Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
File:                     3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json)
Hash identifier:          w1Qm+YkVvgm6xKxCpLGQ/8HkyeFUUYvB5rebHTM++d8=
Subject key identifier:   DC:27:C9:92:9A:24:BA:D1:12:DD:19:9F:A1:D7:9B:73:4C:50:BA:AF
Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
Certificate issuer:       /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
Manifest number:          C7
Signing time:             Mon 01 Jun 2026 07:41:15 +0000
Manifest this update:     Mon 01 Jun 2026 07:41:15 +0000
Manifest next update:     Mon 08 Jun 2026 07:41:15 +0000
Files and hashes:         1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: pb1jZhqQheMXub/g0f6Zj9cMZ7hrD6BI5EXnXcOZQ7U=)
                          2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: DGdwfmJXcUZmyhZmIEATFGf53ujcTKbq+bFHiQ/LYS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
                          rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
        Validity
            Not Before: Jun  1 07:41:15 2026 GMT
            Not After : Jun  8 07:41:15 2026 GMT
        Subject: CN=6a1d379b-2648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:86:8b:0d:ad:bf:f1:c2:3b:0e:6c:71:5f:
                    04:8b:2b:1a:ba:47:ea:5b:95:e4:87:96:08:78:74:
                    4d:8d:02:7c:32:2f:3d:52:fc:7b:e6:d8:de:37:53:
                    9b:03:b3:ae:e6:ad:1d:73:99:39:ea:b4:91:4b:52:
                    bb:9c:be:f2:45:15:35:59:64:b2:62:dd:73:ee:49:
                    ca:d5:14:75:90:c3:8e:32:41:71:d9:5f:ed:03:23:
                    1f:40:4b:66:be:0d:a2:1f:81:88:bc:f0:42:ea:fd:
                    52:d4:bb:3c:7e:c1:3a:6b:e2:51:c9:c8:68:ab:90:
                    90:3b:c5:cf:7d:82:32:e2:9f:7b:ab:c2:af:3e:e4:
                    ab:07:5e:b3:80:54:24:a1:45:e2:04:95:d1:1d:a5:
                    ab:4f:12:45:70:7b:6c:bb:59:e0:ca:f3:1c:ef:3f:
                    a9:9f:79:69:e3:5d:5e:55:c9:3a:be:d0:48:98:c1:
                    c5:ac:e7:02:37:1f:74:c2:2c:27:71:aa:b7:31:4d:
                    8e:28:97:89:2b:8a:5b:2a:b9:2e:b6:e6:a2:82:30:
                    bd:72:d4:ed:62:ec:9e:1b:dd:64:70:97:47:4b:2b:
                    27:38:3e:aa:30:6a:b2:99:0e:43:2a:d7:75:95:6e:
                    73:2a:1a:19:2a:2f:6a:13:44:eb:13:10:4a:2b:3c:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:27:C9:92:9A:24:BA:D1:12:DD:19:9F:A1:D7:9B:73:4C:50:BA:AF
            X509v3 Authority Key Identifier:
                keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:89:39:68:a2:67:70:a0:1c:08:f7:3c:59:41:5f:94:c6:
         b7:a4:e1:44:c9:ed:fa:d7:9e:22:7a:00:bf:d7:65:5f:8d:ad:
         5e:b1:6f:d9:ed:6c:d3:6e:f5:50:99:73:c0:10:dd:b8:a6:fa:
         fa:81:a7:24:ae:f9:6e:fb:af:1c:d7:3d:09:c8:92:ba:75:77:
         f4:23:8b:e0:49:bb:76:b0:cb:c7:72:77:56:4b:0d:f5:3a:dd:
         05:15:18:15:dd:77:d4:14:f0:83:1f:20:d9:46:88:68:d9:4d:
         68:44:3f:e6:4f:74:6c:34:99:ee:c4:7e:5f:7e:8c:bd:0c:0c:
         3c:57:da:59:62:15:4e:de:28:0b:78:20:f5:94:b8:a4:63:fc:
         5e:0e:32:e4:86:eb:75:dd:58:0c:93:7f:7c:51:e6:f9:99:cd:
         19:a9:f4:b8:eb:4e:2b:60:79:8f:ce:f4:b2:47:88:fd:dc:b4:
         bb:b3:7b:aa:78:69:70:6d:c2:7e:6e:47:b3:10:d2:88:34:2d:
         84:cc:80:ef:96:ec:dd:1d:97:e5:f7:01:c4:70:f5:19:f0:a5:
         8a:61:5f:1e:47:19:ec:28:de:73:23:8b:16:fd:80:a3:9b:19:
         08:df:e4:1e:ec:a0:d7:79:0f:e1:83:c8:ab:72:64:d6:79:63:
         29:36:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:14 2026 by rpki-client