Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
File:                     OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json)
Hash identifier:          zqRxI+CgsyZHwbpqUzfoH/ggNZLmqEFZFyFVreD1pU8=
Subject key identifier:   D8:B7:68:95:C2:80:9A:89:4D:19:90:43:76:59:E2:5B:AE:A6:C1:2C
Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
Certificate issuer:       /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
Manifest number:          0790
Signing time:             Sun 14 Jun 2026 21:33:40 +0000
Manifest this update:     Sun 14 Jun 2026 21:33:39 +0000
Manifest next update:     Sun 21 Jun 2026 21:33:39 +0000
Files and hashes:         1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: 4ZxNXPHJd5D46tUmhzDApN+hUJzIXRn8i3bZ5qgnGrU=)
                          2: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: NHvUGTdmuwIhXvGpasqL3enB4HKIbc5EZnmgVQdvyDA=)
                          3: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 4tQkVgaEfrNeT5ZxKwsq/6JwQwooD/KUZ+m6cfHLrN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl
                          rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 21:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
        Validity
            Not Before: Jun 14 21:33:39 2026 GMT
            Not After : Jun 21 21:33:39 2026 GMT
        Subject: CN=6a2f1e33-f256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:29:8a:49:ba:cc:c1:ce:6e:62:af:2f:a0:
                    27:fe:13:fc:a3:80:74:8b:19:d9:56:c9:6a:ba:3b:
                    4b:f9:be:84:07:f2:f4:1f:11:a2:51:4d:e3:ec:52:
                    d8:7d:e9:e1:b1:58:a4:e5:09:ee:18:7b:2f:86:f4:
                    ae:22:ee:11:a7:cc:85:66:45:5f:e7:7a:0d:53:13:
                    1c:81:9b:8b:7c:5e:cd:92:33:62:87:70:1b:ca:ec:
                    9c:57:5c:16:99:31:e7:42:62:ba:32:61:2e:ef:a9:
                    37:b9:2b:e3:f0:d4:41:c5:b5:89:11:e1:17:49:0a:
                    41:24:39:ed:92:e4:aa:76:5b:47:74:10:2e:b7:fe:
                    6c:04:97:2f:2e:6f:d5:28:d4:3b:3e:31:27:64:61:
                    58:75:52:c5:28:bd:d7:6e:4d:42:06:a0:6a:fb:19:
                    61:41:d2:2b:b5:9c:18:9a:ee:2a:35:80:0a:97:32:
                    38:99:bf:e0:be:bb:93:57:7b:e2:af:3d:3b:06:0b:
                    35:49:b5:ae:f4:0b:1d:cd:f1:cd:c0:8a:4c:3e:f5:
                    c0:d6:e7:e2:ae:91:46:57:35:dd:38:9b:10:74:9e:
                    d1:d9:de:26:74:5c:a7:09:f8:10:84:4b:ee:96:de:
                    01:59:26:d9:b5:af:6b:f3:a9:ec:bd:c4:ec:81:7c:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B7:68:95:C2:80:9A:89:4D:19:90:43:76:59:E2:5B:AE:A6:C1:2C
            X509v3 Authority Key Identifier:
                keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:90:4c:a8:d7:48:61:26:8a:12:8b:0f:da:1e:f8:6c:86:4a:
         c2:ee:f6:fd:cc:cc:4c:70:d2:22:0e:63:04:04:85:8d:77:95:
         7c:47:62:76:f6:a7:4e:da:20:0b:67:19:b0:2f:b3:cf:38:bd:
         82:7a:ec:6a:b1:cc:68:d3:35:60:50:24:22:ee:8a:07:36:09:
         24:41:46:8f:f6:ee:84:23:a3:10:74:1c:63:ef:56:08:75:54:
         69:09:1c:21:06:b5:ca:f0:d7:15:df:59:45:2c:c2:8c:2a:d6:
         b3:0d:6b:57:5b:13:8b:c8:eb:45:10:c3:eb:04:a4:d0:07:05:
         fa:e3:01:82:ea:9d:0d:ef:ca:f0:b8:4b:e3:cd:9e:4b:b2:7c:
         93:89:b2:82:b4:e3:33:14:7a:e8:b9:ee:01:37:90:23:aa:40:
         a9:27:f1:21:ea:85:19:b6:39:83:17:7f:b9:ae:58:65:1c:50:
         d2:56:8a:7d:e2:ed:61:7e:42:2c:02:95:92:6d:03:80:33:6b:
         62:8e:65:15:44:5c:59:14:5a:fd:6b:9a:97:ac:ea:6b:62:d2:
         da:95:1c:10:df:dc:fc:2f:14:06:fa:30:4e:75:f6:ca:bc:5f:
         1c:73:e0:3d:84:be:28:0e:0c:13:81:1e:71:fe:15:8b:35:44:
         9a:9a:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:34:42 2026 by rpki-client