Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
File:                     OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json)
Hash identifier:          G/bKmR7EEUWDp8Kn//KhpW6IGZYfnqz7XEX2PhL/ANs=
Subject key identifier:   C4:CE:A3:95:C6:48:F3:B0:51:67:67:47:21:42:D1:B6:8B:58:D5:AA
Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
Certificate issuer:       /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Certificate serial:       0749
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
Manifest number:          0737
Signing time:             Sun 14 Jun 2026 21:49:14 +0000
Manifest this update:     Sun 14 Jun 2026 21:49:13 +0000
Manifest next update:     Sun 21 Jun 2026 21:49:13 +0000
Files and hashes:         1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: iPVxStxuMIt738AILi+QWPFhX6CaSmprMhcAQ/lyMNY=)
                          2: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: dXlGJvljbOTRyiUKcUkx49BNHkG/wuJwIqZ/bk6onnk=)
                          3: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: cPeYwDdd00kAIVqMVLrluyBHMf7E83NSh4S72gm9IyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
                          rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 21:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1865 (0x749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
        Validity
            Not Before: Jun 14 21:49:13 2026 GMT
            Not After : Jun 21 21:49:13 2026 GMT
        Subject: CN=6a2f21da-ef78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:9e:92:b1:ce:f9:55:ce:f9:1c:50:72:48:
                    cc:01:52:45:78:13:e0:c9:d9:f8:43:21:dc:f7:65:
                    dc:cf:e2:a3:4c:43:cb:a3:61:01:1c:9f:77:aa:e6:
                    2f:5b:37:a2:b4:5a:a2:a2:02:cc:81:50:e4:65:8e:
                    94:89:88:b9:52:d6:41:20:ed:00:60:d2:86:d6:9a:
                    5d:72:0f:f2:e6:15:86:a0:0f:1c:7e:95:35:e3:95:
                    1c:12:37:a3:6c:02:64:cf:9f:ed:6e:41:e3:97:b9:
                    ac:d9:0c:0b:b7:26:c8:83:41:1b:dd:20:4c:c5:3c:
                    4a:05:c6:06:04:65:b5:63:3b:c2:71:3e:ce:88:a3:
                    94:31:af:2c:20:39:23:70:bb:7e:4d:e9:a0:ac:d5:
                    46:b0:6e:3b:55:0b:0c:0b:b4:e2:16:26:8a:4d:a3:
                    64:bf:bb:3e:e2:c1:e1:45:16:8f:84:8f:17:14:80:
                    3f:76:67:fe:bf:65:0c:f4:19:ba:70:42:75:13:e8:
                    c9:f9:55:3d:fb:3e:51:74:81:71:5a:27:d8:78:3e:
                    5d:28:34:41:f0:c4:14:66:88:e2:f4:77:09:1f:b6:
                    16:cb:bf:41:10:14:f3:6e:17:80:3d:9f:20:6b:94:
                    f3:4b:20:72:55:b0:4d:71:70:df:87:25:2f:61:f9:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CE:A3:95:C6:48:F3:B0:51:67:67:47:21:42:D1:B6:8B:58:D5:AA
            X509v3 Authority Key Identifier:
                keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:ba:94:e7:91:da:c2:db:8a:2e:c8:69:a2:f3:68:35:00:
         6a:52:ad:c7:14:b4:f8:22:02:05:a6:07:af:fd:99:2e:b3:b2:
         ac:0e:7d:68:61:dc:70:87:c3:8f:21:e2:11:f7:8d:9d:55:14:
         e4:85:de:83:5f:c9:ef:fa:1e:a5:ea:ad:4e:40:9b:48:ee:bd:
         7f:57:e1:07:f4:ff:ef:dc:e5:0b:02:9a:ce:81:89:60:5c:03:
         56:ff:87:61:08:35:f6:77:b7:ea:29:e0:29:e1:ce:47:b4:94:
         00:e4:09:bd:1d:15:cf:9b:68:b8:dc:6e:46:f6:5f:7e:51:f9:
         20:53:31:f3:ff:28:59:29:9e:fa:2f:a0:13:03:52:42:d1:c8:
         a6:a4:53:80:c9:fd:d9:91:7f:6c:fd:56:a1:4e:e9:8b:52:77:
         97:c8:34:fc:de:e9:61:a2:61:6d:e9:13:61:e1:37:39:a7:ed:
         82:fd:49:52:40:2f:39:47:50:5a:16:eb:7d:5e:45:65:4d:d7:
         89:ce:a6:a3:82:d9:f6:04:f3:78:a6:6c:85:4e:d4:f5:64:e5:
         98:c5:67:d6:9f:6e:41:f8:aa:21:fd:79:27:91:bf:8b:ec:06:
         f5:b3:cd:66:61:f9:bf:69:16:a0:a9:c1:13:a3:fd:3e:59:08:
         c8:ca:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:34:42 2026 by rpki-client