Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File:                     ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier:          NgHLCSocWUePdiYp1qJACx5vveR47T30DWftX2hu2Us=
Subject key identifier:   AD:0A:5F:1B:3E:39:2C:2E:85:72:72:F1:C9:BB:A2:44:BB:D3:06:95
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer:       /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial:       02B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number:          02AC
Signing time:             Sat 13 Jun 2026 01:32:07 +0000
Manifest this update:     Sat 13 Jun 2026 01:32:07 +0000
Manifest next update:     Sat 20 Jun 2026 01:32:07 +0000
Files and hashes:         1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: lNKgkBmmu6+Y/zkZO62Y/rBqNKlVPY1kVnW5TpigbqI=)
                          2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: pGBNoZVQ4x9HykZ/w/nfYdiBRr1XcTrcOsgRSH1bWes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
        Validity
            Not Before: Jun 13 01:32:07 2026 GMT
            Not After : Jun 20 01:32:07 2026 GMT
        Subject: CN=6a2cb317-22a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:26:09:a7:1c:f1:8b:39:f8:d8:70:63:16:
                    6b:70:97:0b:50:ec:58:19:ba:24:04:40:8c:fa:e8:
                    dd:a0:88:38:e4:69:85:1c:f6:bb:c6:c4:02:ed:46:
                    e1:a1:8b:08:9b:a8:68:98:cb:83:a5:d0:7c:97:97:
                    c1:14:6c:db:4e:a2:04:3c:2d:02:ba:55:20:88:7d:
                    2a:45:df:57:fa:56:20:01:cb:08:1f:79:12:b8:89:
                    fd:7a:a1:51:ee:f6:83:e4:7c:51:f8:af:8b:52:0b:
                    34:5d:ad:c2:74:7d:b9:0e:17:0b:cc:54:04:5f:5c:
                    89:64:88:fd:43:ed:46:f4:ba:7a:b0:af:0a:5c:84:
                    a7:28:ab:3a:0e:de:20:21:d6:f7:30:12:b8:cd:66:
                    00:dc:72:85:db:59:26:04:99:45:52:7a:ec:60:fa:
                    1d:1f:12:ef:27:15:e3:5e:63:53:02:ed:77:65:ee:
                    1f:68:51:9a:00:29:92:5e:d1:04:83:4b:6c:a2:b7:
                    2a:4f:5d:9d:65:73:6b:0a:69:61:4b:93:7f:6e:1a:
                    e6:30:5f:af:27:7d:ff:a5:95:c5:1c:43:1e:74:78:
                    ec:a9:2d:96:50:6a:25:b9:b8:8d:ce:31:08:5e:86:
                    e6:4d:71:0a:86:a9:82:3a:57:bc:f8:47:38:d2:ce:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0A:5F:1B:3E:39:2C:2E:85:72:72:F1:C9:BB:A2:44:BB:D3:06:95
            X509v3 Authority Key Identifier:
                keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ee:63:8f:40:3e:51:09:b6:ce:be:e2:cf:1b:c0:7b:c7:23:
         39:a3:c6:e4:20:55:4e:03:bc:b1:86:1c:5f:3f:9f:91:11:34:
         e4:8d:2c:14:02:88:2a:a2:d2:b8:f8:a0:d6:fe:40:74:4e:a0:
         6d:7e:b8:c3:7b:a8:37:b1:15:53:42:71:08:ad:e6:0a:a8:a9:
         eb:0a:b9:e9:90:3b:af:cc:82:80:ab:b7:be:a6:67:ac:c5:74:
         4e:bc:b4:85:36:80:0b:14:a9:0b:f8:05:3a:c8:80:30:cc:a4:
         df:19:64:91:ca:30:76:17:4f:3b:9e:b9:9c:b0:61:05:e5:f9:
         a8:71:46:5d:dd:2e:f5:1b:15:b2:bf:68:c4:be:cb:f9:80:b1:
         92:a5:05:93:ff:d1:8b:c8:59:b5:e3:f0:37:d0:4b:65:86:72:
         3f:5c:7d:c7:14:f8:ec:4f:c7:59:76:15:9a:64:4b:30:b6:e3:
         18:8e:24:e9:63:7d:4c:05:e1:d8:10:21:51:09:ec:a4:91:a0:
         ea:ee:e8:4a:d9:04:cf:5a:91:0c:88:90:c6:b3:c8:c8:b1:51:
         66:d4:e0:4a:d4:2b:2b:37:8d:df:28:75:e7:31:3c:b4:70:e9:
         24:a4:0f:f7:e6:b2:c4:1b:e4:76:b1:6e:08:f1:04:5b:f2:5e:
         94:f6:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:46 2026 by rpki-client