Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File:                     1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier:          U9D9gxykxS463sXhn2ICb7xVL/5wwzk819rEJxlf/O0=
Subject key identifier:   27:6A:0C:63:14:93:01:32:5E:E5:E7:C9:A2:67:94:2F:5F:7E:54:21
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer:       /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial:       107C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number:          1071
Signing time:             Mon 22 Jun 2026 17:22:09 +0000
Manifest this update:     Mon 22 Jun 2026 17:22:08 +0000
Manifest next update:     Mon 29 Jun 2026 17:22:08 +0000
Files and hashes:         1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: FiSILRsCNwy9WyHTIqO0W/bRk32MD6FVPOhptuJCKQI=)
                          2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: cNOGWjX3tS0QYF3+Hr85nxbmOcjy7rNxMm+ayP/uy9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4220 (0x107c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
        Validity
            Not Before: Jun 22 17:22:08 2026 GMT
            Not After : Jun 29 17:22:08 2026 GMT
        Subject: CN=6a396f41-0db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:b4:50:51:ed:19:5c:1d:d1:f4:2d:74:03:
                    86:c1:d6:6a:e0:fe:47:3c:21:a9:2f:f5:b5:28:c4:
                    7a:a6:ab:85:9b:68:51:39:ec:ee:e1:18:98:c5:f9:
                    ed:07:bc:00:b3:20:98:6a:b3:e3:67:dd:f7:dd:ee:
                    ae:6c:32:dd:c8:2f:12:3e:b7:b1:47:cd:df:22:ec:
                    83:4e:7b:43:4d:9b:57:cb:87:98:fd:59:0d:6c:21:
                    7c:55:71:3a:f8:60:33:c2:a4:66:4b:ed:7f:45:34:
                    48:4f:4b:15:8a:27:26:a0:f6:1e:ff:b7:7e:24:ae:
                    a6:be:2c:cf:f0:a7:2b:9e:59:eb:7b:3f:1f:d3:8b:
                    93:d7:ea:c8:3e:a2:a7:40:27:12:2f:d9:a8:12:b6:
                    87:b8:50:03:54:bf:81:35:2e:9d:cd:91:57:96:64:
                    1d:06:04:99:e6:e3:64:81:fb:76:b4:fe:bc:89:b5:
                    e0:40:95:e2:cc:e3:ce:ae:2a:d1:19:d5:17:c1:a8:
                    96:50:f3:14:3c:44:77:7d:ab:81:05:3e:b4:5a:4b:
                    fb:32:00:a2:6b:d8:e9:f6:cc:fa:b1:15:05:a0:23:
                    f4:78:1c:c7:9c:20:06:08:b7:16:a5:32:e3:fc:91:
                    f7:3a:6b:48:12:bc:58:9f:df:94:67:ac:16:9b:30:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6A:0C:63:14:93:01:32:5E:E5:E7:C9:A2:67:94:2F:5F:7E:54:21
            X509v3 Authority Key Identifier:
                keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:70:ca:cd:d7:07:8e:da:f5:ff:e1:56:7f:ea:45:de:01:
         32:fe:a8:00:22:0a:fb:60:fb:1b:c8:44:44:b4:90:e6:56:ba:
         a3:0c:62:1b:be:eb:1b:d6:d0:94:37:7b:cc:74:99:c7:35:46:
         75:37:23:39:a9:1a:2c:06:a4:f1:41:94:27:86:17:33:62:24:
         e6:e8:28:8e:06:02:82:85:1f:ef:9d:63:69:2c:98:27:49:c3:
         08:25:15:ba:d4:f9:a2:3b:1a:b8:14:67:db:0d:20:90:4c:18:
         a0:88:54:a2:a5:3a:c0:58:83:6c:00:58:f5:57:24:37:ee:02:
         dc:ca:3b:0f:02:90:d3:09:77:66:7f:de:70:fd:cc:6c:05:12:
         06:79:5f:5b:a7:1b:0d:00:cb:5d:80:53:be:31:a6:c6:02:d8:
         13:47:5a:59:88:69:b9:b5:91:76:f2:8f:d2:4c:d5:b2:d7:0d:
         7c:97:3e:c4:bb:0d:f7:f9:3f:22:22:71:82:7d:03:d7:e8:94:
         8a:ac:57:6e:cc:60:b0:19:d8:68:eb:bc:23:08:00:45:bf:41:
         f9:b8:39:2c:b4:b1:b2:d4:91:62:10:0b:b3:00:b1:13:49:cd:
         89:1c:61:f9:63:70:72:88:7c:07:42:5b:c3:83:81:ec:db:94:
         ad:a5:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:44:11 2026 by rpki-client