Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
File:                     O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json)
Hash identifier:          bxhJ9UAI0oX4i2B/el8MnqNRUKc+lK9y83uX+d98YmE=
Subject key identifier:   A1:85:0E:AE:B8:91:5B:20:26:A5:1F:8B:91:0A:9F:A5:BD:A4:D1:35
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Certificate issuer:       /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial:       0B00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
Manifest number:          0ADE
Signing time:             Fri 12 Jun 2026 19:27:12 +0000
Manifest this update:     Fri 12 Jun 2026 19:27:11 +0000
Manifest next update:     Fri 19 Jun 2026 19:27:11 +0000
Files and hashes:         1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: YGP3g0GaN9ISmAfwY8eAD85L9oJi9pyg35l+pTrT6tM=)
                          2: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: V0PmmwgVntdjWwqgOyfzApLR6YpbY/HvQB4HeE20/PU=)
                          3: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: mOy9DmAYzZsYbEQhE2U9Un7tfVf8mtaB1bU3ox64k7k=)
                          4: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: 69Hh0J+L+6D5El7B0qbhyv5Br90p9YiCbQw2deQTNhM=)
                          5: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: gy8HkzaIVkMxQWo5W1rlovO0xcxrRwNFB9e9LFzD4L4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2816 (0xb00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
        Validity
            Not Before: Jun 12 19:27:11 2026 GMT
            Not After : Jun 19 19:27:11 2026 GMT
        Subject: CN=6a2c5d90-1432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:33:6a:5a:b0:80:ef:9a:09:e2:5b:17:79:
                    8c:b6:04:7d:01:60:49:53:fe:9d:e6:c9:b1:82:42:
                    2e:9c:de:88:6f:2a:78:d5:c8:84:dc:df:b2:04:8d:
                    9a:10:be:e0:e9:1a:80:52:32:79:a3:cf:23:db:ac:
                    29:1b:40:f0:45:43:51:bf:9d:f2:2d:53:c7:e3:3a:
                    61:b4:67:bb:80:17:e4:c1:fe:fe:8a:16:b8:f6:95:
                    a8:c8:df:a3:3c:c8:95:03:fd:17:24:1c:c5:01:5b:
                    24:70:02:8d:2e:38:33:85:45:86:32:d6:8c:15:ad:
                    b2:ff:26:49:51:b0:d0:21:06:75:a2:65:bc:d9:07:
                    ab:e7:bf:a4:01:6b:b9:57:34:8c:26:b6:76:a3:d1:
                    a5:42:3b:fd:90:54:c9:5b:d7:21:77:c6:65:4e:59:
                    01:48:20:94:9d:6d:7b:85:37:3d:6c:18:91:60:96:
                    a2:9b:f7:03:8a:b9:1a:88:ba:5e:17:ae:92:e8:da:
                    7b:9f:ed:97:db:fe:83:f2:08:75:f1:ff:c4:e1:13:
                    55:80:c9:34:ed:ac:c6:df:9e:45:7e:26:4e:11:50:
                    bb:0c:56:ac:cb:67:0e:a9:bf:25:09:e4:ab:1c:28:
                    49:84:36:ee:41:c7:34:44:9a:fc:cd:3a:fa:13:b4:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:85:0E:AE:B8:91:5B:20:26:A5:1F:8B:91:0A:9F:A5:BD:A4:D1:35
            X509v3 Authority Key Identifier:
                keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:e0:d5:f4:49:8c:89:96:e3:cb:ab:dd:80:83:c9:5c:32:
         cf:d2:36:ad:1e:98:36:33:32:83:d3:a1:85:74:74:2c:a7:64:
         56:c4:d9:a4:71:51:dc:49:72:5f:86:c5:f9:4a:bd:ff:18:ab:
         d9:25:06:68:d9:d9:5d:39:65:40:47:5b:19:2e:bb:f2:04:64:
         30:41:eb:66:a4:57:41:43:69:f2:c7:fd:f9:0b:b5:5d:5b:47:
         bf:d2:2d:b8:aa:b6:32:bb:7c:69:b2:da:28:28:62:3c:3b:16:
         b0:51:4f:55:f1:27:b0:69:1a:0b:37:04:a6:d5:19:3c:2c:db:
         d1:18:c3:07:39:34:9d:78:ef:b8:79:2b:38:59:af:48:d6:b3:
         44:ab:93:63:b5:15:d2:29:ff:5a:35:f0:10:78:f1:b9:de:49:
         fb:bc:0b:ff:75:19:1f:54:58:62:5a:72:0d:08:61:2e:42:f5:
         36:2b:cd:0f:f9:14:72:d1:71:94:03:98:6c:12:d7:cc:64:4f:
         c9:c9:ea:88:96:93:cb:7a:62:cf:84:28:00:63:18:74:01:0b:
         27:80:1a:59:8e:a0:c0:ab:58:0c:81:14:da:08:00:35:06:34:
         e9:0d:fe:1d:cc:a9:27:7f:ed:8d:bd:43:99:84:f7:20:b6:2b:
         83:84:2c:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1
M0EwM0FCODYwHhcNMjYwNjEyMTkyNzExWhcNMjYwNjE5MTkyNzExWjAYMRYwFAYD
VQQDEw02YTJjNWQ5MC0xNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo1ozalqwgO+aCeJbF3mMtgR9AWBJU/6d5smxgkIunN6Ibyp41ciE3N+yBI2a
EL7g6RqAUjJ5o88j26wpG0DwRUNRv53yLVPH4zphtGe7gBfkwf7+iha49pWoyN+j
PMiVA/0XJBzFAVskcAKNLjgzhUWGMtaMFa2y/yZJUbDQIQZ1omW82Qer57+kAWu5
VzSMJrZ2o9GlQjv9kFTJW9chd8ZlTlkBSCCUnW17hTc9bBiRYJaim/cDirkaiLpe
F66S6Np7n+2X2/6D8gh18f/E4RNVgMk07azG355FfiZOEVC7DFasy2cOqb8lCeSr
HChJhDbuQcc0RJr8zTr6E7Rq8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGFDq64
kVsgJqUfi5EKn6W9pNE1MB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz
RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0RDRC84NDQyOEIwRTczRDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWht
cG5teHRnbHR0blJUb0RxNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAayfg1fRJjImW48ur3YCDyVwyz9I2rR6YNjMyg9OhhXR0LKdkVsTZpHFR3Ely
X4bF+Uq9/xir2SUGaNnZXTllQEdbGS678gRkMEHrZqRXQUNp8sf9+Qu1XVtHv9It
uKq2Mrt8abLaKChiPDsWsFFPVfEnsGkaCzcEptUZPCzb0RjDBzk0nXjvuHkrOFmv
SNazRKuTY7UV0in/WjXwEHjxud5J+7wL/3UZH1RYYlpyDQhhLkL1NivND/kUctFx
lAOYbBLXzGRPycnqiJaTy3piz4QoAGMYdAELJ4AaWY6gwKtYDIEU2ggANQY06Q3+
HcypJ3/tjb1DmYT3ILYrg4Qs1A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:35 2026 by rpki-client