Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File:                     oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier:          Cg8jci6MztAvOKxYP6zIA/wC4B0VC1W9mLJeJ4okOC4=
Subject key identifier:   1B:24:CB:3D:78:27:DA:C0:86:DC:33:DA:05:90:EF:F7:26:58:81:5A
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       02CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number:          024E
Signing time:             Wed 17 Jun 2026 03:00:15 +0000
Manifest this update:     Wed 17 Jun 2026 03:00:15 +0000
Manifest next update:     Wed 24 Jun 2026 03:00:15 +0000
Files and hashes:         1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: VcqfI3f1vZQEDlefKCKsaqg4t08SABXxre0jYnMDe5s=)
                          2: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: 2Q8RbjE4mHztepKARc4PS5hTmcTmIbeZgaFHVD5zDkI=)
                          3: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: Q8t2w5Bm1s2xc9u7zUHx3tOoqfxW1aDc4bjuc++C4OA=)
                          4: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: RTqg2OCl0LqycU7qMptZ5Map6Fo5tJ4chjvgrZEsq9k=)
                          5: FAC35354610611EFB6324A30C4F9AE02.roa (hash: MGWYl6jAGMEWuZAwwqj4daUxlHs2nlJcqeKspxAgpmM=)
                          6: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: +F6+Kdo4UMUeEVd3rJTRenZVLka+775uqmL3KcaRYis=)
                          7: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: BYrT3gSpcFGf66F7OgOWFpwB6S9uu2bRl3KZJFEG7yU=)
                          8: 49FC44B0162A11F18FE9298B373D8C67.roa (hash: R7i2wINlOt7SeQns86jhCdT1p2Hh0s8++plJe6v+zKs=)
                          9: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: k+dog8xYCDbvQISDCzANlp1URQHH5+0FGUiTGUQ/+MA=)
                          10: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: qsvf0Wviztrgpdzbp+Cc9P5Q6xcagz546uIcx9HEnws=)
                          11: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: h7BGEXdT8/fJrbtPEuzFrIHw8A3Ou1Gq593O22LjGdE=)
                          12: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: DTPQtprWS1asx+9dy98489mAliPdZ8NJ5NrMYvQZjdY=)
                          13: BA917E94D65F11F090E652930BB43E13.roa (hash: 4wRkQ2HciJJaW6c/wbWf1lLtY3RIHkE/fK+1Eii/r6E=)
                          14: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: HPRG3Br1Z7/8i0RZTaXdt0D3jVwVisBRSTFO73V9j6o=)
                          15: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: dnF+y2zzWkZBb9zE5OkhyJUIlUqOH1249DrB3ACuXqc=)
                          16: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: wUmrURd/1BjfBH6f7MyGfeZya3xCTYfDafUNIl+rKO0=)
                          17: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: bTEfr6e3UYTJtEKaPYWG9RTqbYRlEbEpek9SXbZLbzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 17 03:00:15 2026 GMT
            Not After : Jun 24 03:00:15 2026 GMT
        Subject: CN=6a320dbf-d34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:8f:e9:c0:b1:a2:1d:94:ee:43:b3:85:19:
                    d9:f9:da:69:94:cb:e5:a2:58:37:37:e5:9c:c3:4a:
                    fd:47:59:5d:a2:12:e2:40:d6:0c:da:a6:4a:82:2a:
                    97:b4:7f:28:a0:08:43:9e:3f:91:cf:ed:d3:35:a7:
                    be:cc:ef:ec:2c:66:df:49:41:ee:5d:2e:e1:76:f2:
                    6a:60:5a:3e:f4:32:24:01:2b:98:ca:01:8c:7a:37:
                    bf:65:24:06:11:52:29:b9:bd:52:28:58:48:67:b6:
                    fc:bc:46:a7:2d:74:99:90:2a:85:1f:5d:ed:ea:5e:
                    f6:20:f5:48:14:0f:69:08:ac:f5:e9:54:87:de:5f:
                    f3:7a:45:1a:c6:7c:3b:fb:99:af:19:1e:ab:96:5b:
                    a1:4c:69:76:9c:66:a7:cc:e7:60:21:13:25:a0:a8:
                    de:e2:68:db:76:e4:93:29:1b:90:d5:74:a4:bb:73:
                    5e:21:db:27:c2:38:6c:ee:97:ce:5b:3a:60:31:c5:
                    db:72:d3:81:e5:a5:02:77:dc:e4:c9:c3:a9:ac:ff:
                    69:76:61:34:26:87:63:6b:a1:8a:49:d7:74:3c:5b:
                    ff:44:c7:47:1f:ca:dd:b6:66:a9:3c:3e:02:14:88:
                    92:50:d0:b6:ce:81:27:31:51:e7:21:3c:8a:9a:dd:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:24:CB:3D:78:27:DA:C0:86:DC:33:DA:05:90:EF:F7:26:58:81:5A
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f9:86:4e:b0:9e:c1:c1:39:5a:06:3b:90:8e:f7:e3:86:e2:
         ae:ba:fe:bd:e2:48:21:0e:32:37:16:e4:d8:a1:2a:b4:c8:b6:
         27:62:c6:1d:5d:4e:00:9d:86:7c:77:d3:cf:25:dd:6f:83:ea:
         e4:59:0c:3a:9d:e9:b0:a2:43:00:09:0c:8f:6f:87:e8:3a:22:
         cc:4f:59:91:e1:9c:94:08:5c:f3:05:5e:d5:bd:57:c6:1f:ec:
         2e:a9:5f:ca:6e:7a:27:a0:01:0e:18:02:91:8f:b8:b8:cb:54:
         62:ad:60:9e:a6:b7:4c:33:58:23:24:58:2e:38:2c:72:e7:03:
         f4:05:dc:e6:28:85:09:d8:2a:c8:27:2b:4b:00:46:df:f9:d9:
         3f:21:6a:6d:b0:28:f5:2b:d7:f1:4a:48:d1:70:ae:b9:61:e2:
         d8:d0:62:9f:58:64:30:43:63:5f:7d:67:bf:22:3b:e0:d9:af:
         43:e6:26:64:91:7f:e5:b7:bd:76:8c:7a:f2:45:80:93:c0:8e:
         4f:2f:92:3c:15:3e:4c:13:8a:d4:26:54:8c:ba:65:f8:09:4a:
         85:c3:be:75:97:b5:d0:a3:95:c0:53:88:0c:c4:0f:b7:11:f9:
         22:a6:87:95:06:45:9b:62:2f:8b:50:c7:ff:ef:13:8b:40:ab:
         39:27:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 19:20:45 2026 by rpki-client