZ6tHvOZel9ZPGjvaOfOUFzYbWusG8Dz
5QeWlcaO8mKs1oS8QoU0kW8Jv+Vo0exlNI05wnNJyn2o3w37dCMApsmsh0pkVFKI
XlZkbY2q7biFCbmQ/8pssQ2W+UVKyn0APNSmeKaU8CHWBZUNA7FE5K5Gpzp5hEVc
t8EGWS0JvXuT88MMSjp73aMRobJCNHUo6bc3dz5Il03wUTJDd1vyMoHQVQmjIy4O
E8q4zTueZwZ9Ja8ulZ54DSHI7Cj9T/14x4XpufNmb/gbXOEe82FMklXteF19mxb1
1/V5USoOj1xC6fLR/UL+pMVNtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFaorog0
b2EJCPtLuP8CItnhOAtQMB8GA1UdIwQYMBaAFKEUfoR7z+7q3Z6JqXqNnzNnnKfi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ4MC9EMjIzQzVBRTk0
QzkxMUVGOTJDRDcyNThDNEY5QUUwMi9vUlItaEh2UDd1cmRub21wZW8yZk0yZWNw
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29SUi1oSHZQN3VyZG5vbXBlbzJmTTJlY3AtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUQ4MC9EMjIzQzVBRTk0QzkxMUVGOTJDRDcyNThDNEY5QUUwMi9vUlItaEh2UDd1
cmRub21wZW8yZk0yZWNwLUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA12rlti7A0HS4MBxehU0UGc/DfNG7jVCD6S3uI2UGXKZkDGJBBB6cOEBaCjnf
4oTlx6tiYL+ILqt6/6B2hs2U+s9WfDlBfSvCHBtGqZEGJJaw9CZbIfYe8man5/ph
oc/Ohpla43kyAJ/kRBjszbI7vyFm4re0yGpdAMQTpfJ30plIYYnHks6yQqAIdSh6
LbQ/SPdSZVNb0oai7g4cftaP0BAPMK7JhpCwSv7SUeWH1tkuLALNcrAY2T7CZW3E
byOo5uGiC4SFzcQvxIrEDJHbM7qk7UVtdI9ZLWnio7ghnhxo0Y/ftTIZX75CC73I
ptXA7RTCNuKNfbazWlZIppN0OA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:48 2026 by rpki-client