Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
File:                     oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json)
Hash identifier:          y+NZ6R9RTRy2oy05R0n7Rtj3EhGwqNOJ1xU9m4IYrtQ=
Subject key identifier:   18:0C:5D:9B:65:E1:FD:51:04:20:0F:07:F7:BE:54:63:54:11:7E:26
Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23
Certificate issuer:       /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
Manifest number:          010F
Signing time:             Tue 02 Jun 2026 14:16:13 +0000
Manifest this update:     Tue 02 Jun 2026 14:16:12 +0000
Manifest next update:     Tue 09 Jun 2026 14:16:12 +0000
Files and hashes:         1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: YtGKDolapfilNoB9Dn8w4pHFESHeWD4r+hnC3v79RAU=)
                          2: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: DA85ff4aMzWQg5AImUfIHcT74CRXr+XSDwxZJMl53Eg=)
                          3: 8AE793B2E9E311F0A43C19FF656F56BC.roa (hash: iLjsYldebmEc4jQ39cKvj356cAs2Ip03tkyos/Cg+/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl
                          rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 14:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923
        Validity
            Not Before: Jun  2 14:16:12 2026 GMT
            Not After : Jun  9 14:16:12 2026 GMT
        Subject: CN=6a1ee5ad-3872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:0e:1e:9d:e8:37:62:86:09:d7:33:22:c3:
                    fa:7b:bb:8f:56:50:a0:44:8b:bd:09:df:61:84:b3:
                    51:e3:eb:90:51:59:d4:72:30:f4:80:a6:fa:d6:83:
                    64:d6:ed:df:10:12:25:98:87:57:28:ba:d0:57:ef:
                    90:a3:e3:9b:8b:e9:a8:e1:b8:db:c5:ff:30:9b:f7:
                    ab:81:80:8f:ae:fc:06:11:35:0f:89:21:98:9e:b0:
                    ca:4e:f3:c1:d8:1b:32:38:5a:74:61:dd:3c:da:43:
                    00:9f:b4:00:ec:42:50:54:97:1a:61:be:66:1e:6f:
                    d3:f4:d3:4e:03:85:a7:0b:24:9a:5b:5b:21:58:64:
                    f9:67:53:2b:41:bf:22:93:28:86:8a:75:76:c9:28:
                    6e:5d:2c:1f:f0:b2:f9:9a:96:b9:88:b4:08:2d:db:
                    60:59:0e:52:12:11:26:2e:3d:8b:7c:ea:3d:ea:d4:
                    c7:71:c0:5a:e0:d3:64:6c:ea:c1:f8:09:9f:00:d5:
                    bb:f8:4d:c2:bd:4a:84:08:96:2b:0f:60:d3:f3:2a:
                    6f:6c:42:16:43:1f:56:eb:5b:46:cb:bd:62:92:cf:
                    db:6e:11:16:25:1c:cc:71:e4:a8:9c:27:8c:df:6c:
                    9a:43:02:16:a0:78:c9:bc:d3:6d:55:c3:fa:b5:09:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0C:5D:9B:65:E1:FD:51:04:20:0F:07:F7:BE:54:63:54:11:7E:26
            X509v3 Authority Key Identifier:
                keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8f:45:a1:31:9a:6d:8f:3d:d4:8e:29:2e:5d:61:7e:08:c8:
         c8:71:c2:61:8f:11:00:16:9e:b2:3c:28:80:30:93:1e:4d:7c:
         17:89:a0:51:c9:2e:50:f6:6c:f4:1a:8f:ff:a8:18:7e:fa:e1:
         22:55:1e:52:f4:f7:e7:c7:a2:57:35:e6:37:90:09:72:c9:e6:
         e1:30:a1:99:d5:1c:76:eb:c8:19:7b:bf:a6:5c:22:c4:45:10:
         f3:a8:ea:42:df:98:06:13:2d:ed:a7:f1:40:ec:ea:2a:b4:fe:
         09:a0:57:f0:fe:90:55:5a:7c:21:0f:0b:7a:6f:98:2b:93:30:
         9b:2a:93:31:da:ee:57:aa:ca:03:03:e0:9b:71:f5:e9:ac:8f:
         82:90:87:34:42:d2:e2:39:b4:f5:6b:a7:53:d2:96:e5:f3:ee:
         a1:c3:cc:95:53:c8:24:e0:96:bf:ab:26:e7:88:26:0e:13:65:
         c1:fb:7f:a5:44:5a:8a:6d:9f:da:6c:d6:c2:d1:5a:9b:1d:f8:
         dc:d0:ac:ef:83:7e:08:40:97:f1:4e:ac:39:b2:6c:61:f8:17:
         19:39:1e:da:a0:f8:06:20:12:ee:ca:02:b2:4f:d5:78:5d:ce:
         54:09:8e:c6:d5:0a:ec:06:65:ee:45:cb:9a:04:a2:52:1b:1b:
         d1:8a:98:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:34 2026 by rpki-client