Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
File:                     oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft (raw, json)
Hash identifier:          3GFG2RV/5rZ71SUZmXMbS3ByCqhrbP1ZCz4J7KoUnKE=
Subject key identifier:   35:EC:66:AC:92:69:04:BD:63:FC:D7:32:D8:18:7D:B5:B4:B1:CE:73
Authority key identifier: A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F
Certificate issuer:       /CN=A9159558/serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
Manifest number:          0F
Signing time:             Thu 21 May 2026 09:14:07 +0000
Manifest this update:     Thu 21 May 2026 09:14:06 +0000
Manifest next update:     Thu 28 May 2026 09:14:06 +0000
Files and hashes:         1: oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl (hash: vl61W4QnzDxV8YNcsDuqevatCTeKX1+7QikcPQutMr8=)
                          2: C8482E4C435C11F18454B6E5B6833773.roa (hash: kpOLgyl4KEGTvF971USy71Gh3dYWWDj9RJbZtYOEjJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl
                          rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159558, serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
        Validity
            Not Before: May 21 09:14:06 2026 GMT
            Not After : May 28 09:14:06 2026 GMT
        Subject: CN=6a0eccdf-4fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:33:83:e1:ba:24:a4:a7:68:97:5b:e2:1f:
                    63:4b:d6:0f:43:3e:db:dc:2f:93:cd:bd:e7:19:9d:
                    c4:de:4c:36:68:4e:f4:4f:58:95:66:78:7c:69:cd:
                    af:dd:4a:49:6e:fe:fa:1e:ab:c0:a0:d1:e1:ed:01:
                    15:c9:bc:5e:bf:0d:23:23:a1:ae:e1:da:fe:af:ff:
                    31:0e:78:3e:89:da:53:66:42:b9:05:e4:2f:1f:61:
                    91:63:f9:b0:8d:5d:99:35:5b:35:f9:65:e6:85:73:
                    db:fa:b8:40:91:1f:12:e3:f1:b2:3f:80:b9:ca:0d:
                    52:85:a0:4f:73:e0:da:15:48:71:f1:d8:51:6e:93:
                    df:d1:b4:e5:82:27:6c:d1:c0:ea:e6:8a:36:b2:12:
                    af:82:2a:d8:85:0f:f6:79:cd:b3:f1:ef:26:7b:2d:
                    ed:a3:45:c2:e6:f5:44:87:1d:a8:1f:46:40:95:d3:
                    36:35:81:2e:6f:e8:74:a0:0c:0c:44:c8:d4:ff:eb:
                    e7:df:40:a6:a2:1a:7d:8f:9c:37:e3:27:43:d7:d4:
                    e0:2b:f9:f5:df:0a:a8:a8:f8:93:99:c5:6a:b8:d4:
                    2e:a1:e7:0c:f4:1c:0f:89:2a:b1:69:36:c1:86:6d:
                    b6:d9:d7:cb:4e:51:7c:1a:f1:d9:bc:37:3a:1a:ec:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EC:66:AC:92:69:04:BD:63:FC:D7:32:D8:18:7D:B5:B4:B1:CE:73
            X509v3 Authority Key Identifier:
                keyid:A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7a:f7:84:e1:91:3e:d9:c9:21:0c:8f:17:e4:5f:d3:26:c6:
         47:fa:75:63:99:c6:61:b1:c0:07:00:47:79:4b:8d:8b:bd:02:
         7e:5f:94:85:db:cf:62:5a:aa:89:4e:0b:70:48:68:b2:55:f0:
         de:34:2f:a2:02:ec:d0:62:51:a8:c9:2f:ac:d9:3d:13:54:88:
         e9:58:98:d2:9c:6c:43:87:f6:3d:46:ce:fa:00:2e:a9:60:33:
         4b:5a:45:ce:98:8e:c7:d3:1c:ac:d6:b2:4f:1d:e5:9b:5f:f0:
         ac:60:44:bc:6f:4d:b4:b2:bb:30:2e:72:e8:d4:82:a8:9e:f0:
         a2:c2:4e:b1:bc:8b:67:83:bf:85:b6:aa:46:d5:8d:a7:f7:01:
         ee:c6:b2:b7:3e:99:a7:b3:56:81:85:6c:7f:f3:aa:93:04:73:
         a1:f5:ef:21:2e:65:de:bf:a9:5b:a1:81:3b:d5:a8:0f:17:e1:
         7e:fd:3e:0b:6e:59:1c:c0:1f:d6:56:ed:ee:d6:6f:ef:9f:8f:
         ec:d8:b2:b5:ed:79:9d:70:2f:87:bc:93:da:3d:7a:42:3a:92:
         04:4e:33:2a:08:e3:c1:82:57:9b:53:c9:3a:41:09:a4:c2:6b:
         dc:c1:dc:f4:e6:0d:c1:8d:c1:71:56:e9:6b:2d:11:22:a5:7e:
         3f:f2:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:32:56 2026 by rpki-client