Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
File:                     oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json)
Hash identifier:          qNGiBYCjpxWozKSCbsQnUUnJYUqZVsB9+OCPTAyfum4=
Subject key identifier:   FD:A0:85:2E:D7:B8:A5:18:08:DE:68:14:33:DE:F8:A3:35:F6:23:9F
Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8
Certificate issuer:       /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
Manifest number:          012A
Signing time:             Mon 01 Jun 2026 06:26:12 +0000
Manifest this update:     Mon 01 Jun 2026 06:26:11 +0000
Manifest next update:     Mon 08 Jun 2026 06:26:11 +0000
Files and hashes:         1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: HX8sYh/lUTBRTmUqeVWdtfacFWjj4gjCTvdAhbJNgwg=)
                          2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: aoBTkJouVxyNkkgtw1vmV8sS1BnP7mpfp25E9TCfROM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl
                          rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8
        Validity
            Not Before: Jun  1 06:26:11 2026 GMT
            Not After : Jun  8 06:26:11 2026 GMT
        Subject: CN=6a1d2604-ea7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:69:6b:d6:64:f3:ce:c9:16:c7:40:5b:09:
                    a1:f9:79:35:5b:36:1a:08:13:92:10:29:79:41:6d:
                    e3:81:bd:aa:f7:1c:6c:63:d4:fc:8a:0a:21:05:d0:
                    e1:67:b8:c3:61:04:fb:a6:73:95:d6:5a:f2:10:1c:
                    15:2f:00:a3:1b:86:84:d3:04:82:a7:3d:ba:34:a8:
                    45:94:d4:b1:61:02:e4:f0:a0:f3:1a:c4:4a:d3:b4:
                    eb:0b:10:43:67:fe:44:09:39:7e:72:b6:5a:28:f3:
                    12:33:f9:10:8e:cf:de:0d:df:b3:f0:55:f9:fc:bd:
                    3d:f2:e3:2d:ca:6e:6e:53:9d:b6:16:4a:f1:f8:52:
                    60:8e:5f:5d:23:8b:12:75:90:af:be:f7:0b:c1:f9:
                    aa:13:ba:e6:14:92:53:87:be:fe:bb:a8:49:3a:7a:
                    3a:ca:95:19:c2:15:bf:6a:6d:76:de:17:1c:60:d7:
                    c6:57:f6:66:4b:07:c7:05:59:5b:9d:77:0f:74:9f:
                    de:17:f2:21:92:f0:42:02:39:07:84:7b:2b:09:00:
                    97:37:ca:ec:61:55:c5:77:aa:4c:69:aa:97:35:c1:
                    77:98:43:1e:f0:7d:b9:fe:1d:cf:79:c6:5b:ba:1b:
                    18:50:61:a7:01:f3:41:d3:31:f8:8c:87:37:82:df:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A0:85:2E:D7:B8:A5:18:08:DE:68:14:33:DE:F8:A3:35:F6:23:9F
            X509v3 Authority Key Identifier:
                keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d4:61:8a:8c:30:fc:a4:61:27:4f:aa:0f:9a:1a:ef:be:43:
         f2:b1:81:fd:5c:31:83:f1:76:c7:45:d1:22:0a:90:cf:fb:e6:
         82:2f:c5:c5:29:be:58:45:de:09:af:e4:d7:b3:1d:76:9d:e1:
         ee:d6:1f:f4:a2:91:1e:f8:26:c3:44:13:17:01:ee:b7:a6:31:
         ac:28:a5:0a:60:75:12:a3:97:f2:7c:37:40:4e:bd:2e:b1:b0:
         f1:a3:20:28:41:66:6d:d0:6e:fe:d8:3d:8a:62:52:2f:e8:25:
         42:06:ee:ae:13:13:3d:34:50:f9:0f:c2:19:3e:72:f1:02:11:
         6d:07:7a:83:2b:a4:a7:4a:36:4f:0e:0a:c0:32:e0:cc:e2:3a:
         94:ce:13:54:1d:ef:dd:00:f4:89:e5:78:46:95:40:9b:52:8d:
         86:cd:a0:d4:35:77:08:52:27:8a:e4:9f:14:c6:98:ff:45:d8:
         17:cd:08:e4:6e:d1:4f:43:17:75:21:01:88:f4:63:27:60:9e:
         33:7d:64:28:c3:e1:24:43:f1:46:c2:1e:f5:0b:c9:b4:79:3f:
         e7:07:9b:16:9c:3a:60:73:58:d9:07:c0:60:58:01:15:00:66:
         71:08:dc:62:ed:bc:c9:e5:99:5a:ca:d7:9a:fa:1e:6a:83:9e:
         78:03:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:39:01 2026 by rpki-client