Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
File:                     0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json)
Hash identifier:          /iLsthRqLkohrMhpL9Rqp36vrCBfULHagoFSJkVus7U=
Subject key identifier:   F3:F7:63:A6:BD:ED:63:9C:01:4F:C7:BD:BC:E1:82:0F:7D:D5:0C:40
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Certificate issuer:       /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial:       0BA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
Manifest number:          0B98
Signing time:             Mon 22 Jun 2026 19:06:36 +0000
Manifest this update:     Mon 22 Jun 2026 19:06:36 +0000
Manifest next update:     Mon 29 Jun 2026 19:06:36 +0000
Files and hashes:         1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: pQgtelBySmp4MMTJMPqwEq2Voa3JvvqcRFS2BGmMNpQ=)
                          2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: jyqFCgst06RVpDB0gLXfdOd67pDYJBgZGVMmj+J0u70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
                          rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2982 (0xba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
        Validity
            Not Before: Jun 22 19:06:36 2026 GMT
            Not After : Jun 29 19:06:36 2026 GMT
        Subject: CN=6a3987bc-b787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ba:f9:be:27:72:69:df:db:f2:2f:3f:6a:e1:
                    45:c4:cb:89:99:42:78:0b:07:c9:ae:30:d9:a1:31:
                    f4:44:b7:09:99:c8:05:6a:7c:ed:12:15:f5:9d:be:
                    e4:5e:1a:6d:60:71:ae:93:e0:9a:29:55:e1:ad:63:
                    36:3b:af:1f:d7:1d:2e:e8:b0:77:d9:d3:dc:3a:06:
                    57:06:ee:8c:91:4d:7f:60:ae:c0:ea:de:68:f7:55:
                    fd:5d:6f:02:c7:40:5c:be:b5:12:50:53:05:4a:b0:
                    21:3a:33:56:18:b7:47:62:0d:de:eb:3f:8f:15:1d:
                    89:db:79:c4:6d:64:80:6d:59:6a:85:23:a3:85:c1:
                    94:54:4f:ca:39:62:b7:9f:bb:d5:ad:d2:1c:29:99:
                    83:9f:6f:26:2b:b5:4d:e6:23:c0:36:39:f8:53:2f:
                    84:de:9c:ff:9a:0b:5a:7c:65:b5:4d:eb:59:ac:3d:
                    92:32:50:d1:b1:c9:07:35:27:c9:9e:cc:8a:6e:50:
                    a5:49:96:44:cf:0f:07:86:61:36:27:9d:52:2c:53:
                    a4:bd:02:0f:13:40:19:39:40:23:25:bb:9b:34:02:
                    20:de:9f:e4:b2:e4:7b:13:c8:1c:1b:54:ec:81:49:
                    0d:41:c2:c7:d4:4c:6c:47:e8:22:3b:39:ea:a1:64:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F7:63:A6:BD:ED:63:9C:01:4F:C7:BD:BC:E1:82:0F:7D:D5:0C:40
            X509v3 Authority Key Identifier:
                keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7d:f1:7c:31:a6:80:aa:b4:17:c0:22:c7:d0:fb:ec:6a:6e:
         96:d6:a8:a8:0a:30:07:6f:02:c8:ad:77:1f:53:26:da:71:23:
         c9:94:26:8d:20:ed:2f:8a:3f:53:6b:42:88:96:f9:65:0e:53:
         0f:90:6b:b8:24:04:ba:f9:1e:fb:35:8f:bd:75:17:2d:8f:8b:
         e7:fb:a5:ad:8b:40:68:cf:d5:30:f2:1a:b7:be:09:fc:0e:ec:
         39:81:cc:62:ca:07:7e:81:81:47:8d:b3:bc:9e:ba:f1:99:fe:
         49:3c:3c:7f:f3:12:cf:60:34:70:b5:72:5e:24:c7:05:44:18:
         e3:36:59:df:1a:af:52:f0:07:43:0d:cf:b2:1d:76:a4:91:d2:
         ab:a8:c5:52:27:1d:11:29:62:b1:29:23:f5:e9:83:de:1d:95:
         54:66:5d:9a:e4:c1:14:8d:9e:f4:f1:ad:b2:61:34:ee:13:37:
         ca:13:e8:87:ad:64:40:d0:13:10:9a:e6:69:16:1e:4d:79:21:
         96:68:0e:e3:ab:df:ea:57:de:a1:68:9a:41:89:cb:f0:41:46:
         43:e1:71:cb:a4:b1:2f:1e:1b:7a:d2:66:74:47:13:12:5b:61:
         8a:93:cd:1f:50:54:4b:35:b4:e6:6e:fd:4f:18:4e:58:ff:47:
         89:f1:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:08 2026 by rpki-client