Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
File:                     DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json)
Hash identifier:          oCuxKOBIaAuHbqy7DsWTFXEdzOLsE1p2nNsdIQzrW9o=
Subject key identifier:   D5:B3:9C:60:D3:50:C2:49:5D:67:E9:9C:A5:20:60:32:32:FB:39:40
Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
Certificate issuer:       /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
Manifest number:          CC
Signing time:             Thu 21 May 2026 06:53:24 +0000
Manifest this update:     Thu 21 May 2026 06:53:23 +0000
Manifest next update:     Thu 28 May 2026 06:53:23 +0000
Files and hashes:         1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: ZhnEiEMJBBNakSwzn2QLfhfBimKb2bCSyahkXULQwX4=)
                          2: 6028335E86F911F084A9FF7FC4F9AE02.roa (hash: HfdNS1wfsXQ4sTjOLl19fnJyOg1OOpPzzn+pHOB9tDs=)
                          3: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: 3rUSEOVje0nxOIJndSfYAE6nSv8tZDCQx4I/9OfatPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
        Validity
            Not Before: May 21 06:53:23 2026 GMT
            Not After : May 28 06:53:23 2026 GMT
        Subject: CN=6a0eabe4-78ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:49:60:5b:2d:15:96:c8:2d:57:03:a6:67:
                    1e:bf:82:69:ce:73:81:d6:5f:ef:88:6e:21:5b:5a:
                    8d:86:7c:e5:4b:79:f9:3d:c0:3e:79:05:d1:ad:ac:
                    bd:c5:10:f4:b7:57:92:60:34:71:48:d6:31:9f:6b:
                    2a:2e:52:a6:95:56:33:80:2a:48:d3:94:b2:67:b1:
                    5c:d6:d3:90:be:5c:d5:e0:a0:52:76:b7:df:57:eb:
                    5d:0a:28:24:a7:34:94:f7:d7:67:8f:2b:26:50:bc:
                    85:09:bb:0e:27:13:f8:c9:9b:0f:bf:91:8d:08:e2:
                    db:7d:08:f4:96:33:5a:87:fd:c4:b2:ef:96:8b:91:
                    ae:80:1c:5f:80:6d:c7:b2:ef:c4:9b:ff:8d:a4:49:
                    c2:39:b5:f9:db:d3:3a:59:d2:87:c2:d3:5b:11:e2:
                    e0:70:b0:51:0f:72:06:d0:10:eb:ba:40:b6:46:e3:
                    b3:13:1a:2a:c1:88:8c:e2:97:1d:ee:db:53:bc:a0:
                    b8:f8:f9:15:b9:fc:f1:7e:b9:73:8b:30:87:83:32:
                    d3:85:7c:34:29:0f:a0:f6:a3:53:6a:cf:3d:15:31:
                    04:17:d3:1b:88:2b:c2:cc:95:51:fd:bd:b5:fb:83:
                    e1:61:87:c2:a2:3f:b0:03:74:62:e6:25:79:39:0e:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B3:9C:60:D3:50:C2:49:5D:67:E9:9C:A5:20:60:32:32:FB:39:40
            X509v3 Authority Key Identifier:
                keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:34:67:5d:94:10:80:70:01:78:2c:95:75:98:0f:5c:7d:d1:
         56:57:6e:2c:ba:19:94:6a:3c:e9:d8:ce:7a:c2:90:34:d7:21:
         f7:ef:c0:d0:78:19:ec:08:19:13:82:9c:11:b1:95:a2:bb:b2:
         0f:9a:16:1f:b8:18:8c:49:4c:08:84:ce:6f:87:5f:b7:3f:ac:
         b2:d2:f0:99:fb:09:c3:36:57:d4:fd:dd:fa:01:b2:25:0b:24:
         76:93:24:ec:b3:03:38:d0:bf:8b:af:35:7e:be:44:eb:93:b0:
         da:07:6d:ae:a7:7e:55:9f:83:fc:4f:e8:f2:38:fe:be:15:32:
         c1:ab:3e:e5:2c:c8:11:4e:f7:2d:e3:fb:ba:3a:5d:27:78:a8:
         51:bc:be:56:fd:31:1e:8e:83:52:68:65:3e:b6:61:14:c6:e3:
         a2:ce:3e:ed:89:30:2e:1c:23:b9:98:86:f7:44:6c:76:1b:d5:
         bf:cc:53:4d:67:8b:31:b8:64:c5:c0:7a:0e:1b:79:39:f5:b1:
         d4:93:7a:80:f3:5a:6a:4c:ba:f1:6b:00:45:6b:76:5c:b7:bd:
         f1:7c:eb:47:ce:74:12:4f:90:c1:aa:e0:35:6c:57:3a:d7:9a:
         9c:1c:7d:08:1f:83:4e:63:30:07:6d:34:76:4e:b7:7a:77:88:
         f4:68:23:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:14:39 2026 by rpki-client