Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
File:                     cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft (raw, json)
Hash identifier:          UH3d/Rx2ROltgf6x+bYGwnb+SotKACOtnP2qKgqC+uU=
Subject key identifier:   FB:8B:63:4B:F4:28:50:D4:A3:E8:D9:2A:39:90:13:EA:3D:5D:51:4C
Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01
Certificate issuer:       /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
Manifest number:          01B4
Signing time:             Mon 01 Jun 2026 04:45:36 +0000
Manifest this update:     Mon 01 Jun 2026 04:45:36 +0000
Manifest next update:     Mon 08 Jun 2026 04:45:36 +0000
Files and hashes:         1: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl (hash: blCOpvlkVgopsXOG+R3JD4pBt1VT6FSxcGJ97FMFrq0=)
                          2: 0C708FB4C67E11EE87B34958C4F9AE02.roa (hash: k3TfFva0pazkCIRXdBLI4mn/25rKAlL7flbXoW+92L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl
                          rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
        Validity
            Not Before: Jun  1 04:45:36 2026 GMT
            Not After : Jun  8 04:45:36 2026 GMT
        Subject: CN=6a1d0e70-0cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:d6:2c:91:e8:84:83:19:d7:ff:7e:bd:2e:
                    e0:45:eb:5e:af:09:3b:71:21:27:ce:2b:d0:2b:e0:
                    93:eb:55:6e:23:4a:98:d9:4b:9f:47:8f:b8:85:dc:
                    1a:d4:79:f1:a7:a8:b0:0b:b2:74:98:c3:7b:75:c4:
                    8a:f7:ee:83:14:8f:c1:db:16:06:54:32:ae:0d:11:
                    3d:a9:2e:e0:ad:1a:8e:a4:26:1a:f0:9e:85:8d:b4:
                    4d:6e:92:be:2b:cd:3a:b2:f8:bb:4f:99:fe:c5:04:
                    01:a1:a6:8d:fe:43:a3:08:4a:a4:1d:58:e3:c9:d4:
                    a3:32:64:d4:13:e6:e1:4b:35:d1:c2:d5:a2:62:b0:
                    06:45:3e:1a:b9:e0:cf:38:66:3e:8a:24:10:3c:74:
                    fe:4c:ca:c5:99:fe:57:38:0b:1f:ac:4b:3d:ac:88:
                    1e:4b:bf:91:7f:7a:72:b6:a4:61:9b:5a:3a:40:9e:
                    6f:af:22:af:d7:9c:63:81:c7:1f:e1:15:8a:7b:87:
                    b4:d8:b7:2d:5a:4b:f5:64:e6:7d:05:1b:a6:85:b2:
                    77:c4:ca:f0:f9:b0:81:41:bf:2f:89:11:9e:03:d4:
                    23:93:1b:90:3a:e7:04:13:b3:f8:b7:bf:9e:8d:f2:
                    52:cb:26:f9:ba:b6:77:03:6a:ff:cf:37:8d:69:96:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8B:63:4B:F4:28:50:D4:A3:E8:D9:2A:39:90:13:EA:3D:5D:51:4C
            X509v3 Authority Key Identifier:
                keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:1a:85:2f:ff:9b:08:93:b0:4e:74:3e:24:19:e1:db:54:
         cc:ea:a5:88:70:7d:6c:d0:a1:8f:5e:59:7c:61:72:bf:f9:99:
         eb:7e:26:3b:8a:fc:33:c4:01:ff:b0:25:b1:7c:7d:c3:41:0f:
         05:2f:34:4d:e1:1e:49:60:d1:bb:5e:08:f5:db:7a:f9:fe:f0:
         48:63:48:0f:e9:18:ee:f1:9a:f4:fa:31:02:66:41:7f:56:96:
         cc:73:5e:ad:f4:cf:73:0b:9d:a6:22:07:3b:da:9b:38:96:37:
         06:06:96:7a:7b:39:2b:51:7b:a8:be:82:65:b2:3c:13:06:b6:
         b3:f0:10:0d:ab:c2:37:21:8c:8a:2d:fb:a5:91:08:f9:91:95:
         38:19:9a:67:c2:8f:27:60:2b:5d:a3:e1:50:a8:25:29:eb:09:
         83:a4:8f:8f:89:d7:8b:de:2b:41:67:f0:42:be:11:11:ce:5f:
         80:60:7a:eb:44:c9:1d:1a:0a:73:e9:14:1c:fb:f3:81:8b:99:
         de:1b:92:70:75:f2:7b:75:36:df:bf:2e:d1:2f:1b:5c:e3:17:
         de:f0:a8:44:9c:b8:0f:70:01:b2:c9:97:16:27:f3:28:40:83:
         28:77:d8:2b:2f:90:69:82:bf:5a:53:50:5c:16:a0:03:10:64:
         67:3e:f5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:44 2026 by rpki-client