Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
File:                     OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json)
Hash identifier:          PrlyYi7y4Fs1X5f1sRVwkJVTJ4nORIrL1t0iRj0q6hY=
Subject key identifier:   73:4F:76:F6:4F:B5:ED:84:81:6F:CE:B4:3D:A7:BE:B9:65:30:E7:BA
Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
Certificate issuer:       /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
Certificate serial:       24A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
Manifest number:          617B
Signing time:             Tue 02 Jun 2026 14:15:17 +0000
Manifest this update:     Tue 02 Jun 2026 14:15:17 +0000
Manifest next update:     Tue 09 Jun 2026 14:15:17 +0000
Files and hashes:         1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: aG5JcIFz+Y/hiuTcD7Cp4QirneqhIp2OI7kSISIsokc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 14:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9383 (0x24a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
        Validity
            Not Before: Jun  2 14:15:17 2026 GMT
            Not After : Jun  9 14:15:17 2026 GMT
        Subject: CN=6a1ee575-82f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:73:5a:f0:97:10:12:cf:67:11:da:19:91:8c:
                    fa:13:e2:b4:31:86:10:d1:a9:a6:ed:5a:63:ad:54:
                    0c:41:b8:f5:30:77:30:1c:8b:b9:0f:7c:90:be:11:
                    13:c2:e9:1c:5c:1a:78:17:f6:5a:bf:26:cb:b1:ef:
                    a5:9a:68:88:34:af:95:81:bc:d7:01:71:2e:b1:b9:
                    8f:94:bd:88:da:e2:90:e8:e5:fe:d2:2a:d7:45:0b:
                    de:75:ba:fa:d3:35:c4:95:ab:cc:a3:10:21:f2:25:
                    c8:f8:53:02:07:c4:76:fe:4f:45:e6:6b:c0:f9:b9:
                    49:56:e0:ff:22:f3:72:87:05:97:a4:82:6e:50:1e:
                    f4:c6:56:60:3c:02:9d:df:64:09:a0:6a:c3:a9:0e:
                    6d:d6:1b:2f:c5:8d:b0:2c:10:2a:03:27:75:bc:37:
                    19:13:01:be:fa:5d:b2:9a:4e:89:85:ce:c2:ec:d3:
                    be:37:98:a3:bf:15:08:d2:04:88:05:bf:21:41:f5:
                    8b:1a:d7:f8:7f:38:b3:5b:8b:0d:09:5a:1f:19:75:
                    7f:5d:ed:e6:63:0f:4a:4c:5f:ff:14:3b:90:62:24:
                    14:fa:75:76:54:0a:73:47:5b:fc:96:5c:d7:f5:b8:
                    1c:5b:c4:6a:7a:14:3e:85:0b:33:c2:35:62:83:bf:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4F:76:F6:4F:B5:ED:84:81:6F:CE:B4:3D:A7:BE:B9:65:30:E7:BA
            X509v3 Authority Key Identifier:
                keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3e:6a:24:7b:3c:63:aa:28:ea:ab:e7:37:65:09:4e:c4:8d:
         49:c6:ca:08:aa:c0:34:4f:a7:b7:0c:bc:d5:03:9d:c5:ae:26:
         fb:69:f5:51:2c:e1:0e:61:0f:81:ba:b2:a8:cd:88:c9:fd:08:
         83:d5:42:0b:f3:32:cf:01:0f:9c:45:66:8e:51:2f:b6:16:1c:
         2f:d5:c4:33:b9:1f:f8:3d:6a:3c:7e:b3:00:a7:91:13:f8:b7:
         87:6a:5f:27:c6:5f:43:a3:c2:77:e0:34:be:60:fe:23:90:9a:
         3a:ab:f3:8e:50:29:2b:a4:de:f8:43:b2:b5:b1:bc:ce:0c:ab:
         12:58:00:bd:aa:ea:ef:4f:11:f3:dd:5b:a8:c0:c2:2c:1d:76:
         ff:46:07:ac:7d:59:c6:47:bc:9b:5f:eb:c1:a9:87:e2:0b:2b:
         74:84:ca:8f:9c:23:5e:09:3b:45:99:e4:bc:6f:9b:f2:4f:cf:
         ac:86:06:c5:53:27:56:50:81:37:b7:4c:db:b8:ae:1c:6f:ba:
         ff:50:cd:5d:68:36:47:02:e5:74:d6:e0:ab:48:20:b6:c2:00:
         73:52:00:1a:bc:2d:c4:15:20:a4:be:f9:dc:d5:ab:f5:c9:19:
         a3:c2:78:ca:dd:07:80:01:80:15:fb:df:6c:21:82:25:72:b5:
         1f:66:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:57 2026 by rpki-client