Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
File:                     ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft (raw, json)
Hash identifier:          NP76L+6QUQmF98RPki6uC/Z5elNcYA+SUChmH4gUPNI=
Subject key identifier:   86:4B:A8:5D:13:DF:E6:E1:DA:53:3B:BF:6B:AC:02:B2:5E:5F:51:98
Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30
Certificate issuer:       /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530
Certificate serial:       0532
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
Manifest number:          052A
Signing time:             Fri 12 Jun 2026 23:36:03 +0000
Manifest this update:     Fri 12 Jun 2026 23:36:02 +0000
Manifest next update:     Fri 19 Jun 2026 23:36:02 +0000
Files and hashes:         1: ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl (hash: 1GxqPDzIjSg30rVqdyl6vmRvlOwM1FTDwL8JdUyzsCI=)
                          2: 1B97FEB84E8111ECA3589560C4F9AE02.roa (hash: eI8p6HpzXJysOZ1MQfoUzQgPrBgjI04EZmU1r+INUvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330 (0x532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530
        Validity
            Not Before: Jun 12 23:36:02 2026 GMT
            Not After : Jun 19 23:36:02 2026 GMT
        Subject: CN=6a2c97e3-7593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:4c:60:3c:fa:b8:5e:ef:4b:4f:37:28:0d:
                    97:b5:6e:dd:88:be:f9:25:62:9c:d9:69:10:74:ce:
                    c7:e3:9a:02:08:33:f5:6b:25:6f:27:81:47:ea:ef:
                    97:47:b8:a0:64:73:77:82:0d:34:7a:86:21:06:f2:
                    6b:db:a0:94:19:c6:10:88:4b:6d:8f:fb:58:36:b1:
                    fc:96:47:a3:12:e8:bb:64:f8:15:76:ed:48:8b:e0:
                    30:b6:39:83:30:b8:6b:3c:d5:1c:ea:a9:a1:3d:3b:
                    2f:4c:fd:cc:ad:4b:b7:53:bf:67:fd:de:a3:14:de:
                    38:b5:fa:0f:4d:7a:f9:11:43:4d:8b:2a:9f:2f:2c:
                    76:79:5c:a2:8c:c3:e5:fa:c5:8a:9a:68:fe:41:57:
                    46:99:8f:b5:6d:7a:49:48:4a:bc:6b:db:5b:06:d9:
                    33:0f:f2:76:b1:c2:27:6f:1c:8b:89:6e:e8:98:ef:
                    67:2a:5e:08:99:8a:96:6a:a7:6a:63:ec:80:2d:11:
                    a2:c3:56:52:12:4f:49:41:05:98:8e:a2:57:da:d0:
                    1f:fd:8f:72:bf:28:51:e6:a7:02:31:a4:77:6f:05:
                    36:eb:f0:01:f4:b3:b8:d2:29:b0:4f:d5:4e:b4:d6:
                    0a:8f:ce:04:f8:5e:9e:5e:47:eb:84:6b:e6:73:6b:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4B:A8:5D:13:DF:E6:E1:DA:53:3B:BF:6B:AC:02:B2:5E:5F:51:98
            X509v3 Authority Key Identifier:
                keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ce:9c:b4:93:16:9b:57:0d:53:0d:ef:23:f4:b4:0e:92:d0:
         2e:c1:7d:3b:c0:42:63:a2:a9:69:88:5c:f8:5a:a9:f9:f2:ce:
         ce:b0:e1:a2:56:7e:86:72:76:9f:0b:84:ea:c9:18:68:72:46:
         4d:70:23:fc:af:aa:ee:68:9e:7e:cb:06:ca:f9:91:06:97:ab:
         84:43:4f:32:03:29:33:ff:00:9a:60:bb:bc:5d:cd:63:62:48:
         91:6f:a5:dd:b6:ba:8a:dc:6f:b7:3c:e9:38:2c:20:66:42:e8:
         6b:cf:50:17:49:8c:1e:41:e9:da:14:ad:43:20:04:65:8e:ae:
         ae:18:7b:e7:b3:f2:dd:93:5b:be:73:f0:71:98:11:14:38:9e:
         c7:e4:69:51:49:97:6d:b4:57:80:e3:85:df:d9:e2:e3:5c:a2:
         e5:21:96:eb:3b:af:15:2d:85:15:41:e5:24:f3:88:65:4a:eb:
         fd:94:a9:7c:e8:45:b7:b3:18:37:ec:08:5c:8a:44:ff:41:60:
         5e:12:bd:c1:79:26:0a:ca:9c:37:bc:27:fc:6d:6b:4c:e7:0d:
         40:65:0d:38:c7:5c:fa:fc:5d:3e:16:3d:31:8a:50:36:f1:1b:
         aa:e3:0e:4a:9c:c6:cd:54:1a:1a:97:b8:3f:e6:ce:f8:c6:33:
         33:1a:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:27 2026 by rpki-client