Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
File:                     OY22Qj_F4Pd3TyozMdfbzErb9TY.mft (raw, json)
Hash identifier:          jCP17QeYTRCWK7r/6sytjZTUUl1EuYiBM8tOcXC8kzw=
Subject key identifier:   D3:59:CE:4A:22:95:09:2C:B1:34:54:8D:93:55:93:31:8A:4B:48:7A
Authority key identifier: 39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36
Certificate issuer:       /CN=A9111E74/serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
Manifest number:          6C
Signing time:             Mon 11 May 2026 08:01:20 +0000
Manifest this update:     Mon 11 May 2026 08:01:19 +0000
Manifest next update:     Mon 18 May 2026 08:01:19 +0000
Files and hashes:         1: OY22Qj_F4Pd3TyozMdfbzErb9TY.crl (hash: V1eL+LT6yEjhwhWNTga5yrZFvAVK1hSlP7gUuj0P4XA=)
                          2: 7A55B678AB4511F091F88158C4F9AE02.roa (hash: lWwnc93vcwPeE067Q8c+J9Tc2/DFJkWrWa0LCFaHy10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl
                          rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111E74, serialNumber=398DB6423FC5E0F7774F2A3331D7DBCC4ADBF536
        Validity
            Not Before: May 11 08:01:19 2026 GMT
            Not After : May 18 08:01:19 2026 GMT
        Subject: CN=6a018cd0-f905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:43:c1:9f:31:81:a9:ee:bd:2a:17:a4:0c:
                    18:b3:b6:a8:6c:8f:e6:8c:e1:a4:49:64:d1:ee:98:
                    17:29:18:62:16:1f:d9:ed:0e:e1:1a:f1:85:ab:69:
                    5c:25:cd:17:ba:99:b2:13:57:0b:44:a8:6d:35:5d:
                    e9:59:d9:3d:cf:09:47:3e:d3:51:d6:fb:a4:45:3f:
                    ee:37:64:8a:e8:a8:f5:fe:8f:82:91:da:28:ee:17:
                    01:c3:c4:b9:92:ee:9f:cf:fe:27:94:9c:bd:5f:2b:
                    02:c5:ca:16:88:4d:16:f2:9d:c5:0a:b9:d5:4f:74:
                    bf:4b:8b:b4:9e:3c:48:44:a1:1d:b6:af:42:d3:c3:
                    46:56:4e:e7:e3:57:9e:8c:28:2b:2b:ee:7a:a7:f8:
                    78:b8:6d:e8:50:d5:51:c8:19:cb:92:38:a8:ef:dd:
                    c0:4b:59:3d:ac:06:7a:27:c5:e3:cc:0c:d5:44:5f:
                    a1:81:14:6d:28:8f:5b:21:ce:59:b1:80:89:dd:51:
                    9c:c8:07:0b:cb:06:d8:fd:8f:f4:ca:64:71:1e:e6:
                    c7:22:db:e8:df:f6:c0:39:07:18:95:9f:47:e1:68:
                    7a:e9:38:07:87:55:81:23:1e:0b:26:e0:90:f3:e6:
                    b5:c7:45:76:27:08:79:1c:3b:44:7d:eb:db:6b:8b:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:59:CE:4A:22:95:09:2C:B1:34:54:8D:93:55:93:31:8A:4B:48:7A
            X509v3 Authority Key Identifier:
                keyid:39:8D:B6:42:3F:C5:E0:F7:77:4F:2A:33:31:D7:DB:CC:4A:DB:F5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OY22Qj_F4Pd3TyozMdfbzErb9TY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111E74/37B159FEAB3F11F095A1A637C4F9AE02/OY22Qj_F4Pd3TyozMdfbzErb9TY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:63:0d:f4:d3:cb:41:3f:e0:ce:fc:42:57:67:88:38:47:
         27:4f:ac:98:7e:9f:1d:cc:fa:b7:3b:e1:a2:3c:52:93:ac:13:
         47:e4:5e:f1:71:1d:30:73:67:2a:6e:b2:fa:44:9b:28:a0:e2:
         ee:e5:f7:28:51:93:1e:e1:ea:5b:e1:9a:58:14:b2:e6:1d:b0:
         bd:af:18:fa:0c:49:8a:aa:18:f6:38:46:26:1f:f7:06:69:62:
         00:b4:71:87:12:4b:89:e3:89:db:e9:9d:e8:2d:16:29:2d:6b:
         15:60:11:72:d9:f3:84:22:1c:a1:2f:89:1b:c2:bd:44:3f:03:
         d2:ea:c5:2f:72:80:55:54:f4:42:d1:cb:bb:c7:ea:a4:d0:56:
         4d:c7:42:0e:4e:e6:8e:88:38:56:f2:0e:12:61:7c:1d:3f:6b:
         ad:a4:d1:c3:8e:de:cb:0b:fd:11:6e:35:c5:54:9e:b6:86:a2:
         5d:c7:11:70:21:af:6e:66:d9:92:11:e6:ec:ea:31:c3:4b:ee:
         c8:68:87:a3:6f:5d:2b:eb:60:ad:3b:bd:b3:31:72:cc:03:12:
         81:f8:14:84:fb:1e:21:11:a5:f6:ea:67:db:c6:1a:01:9b:6e:
         79:87:ce:f9:35:79:13:e0:72:b9:07:b1:76:0a:80:a1:18:b4:
         a5:21:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:22:35 2026 by rpki-client