Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
File:                     cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json)
Hash identifier:          IeJivsoE9v2Ux9ZF6kun7kpL2fMtL79FiflFXMXr1Sg=
Subject key identifier:   E9:74:C4:F5:B5:E8:0F:58:0B:B9:33:53:EF:1A:A4:09:CD:28:45:64
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Certificate issuer:       /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
Manifest number:          01EF
Signing time:             Mon 15 Jun 2026 03:23:06 +0000
Manifest this update:     Mon 15 Jun 2026 03:23:05 +0000
Manifest next update:     Mon 22 Jun 2026 03:23:05 +0000
Files and hashes:         1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: oD5Z/do9X0/xWgsZRf3D+cOFeLI93Yq809rMNI07IvQ=)
                          2: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=)
                          3: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
                          rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
        Validity
            Not Before: Jun 15 03:23:05 2026 GMT
            Not After : Jun 22 03:23:05 2026 GMT
        Subject: CN=6a2f701a-cde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:b6:a0:80:fe:06:6a:c3:a2:c7:fc:67:8d:
                    0e:db:f7:c4:67:31:c7:a3:72:df:03:ca:f4:ed:f8:
                    37:38:88:5f:b5:90:ce:f8:df:e5:9f:c1:cc:32:a3:
                    62:cc:49:57:5d:2d:5a:ca:7c:3d:97:e1:38:ee:e9:
                    4d:a4:03:c5:a0:61:6d:dd:9d:a1:65:1e:4f:0d:c3:
                    63:52:35:c0:73:c3:87:1a:d2:b7:1c:d7:61:71:c0:
                    23:dc:78:45:63:08:5f:4f:88:5a:52:c5:1f:fd:44:
                    32:13:7d:2a:3e:64:13:b7:13:82:86:f7:3b:3f:b7:
                    c5:6c:0a:38:c1:99:fd:63:fa:9b:59:88:7c:a9:e6:
                    7f:48:4e:62:25:0f:aa:2a:de:c9:2c:59:07:2a:2a:
                    9d:02:63:d7:c6:2a:97:44:b1:f3:22:e2:59:2e:19:
                    58:84:a6:a5:5f:4d:af:86:4d:2c:54:16:31:16:bd:
                    f3:b3:86:78:f6:5e:8f:5d:2b:d6:a6:52:b1:90:ca:
                    1d:22:19:fc:50:0a:42:87:dd:69:b6:5d:48:12:31:
                    93:31:c2:6a:03:e9:ed:cc:9d:71:4e:9f:83:88:a8:
                    06:b7:e1:12:cf:1b:12:e5:67:03:6b:bb:63:51:ab:
                    47:d9:43:3a:9a:b8:cc:10:dd:47:c3:44:a1:98:fc:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:74:C4:F5:B5:E8:0F:58:0B:B9:33:53:EF:1A:A4:09:CD:28:45:64
            X509v3 Authority Key Identifier:
                keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:9a:06:bf:93:05:fd:d2:1a:63:10:84:b2:17:4d:f3:e5:
         11:d5:a3:3a:46:f8:a7:bf:7c:9e:77:38:69:74:34:24:2b:c0:
         ee:32:7b:be:32:3b:f0:5c:6e:18:b5:26:41:52:26:b6:ec:f9:
         29:84:d0:08:d4:b4:8b:35:a5:d3:bc:a8:19:bb:25:a9:fa:59:
         45:cd:70:4e:0d:b2:3b:b2:47:81:b4:ff:49:5b:77:3b:ec:7b:
         6c:03:14:25:f5:46:fb:3c:94:fc:7d:fb:b7:22:76:f0:d7:fb:
         05:ee:c5:a3:8b:ff:b3:46:0c:fa:f9:5a:c5:09:96:34:ee:f4:
         a7:7e:46:30:42:ef:d3:9d:3a:3c:22:8b:a9:23:cf:e3:a2:a1:
         21:30:28:1c:9d:06:5f:76:d8:a8:4c:a9:ac:df:79:38:98:00:
         ba:95:79:ba:e4:c4:99:88:39:9c:b0:cc:0d:81:ac:ca:25:97:
         59:af:a1:d3:e3:68:f8:54:04:ac:88:3e:69:32:db:88:d8:fa:
         da:56:75:4e:51:71:33:ac:35:62:12:7a:ee:ee:d8:9a:ec:f0:
         80:78:13:fd:29:d6:e3:0d:c3:b2:bc:fc:2b:ff:52:0e:b6:43:
         a1:01:2a:75:9c:18:1a:c3:cf:db:e1:23:21:2b:a1:32:de:e0:
         41:a4:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 13:36:38 2026 by rpki-client