Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File:                     mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier:          68ozBi2jYDG8PMvJ9m0g1wqVf7mhLbdCBHe4M/6OknY=
Subject key identifier:   69:83:82:07:42:B9:33:1B:F2:A1:E7:82:12:5A:32:E5:BA:EE:68:0D
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer:       /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial:       081F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number:          0811
Signing time:             Sun 31 May 2026 21:48:32 +0000
Manifest this update:     Sun 31 May 2026 21:48:32 +0000
Manifest next update:     Sun 07 Jun 2026 21:48:32 +0000
Files and hashes:         1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: rkwCFymfCLmWViyWt2urPPWAZbS+0zUzW5Ny6qG0UKg=)
                          2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: SEGLZJRsG8d/oF/uE/MLRtBE/snz3gSEd4tQtKL1yRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 21:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
        Validity
            Not Before: May 31 21:48:32 2026 GMT
            Not After : Jun  7 21:48:32 2026 GMT
        Subject: CN=6a1cacb0-a4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:01:7d:1b:4d:1a:6c:32:27:8a:16:71:07:
                    e5:59:4b:a8:0f:3a:b7:75:ec:67:a2:a4:2d:fa:6d:
                    df:23:13:74:c4:17:16:5a:5a:10:6d:8d:a9:e8:88:
                    15:b5:b7:b8:da:96:4a:0e:04:d2:7e:d0:08:f1:32:
                    8c:27:63:11:1c:2c:50:a8:c7:8b:0a:c6:f6:3a:f2:
                    5c:b2:03:44:75:8b:33:99:a6:ba:69:21:b0:dc:9c:
                    70:d7:75:0c:a6:3f:5b:54:c9:d7:40:6c:98:85:84:
                    94:66:75:f1:f7:89:ea:a7:5f:f4:e1:33:f2:89:05:
                    1c:7a:71:32:aa:a6:db:47:6d:38:8d:e8:32:e4:9e:
                    5e:2f:63:7b:e3:df:be:48:9b:4f:f3:42:0b:26:00:
                    74:69:61:ef:c1:6a:6e:a5:69:4f:58:70:03:02:87:
                    9e:5f:fa:1d:08:94:22:b2:46:a8:07:89:0c:38:29:
                    67:ca:59:27:6b:90:bf:91:c0:ac:b9:8e:15:0f:a0:
                    4e:a3:9a:61:cc:ac:ba:53:79:9f:7e:1e:e8:78:c5:
                    b7:99:2e:fe:d7:21:7d:99:6e:b0:da:90:d0:10:61:
                    d4:64:cd:09:ee:5e:b5:34:fc:ea:43:16:4a:09:c8:
                    70:07:2c:34:b1:3d:53:cc:bb:f4:7e:47:60:89:6b:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:82:07:42:B9:33:1B:F2:A1:E7:82:12:5A:32:E5:BA:EE:68:0D
            X509v3 Authority Key Identifier:
                keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ef:ed:2b:8d:92:d0:39:12:2d:23:ad:45:72:a2:83:c6:9c:
         0f:db:b0:ce:94:46:0a:cd:ca:46:e3:fb:be:78:9f:f3:48:0f:
         f7:b8:34:5b:13:5a:68:f1:2b:71:af:d5:9c:b4:08:26:dd:1d:
         c9:e2:ac:b6:2b:f3:35:ee:dc:c6:30:7f:16:a5:d0:94:7e:68:
         8c:8d:48:4a:05:48:d1:bd:34:9e:82:56:77:bf:91:45:62:57:
         99:d4:8e:14:d2:51:b2:47:d2:34:59:2e:ee:2d:6d:9b:f8:fb:
         95:74:c8:30:5c:34:56:c4:db:ae:b6:11:cc:25:56:c6:29:1f:
         9d:68:62:71:c0:56:c6:a3:79:b2:20:b4:e4:8e:84:c5:89:48:
         8b:e7:89:4f:91:04:92:8e:40:ba:78:bd:d6:06:41:10:1d:0a:
         4c:38:18:f0:89:a7:5c:5c:60:b3:f2:6a:9e:e5:a4:4f:2d:48:
         45:e7:bb:d4:34:4c:6f:40:53:60:04:6a:7f:ba:0a:f4:83:99:
         07:ae:0e:4d:4a:80:34:dc:57:40:da:b6:22:90:a0:90:c8:c0:
         31:e2:ab:86:2d:89:16:cb:d4:c6:dc:7f:25:b8:e5:51:bc:9d:
         08:bc:06:ca:19:47:21:e7:12:4f:71:9d:87:a0:aa:4a:35:90:
         e8:b3:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:17:05 2026 by rpki-client