Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
File:                     OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json)
Hash identifier:          7WuJ/LX2HT8vBqXIjFWS2o+EEI1iKfKQqzbt0kG12Do=
Subject key identifier:   10:88:12:83:40:7F:3F:F7:A1:C3:A5:94:FE:C4:3B:0F:AA:AF:DE:BF
Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
Certificate issuer:       /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Certificate serial:       13D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
Manifest number:          2547
Signing time:             Wed 20 May 2026 16:56:02 +0000
Manifest this update:     Wed 20 May 2026 16:56:02 +0000
Manifest next update:     Wed 27 May 2026 16:56:02 +0000
Files and hashes:         1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: aio6OdCWsh8xq8HJBK0Au/R5+L1T9eocB5Tgwg0IWPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl
                          rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5079 (0x13d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
        Validity
            Not Before: May 20 16:56:02 2026 GMT
            Not After : May 27 16:56:02 2026 GMT
        Subject: CN=6a0de7a2-2ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:e8:99:0f:80:cd:3d:39:8e:09:1d:e3:a3:
                    c2:14:80:c5:0b:11:9e:e6:21:45:67:ff:2c:75:a7:
                    11:73:4d:1c:d4:eb:91:27:a9:ba:c5:95:1a:3b:33:
                    6d:e7:4d:aa:9e:24:85:98:00:48:e9:a2:5f:78:d8:
                    c0:5e:5b:75:09:1b:9d:78:bf:a0:51:74:1b:73:84:
                    d8:96:20:cf:c4:09:74:7e:4b:15:1f:36:3d:92:90:
                    09:4a:7d:97:bd:12:37:8e:e5:13:8c:19:aa:40:1f:
                    45:29:4f:83:03:87:c6:ec:ee:8f:ce:38:04:d0:b6:
                    3e:3d:2a:0f:bb:35:4b:d3:42:84:59:49:42:d9:17:
                    f4:1d:1c:d0:7b:42:12:d9:40:69:5c:13:24:9e:87:
                    86:d3:bc:67:f7:88:c0:9d:c9:84:3e:7b:0b:c3:b5:
                    2d:9d:63:b8:cf:a4:fe:62:ac:fc:14:23:d1:bf:58:
                    57:19:12:78:67:f3:11:95:ad:63:49:88:1a:ec:4b:
                    84:52:06:6e:d0:5a:d2:8d:1c:73:75:13:68:8f:c6:
                    6c:1d:66:27:7b:b9:b1:e6:12:a6:19:29:7a:71:4c:
                    99:3c:36:2b:34:29:68:8c:66:24:63:a6:ea:59:d1:
                    c8:29:77:4b:35:e7:a3:49:cb:75:bb:fe:3f:6b:04:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:88:12:83:40:7F:3F:F7:A1:C3:A5:94:FE:C4:3B:0F:AA:AF:DE:BF
            X509v3 Authority Key Identifier:
                keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:73:59:e8:9b:98:e2:3c:bc:76:07:f3:fb:5f:0b:24:46:c0:
         f9:31:3b:8c:0f:21:5e:2b:fa:9e:62:6b:13:63:2e:de:0b:43:
         d2:6e:9e:45:5c:75:99:1b:dd:4b:5e:1e:13:ce:e0:32:ad:3a:
         ff:a0:cf:66:c1:72:66:26:2c:35:dc:8e:ce:9f:a9:08:d8:4e:
         bd:11:85:73:85:d7:24:a1:b7:aa:51:4a:e9:d7:b0:b7:a7:cc:
         df:43:c1:41:68:9c:5d:2e:81:97:d9:ce:1d:e6:a9:23:1e:d1:
         d1:0d:0d:4d:f4:f4:5e:13:40:e8:53:0f:60:4e:67:d0:56:55:
         a5:9f:2e:2f:de:53:98:b1:95:15:be:69:3e:bc:d0:35:d8:09:
         03:56:57:4a:78:76:55:96:3c:24:b1:6f:50:b0:2a:7d:75:25:
         93:c6:d7:77:a0:e3:d5:22:8f:03:8a:ab:09:55:55:b7:ab:a8:
         da:a2:ae:5f:f9:b9:3a:38:e7:98:0c:ad:6d:e4:85:df:1d:ae:
         13:29:16:1e:30:4c:1c:cf:42:a4:e9:7f:66:2e:40:8b:a3:51:
         a7:7f:b5:32:31:22:6f:36:47:05:af:f7:a9:a9:33:2e:c9:ce:
         8a:21:42:e1:78:e0:78:3f:a9:c5:9e:c3:75:8c:9f:88:34:cb:
         80:70:a7:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjAyMkYxMTAvBgNVBAUTKDNBRDhDMERBNEI1RTEzNDNBMzg0NTQ0QjY0NDAxMTg4
NTI2MEZGMDcwHhcNMjYwNTIwMTY1NjAyWhcNMjYwNTI3MTY1NjAyWjAYMRYwFAYD
VQQDEw02YTBkZTdhMi0yYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwIbomQ+AzT05jgkd46PCFIDFCxGe5iFFZ/8sdacRc00c1OuRJ6m6xZUaOzNt
502qniSFmABI6aJfeNjAXlt1CRudeL+gUXQbc4TYliDPxAl0fksVHzY9kpAJSn2X
vRI3juUTjBmqQB9FKU+DA4fG7O6PzjgE0LY+PSoPuzVL00KEWUlC2Rf0HRzQe0IS
2UBpXBMknoeG07xn94jAncmEPnsLw7UtnWO4z6T+Yqz8FCPRv1hXGRJ4Z/MRla1j
SYga7EuEUgZu0FrSjRxzdRNoj8ZsHWYne7mx5hKmGSl6cUyZPDYrNClojGYkY6bq
WdHIKXdLNeejSct1u/4/awTy7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCIEoNA
fz/3ocOllP7EOw+qr96/MB8GA1UdIwQYMBaAFDrYwNpLXhNDo4RUS2RAEYhSYP8H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB
N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUwT2poRlJMWkVBUmlGSmdf
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL090akEya3RlRTBPamhGUkxaRUFSaUZKZ193Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUw
T2poRlJMWkVBUmlGSmdfd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA8HNZ6JuY4jy8dgfz+18LJEbA+TE7jA8hXiv6nmJrE2Mu3gtD0m6eRVx1mRvd
S14eE87gMq06/6DPZsFyZiYsNdyOzp+pCNhOvRGFc4XXJKG3qlFK6dewt6fM30PB
QWicXS6Bl9nOHeapIx7R0Q0NTfT0XhNA6FMPYE5n0FZVpZ8uL95TmLGVFb5pPrzQ
NdgJA1ZXSnh2VZY8JLFvULAqfXUlk8bXd6Dj1SKPA4qrCVVVt6uo2qKuX/m5Ojjn
mAytbeSF3x2uEykWHjBMHM9CpOl/Zi5Ai6NRp3+1MjEibzZHBa/3qakzLsnOiiFC
4XjgeD+pxZ7DdYyfiDTLgHCnDA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:07 2026 by rpki-client