Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
File:                     o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json)
Hash identifier:          TOh54Dyz13vYU0pq8N96k5mB3xWmWjOIQvd+nNe6lIw=
Subject key identifier:   2C:57:EB:DE:CC:EB:62:7E:4C:27:9E:9F:BF:72:27:24:CB:8B:98:92
Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
Certificate issuer:       /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Certificate serial:       222F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
Manifest number:          2223
Signing time:             Wed 20 May 2026 15:52:45 +0000
Manifest this update:     Wed 20 May 2026 15:52:44 +0000
Manifest next update:     Wed 27 May 2026 15:52:44 +0000
Files and hashes:         1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: 1nTkHaKoXl9B3O87U8lcwZyhFwCBsKhEWK+f8ZiYkYo=)
                          2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: 42CVSUWYduLQVb9MG+B2vLMlfp0/6VbB2Jlt8i5PPHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
                          rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8751 (0x222f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
        Validity
            Not Before: May 20 15:52:44 2026 GMT
            Not After : May 27 15:52:44 2026 GMT
        Subject: CN=6a0dd8cc-21ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:1b:a1:8f:96:5a:9f:73:9d:ac:52:a0:fb:
                    67:a6:ae:d5:6d:f1:2e:67:4a:f7:5c:94:6e:3a:72:
                    c3:72:ba:71:9e:90:ff:ff:f6:9a:d4:0b:c0:2d:d7:
                    00:31:08:11:cd:45:de:d0:94:5d:2c:39:27:10:89:
                    ef:26:72:31:58:7f:3f:3c:18:42:50:1d:6e:8b:23:
                    db:24:ba:45:62:fd:e2:0a:4e:b8:5e:cb:80:c3:3e:
                    d4:99:99:f1:ae:dd:d3:ef:39:18:d3:5f:08:6f:66:
                    7d:16:c4:46:84:26:6a:d6:08:c5:16:20:b9:44:34:
                    6b:cb:64:6a:14:35:8f:4a:2b:c9:a0:bb:4e:b6:68:
                    0e:21:0e:ee:26:02:70:54:58:5f:0b:7b:ac:ea:74:
                    9b:82:22:69:aa:92:66:d1:44:6e:c8:56:a0:97:14:
                    80:06:ed:13:11:4b:62:08:47:39:35:7a:f6:8a:3a:
                    39:79:ff:b0:50:14:4a:8e:30:06:82:ef:37:7f:4b:
                    f9:3d:1e:26:49:69:95:a4:bb:be:46:95:72:db:15:
                    e7:2f:a5:ff:47:8b:47:76:08:fb:7d:9e:44:00:ca:
                    b2:40:6c:46:2e:36:42:2d:38:3e:81:74:75:76:0f:
                    0c:39:4b:2b:99:82:a0:6e:3b:4a:9e:31:6f:50:51:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:57:EB:DE:CC:EB:62:7E:4C:27:9E:9F:BF:72:27:24:CB:8B:98:92
            X509v3 Authority Key Identifier:
                keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6e:c3:41:81:4c:b0:af:35:21:d7:20:13:45:51:79:e2:e9:
         06:b1:67:f9:2d:a7:78:75:f3:ed:cb:42:9b:52:43:bd:3b:ae:
         f3:f5:ea:3f:83:a7:d0:e4:5a:d9:fe:b1:75:2e:8b:2f:3c:3a:
         48:f1:14:c0:02:1f:d0:76:01:6f:cc:b7:3e:f2:46:6e:af:b5:
         ec:8d:4f:d8:40:ed:50:cf:52:20:ca:7d:9f:8e:06:8e:8b:5c:
         58:e0:69:23:85:0e:47:f4:af:2b:c6:67:af:90:b7:2b:90:be:
         87:d0:dd:52:7b:ec:48:c4:fa:57:4b:1d:de:16:69:f8:45:aa:
         61:a0:a5:67:fa:4f:fa:79:71:65:eb:23:d2:79:64:09:af:ce:
         dd:29:33:e9:b2:e6:f2:d8:d0:6f:24:92:9b:98:1c:c7:1a:4e:
         93:33:f3:6f:2d:86:03:0d:62:2c:b3:48:2c:dc:77:a4:d9:cc:
         92:0e:e2:d1:b4:32:b7:5b:4e:03:ae:b0:2f:db:b1:84:5d:b6:
         f6:b6:73:a1:9e:9b:c6:57:70:d6:a2:5c:47:b1:23:c8:dd:5f:
         ee:b2:6d:f5:62:a6:2d:86:79:81:8a:8a:14:5a:a4:f5:c3:ba:
         1c:6b:47:26:6e:1c:72:67:f7:ad:0f:2c:85:ee:d7:4b:fc:ea:
         b3:3a:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:57 2026 by rpki-client