Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File:                     ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier:          5b5B7UwNPodlXUHwQtjSt+4choqr6FS477ML18q2hLc=
Subject key identifier:   9E:AA:C2:A1:1D:8F:25:9B:F7:C7:DA:C6:6B:4E:85:E2:73:F4:30:8C
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer:       /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial:       02A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number:          02A1
Signing time:             Thu 21 May 2026 01:39:16 +0000
Manifest this update:     Thu 21 May 2026 01:39:16 +0000
Manifest next update:     Thu 28 May 2026 01:39:16 +0000
Files and hashes:         1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: 2E5+to5kuMqVAbJBGeYHfGUyB3DK+jSvfiw4ugIsUts=)
                          2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: pGBNoZVQ4x9HykZ/w/nfYdiBRr1XcTrcOsgRSH1bWes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
        Validity
            Not Before: May 21 01:39:16 2026 GMT
            Not After : May 28 01:39:16 2026 GMT
        Subject: CN=6a0e6244-4103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:6c:57:d9:7b:a5:06:95:09:5c:9a:15:f8:
                    4b:b5:85:4f:66:0b:2a:8c:b7:83:1d:05:81:c0:7a:
                    ed:8b:40:a7:e3:a0:f6:6a:98:d7:09:cd:5c:c8:b6:
                    90:27:79:68:2d:b8:3e:d5:7b:60:13:17:ee:56:29:
                    c5:3e:75:7d:82:74:0f:f6:79:38:1c:cd:43:49:ba:
                    fb:b8:2c:e1:8d:0d:19:4d:94:d3:64:96:55:b5:02:
                    fb:3b:1c:2b:fd:b6:8d:4f:7e:5c:fc:53:34:8a:5f:
                    1f:55:55:14:5d:ab:6e:9e:ab:e5:58:b5:08:26:e8:
                    1d:c5:e8:c5:ad:79:20:5f:e5:96:c5:ed:a5:b8:d0:
                    c2:85:62:fc:00:7e:76:63:8f:1f:64:f0:aa:ba:26:
                    c6:86:da:03:0e:c3:c6:f9:8b:2d:5f:0d:53:78:f3:
                    33:a3:08:12:3a:70:9e:bc:77:35:9a:59:f3:48:8a:
                    7c:5a:57:32:a1:1b:9a:fc:62:d4:6d:92:b6:54:43:
                    8d:8b:dd:13:58:5a:c6:d8:0d:a4:9d:5e:3a:a2:92:
                    16:bb:65:40:66:35:83:77:59:f7:de:03:cc:c4:89:
                    01:20:e3:8b:02:45:f1:29:a4:37:1c:4c:b1:5f:54:
                    6d:b3:7a:0e:fe:80:f3:c5:7c:fa:be:32:a6:f9:16:
                    46:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AA:C2:A1:1D:8F:25:9B:F7:C7:DA:C6:6B:4E:85:E2:73:F4:30:8C
            X509v3 Authority Key Identifier:
                keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:64:54:cd:e1:a4:0b:bf:80:79:3e:d5:9c:eb:01:c0:62:49:
         5f:44:18:7a:2a:e0:ea:87:06:42:bd:1c:3b:47:f9:f3:4b:94:
         6c:26:d4:e5:57:4a:04:6b:44:a2:ea:9e:9d:68:d8:a4:ef:52:
         7a:c2:6c:c6:74:b3:5d:bb:38:9c:65:ee:50:bd:44:ee:c5:70:
         a8:1c:be:e5:f0:56:c3:28:c1:3a:8f:cf:b6:70:48:bd:73:15:
         66:90:f3:98:6c:dc:31:d0:ae:0a:41:a3:a7:16:ae:44:7d:7b:
         3f:fe:9e:6d:0d:10:c3:92:95:6c:03:f0:78:6a:49:a9:2f:39:
         22:e4:e1:ac:f0:ed:2e:26:07:b7:9e:ff:7c:fc:4f:9d:c9:2b:
         04:1b:ae:6c:60:25:be:d6:2d:c8:50:ee:4d:79:93:72:86:33:
         3c:32:c5:52:6a:45:4f:50:54:92:12:c8:03:78:b7:5a:01:4a:
         49:1c:a1:fa:85:59:f1:60:06:61:36:7d:31:98:29:79:a1:80:
         85:da:bc:db:67:b4:2a:30:2e:9e:f2:1a:eb:59:9d:f0:8c:98:
         62:35:6a:ec:2a:c3:65:29:80:aa:9f:02:a1:6e:fe:7b:57:aa:
         b3:3a:09:65:20:13:61:dd:dd:e4:95:16:1d:23:76:10:ef:f5:
         31:0d:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:11 2026 by rpki-client