Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
File:                     oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json)
Hash identifier:          PF0hb0Tz8pgEq9QAjh+DU1voYZ1T4tCHdknPxOX0dic=
Subject key identifier:   4B:53:A8:50:5F:6B:8F:FE:B9:4D:BD:6A:B6:C6:A5:6F:CE:5C:1E:E9
Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
Certificate issuer:       /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
Manifest number:          01C0
Signing time:             Tue 23 Jun 2026 04:02:30 +0000
Manifest this update:     Tue 23 Jun 2026 04:02:30 +0000
Manifest next update:     Tue 30 Jun 2026 04:02:30 +0000
Files and hashes:         1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: NeM1VXu3GePwIMzUfvWJYBTh0kpBEKlk709bMUaBM4I=)
                          2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: Gu3gLu/Zq+fJHK0nLLCq05QCFvC/IzAtjG0pre/fGVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
                          rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 04:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
        Validity
            Not Before: Jun 23 04:02:30 2026 GMT
            Not After : Jun 30 04:02:30 2026 GMT
        Subject: CN=6a3a0556-3220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:f8:3a:06:5b:18:ee:4c:00:fd:c7:df:2d:
                    1c:13:59:27:4b:b1:07:f8:c0:8b:ee:41:a2:8b:e1:
                    27:b1:11:28:e8:73:2a:4b:75:43:08:ed:04:1a:1b:
                    76:16:13:7d:1f:7b:ff:0e:1d:b7:bf:eb:58:9e:91:
                    ed:20:99:da:54:89:b6:81:8f:a8:77:8f:05:9e:0c:
                    99:bf:db:1b:e6:c4:ee:34:08:7e:81:39:bd:db:39:
                    1c:95:7a:b3:85:f0:9a:67:a3:4d:b6:ea:12:4e:bf:
                    44:23:17:46:3e:af:ba:25:c6:e6:7e:7a:8b:4b:ee:
                    76:3e:92:b0:b8:f2:93:31:2a:5f:de:3f:87:04:b4:
                    19:dd:4d:f8:de:64:ed:c1:34:50:97:df:94:13:aa:
                    17:51:e6:da:76:84:51:d8:42:11:48:12:33:a7:23:
                    39:bf:63:63:d1:a2:2c:f4:4d:7e:e4:9b:1b:54:46:
                    1c:ef:ea:fa:60:06:a4:0f:a1:47:61:02:d2:9c:36:
                    2a:6f:f6:33:66:f5:32:b1:db:2e:d8:f1:90:38:4c:
                    82:56:4e:18:3c:ca:21:4b:c8:e7:fa:e2:69:13:33:
                    ff:bd:75:a4:2c:bf:cb:94:f1:a5:17:af:ec:40:8c:
                    f2:0a:6e:cf:7f:c8:4a:d3:28:a8:8c:a6:7c:d8:35:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:53:A8:50:5F:6B:8F:FE:B9:4D:BD:6A:B6:C6:A5:6F:CE:5C:1E:E9
            X509v3 Authority Key Identifier:
                keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c3:a5:be:01:9b:78:7a:65:c9:36:31:8d:c5:1c:96:fa:9f:
         ea:6c:95:e8:90:a5:ab:dd:83:e4:6c:48:7a:f9:fb:bf:c9:ef:
         27:e3:e6:d2:c2:56:1a:08:13:ca:6c:5f:92:13:a9:ac:92:c9:
         4e:15:11:dc:44:73:61:00:25:90:66:a3:e5:1d:d7:fe:a3:d3:
         f8:a4:48:e7:04:2e:58:a2:3b:f1:53:4e:30:f5:8a:ee:5d:c7:
         6e:bd:55:53:36:3c:0e:ba:b5:95:f0:a6:86:88:fb:1b:88:a4:
         3b:ea:1d:3d:a0:d1:8d:92:65:1c:4e:cb:54:79:00:43:28:41:
         03:1a:43:88:31:95:58:f5:0c:c0:7a:36:a1:04:52:c7:66:37:
         6a:6d:c3:b6:78:bf:43:94:95:12:90:62:c6:8b:a2:49:4b:a9:
         8c:22:f5:0d:b7:ea:84:c1:6f:90:0b:37:d7:81:64:37:e3:a5:
         91:35:42:56:ae:3b:73:3a:34:6e:30:69:c0:3f:09:cf:80:eb:
         f5:91:a9:7b:81:b9:96:44:1a:ba:eb:9b:5e:52:6c:3b:d6:3c:
         44:aa:b6:f7:93:53:3b:a0:93:97:03:3e:35:fe:a3:2c:cd:ca:
         82:b8:28:88:cb:53:9f:c4:a1:fd:9c:cf:ea:89:e0:60:18:95:
         af:85:33:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD
MDU4OUEzRkYwHhcNMjYwNjIzMDQwMjMwWhcNMjYwNjMwMDQwMjMwWjAYMRYwFAYD
VQQDEw02YTNhMDU1Ni0zMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApxH4OgZbGO5MAP3H3y0cE1knS7EH+MCL7kGii+EnsREo6HMqS3VDCO0EGht2
FhN9H3v/Dh23v+tYnpHtIJnaVIm2gY+od48FngyZv9sb5sTuNAh+gTm92zkclXqz
hfCaZ6NNtuoSTr9EIxdGPq+6JcbmfnqLS+52PpKwuPKTMSpf3j+HBLQZ3U343mTt
wTRQl9+UE6oXUebadoRR2EIRSBIzpyM5v2Nj0aIs9E1+5JsbVEYc7+r6YAakD6FH
YQLSnDYqb/YzZvUysdsu2PGQOEyCVk4YPMohS8jn+uJpEzP/vXWkLL/LlPGlF6/s
QIzyCm7Pf8hK0yiojKZ82DWFzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtTqFBf
a4/+uU29arbGpW/OXB7pMB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw
OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTJDMS83RkZERkI2NEMwOUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RP
dzJqSGx0Slh3Nm5BV0pvXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgsOlvgGbeHplyTYxjcUclvqf6myV6JClq92D5GxIevn7v8nvJ+Pm0sJWGggT
ymxfkhOprJLJThUR3ERzYQAlkGaj5R3X/qPT+KRI5wQuWKI78VNOMPWK7l3Hbr1V
UzY8Drq1lfCmhoj7G4ikO+odPaDRjZJlHE7LVHkAQyhBAxpDiDGVWPUMwHo2oQRS
x2Y3am3Dtni/Q5SVEpBixouiSUupjCL1DbfqhMFvkAs314FkN+OlkTVCVq47czo0
bjBpwD8Jz4Dr9ZGpe4G5lkQauuubXlJsO9Y8RKq295NTO6CTlwM+Nf6jLM3Kgrgo
iMtTn8Sh/ZzP6ongYBiVr4Uznw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:45 2026 by rpki-client