Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
File:                     O-7kvaWgSxBLHXLmAcMJONuktkQ.mft (raw, json)
Hash identifier:          tAD301Vcm7oHAOF296tQXSCc3uLazF/yc68dvHnmhZY=
Subject key identifier:   8E:F6:11:DA:4C:82:AC:1A:E9:22:C1:FD:DD:41:2F:E2:B0:DB:99:6E
Authority key identifier: 3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44
Certificate issuer:       /CN=A911D2A3/serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644
Certificate serial:       15C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
Manifest number:          15B5
Signing time:             Tue 12 May 2026 16:45:59 +0000
Manifest this update:     Tue 12 May 2026 16:45:59 +0000
Manifest next update:     Tue 19 May 2026 16:45:59 +0000
Files and hashes:         1: O-7kvaWgSxBLHXLmAcMJONuktkQ.crl (hash: MfhE3EQsfav0ov+6yN07wrRQ2JRw62voN4gaj9ocelg=)
                          2: D9EDB272C44C11ECA07C2D77C4F9AE02.roa (hash: FtB2tGvplGzCJWlj88NsorSrUzak1GMw1nVvvDj7yFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl
                          rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5570 (0x15c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D2A3, serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644
        Validity
            Not Before: May 12 16:45:59 2026 GMT
            Not After : May 19 16:45:59 2026 GMT
        Subject: CN=6a035947-0205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:92:b6:12:82:27:7f:77:c0:6e:cf:2e:f7:
                    6f:45:00:84:b7:39:90:1c:21:d1:77:cf:3c:ff:8e:
                    ca:b6:68:c3:69:bd:f0:4b:7c:c2:97:2b:f6:2f:80:
                    46:53:14:5b:92:19:f9:63:a1:64:b7:df:b0:1d:6b:
                    c3:ac:d9:1e:74:98:0d:85:00:dc:80:82:79:dd:a5:
                    02:70:ee:96:2a:79:06:9b:db:e1:3d:01:43:0c:e5:
                    03:68:75:7d:41:14:21:7d:e5:52:6c:74:8d:12:5f:
                    aa:d5:7e:34:e4:bf:d0:f1:84:68:ab:63:05:23:3e:
                    27:38:f3:f1:14:ac:88:96:d6:8e:42:32:d3:b4:dc:
                    f0:53:bb:f0:f6:df:f8:bc:bb:4a:ba:10:f8:ce:d8:
                    22:3c:ae:3a:8f:81:c0:c6:be:48:7c:b4:f5:6a:fa:
                    75:19:70:49:af:a6:14:28:bf:6d:6f:51:f2:a7:13:
                    10:96:63:f2:da:9d:d8:a2:15:a1:3e:86:bb:46:a0:
                    27:9e:21:0f:34:01:62:26:c9:41:69:bb:f7:ef:52:
                    59:76:2a:31:98:4c:e5:7c:72:f0:1b:64:09:eb:6d:
                    b0:25:09:70:27:28:20:09:fa:74:b0:71:5f:89:60:
                    7b:e7:22:82:7b:51:f8:a6:e3:dc:42:42:77:bd:4d:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F6:11:DA:4C:82:AC:1A:E9:22:C1:FD:DD:41:2F:E2:B0:DB:99:6E
            X509v3 Authority Key Identifier:
                keyid:3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:02:3f:de:44:be:ce:59:90:4b:c1:75:01:fc:db:72:4c:e4:
         35:06:05:5a:13:33:5c:5f:6b:9a:a4:fc:d5:dd:63:de:24:a4:
         a8:76:7e:5f:72:5b:b2:59:7f:a9:06:45:d9:df:6b:af:d3:5c:
         b0:84:6c:8b:bc:ef:9e:64:3e:d8:cd:20:47:ce:38:fe:e0:43:
         3e:ad:9d:4c:34:31:d7:fa:08:5a:8d:10:7e:9e:57:45:61:dd:
         36:b9:22:2b:90:8a:a7:f8:f0:be:d2:fa:d3:00:eb:2e:02:b2:
         be:41:78:86:76:df:ea:93:94:71:7d:e5:e7:7d:cf:73:f4:ac:
         9d:0b:4f:93:95:cb:a3:37:43:e7:37:40:23:f9:7b:79:12:90:
         28:1f:d1:ed:6f:3f:2d:4f:48:08:e0:4e:f2:21:48:39:ee:42:
         47:9a:6b:86:bb:bf:23:54:92:0b:79:3a:f9:14:b0:51:69:9a:
         13:48:69:70:a2:54:86:91:1a:2e:29:75:2d:57:d4:6b:3b:f4:
         d1:81:30:48:88:fe:b7:cd:fa:43:98:da:7b:22:c0:19:d3:a9:
         d4:24:83:08:35:87:ed:08:7a:f1:d2:e4:00:ac:6f:3a:ea:5c:
         5e:47:26:7d:39:3a:82:df:fe:48:26:e0:6b:70:2a:12:e3:8c:
         ca:8a:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:36 2026 by rpki-client