Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File:                     owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier:          4uF0HS+AjaddJafImQIohvYJJ7E1h4USoZ29ExqCGfk=
Subject key identifier:   62:0F:D8:33:A3:42:68:81:A6:6A:CE:E8:D3:2B:68:15:00:FD:7A:40
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer:       /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial:       0D27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number:          0D1B
Signing time:             Tue 12 May 2026 18:08:28 +0000
Manifest this update:     Tue 12 May 2026 18:08:28 +0000
Manifest next update:     Tue 19 May 2026 18:08:28 +0000
Files and hashes:         1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: qWGdUueZpQdz/aAR6q3bX1nNNe40zn/L6GS2ZUC6HAo=)
                          2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: p/HN4+cYHb4pXYatqROBo401SMy00O/P6+sd+OS9rlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
                          rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3367 (0xd27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1
        Validity
            Not Before: May 12 18:08:28 2026 GMT
            Not After : May 19 18:08:28 2026 GMT
        Subject: CN=6a036c9c-4552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:98:37:1a:9d:e3:e0:7b:ba:bd:a8:5e:d1:
                    d5:24:d3:e9:1e:e1:47:d9:b7:4b:4e:6b:5a:25:40:
                    60:94:6d:1f:4f:f0:3e:f1:44:d3:7b:a8:37:12:bc:
                    25:ec:35:a5:b1:cc:bd:14:35:00:d2:e8:ff:76:3e:
                    6d:2f:27:57:10:2a:ca:d6:1e:91:4a:41:33:73:a8:
                    32:dd:17:8d:42:ca:36:13:b7:d9:07:aa:54:1c:ef:
                    95:61:f2:03:fe:a7:6e:d4:71:f5:7e:ce:e2:91:15:
                    fd:b1:e3:7c:43:b1:e3:2c:b9:00:52:b1:7b:76:f5:
                    ee:b6:28:b7:a4:c5:f6:72:d3:a0:3f:0a:03:a0:40:
                    ce:79:02:ab:e0:1a:e6:3b:49:40:d6:3b:df:f3:e3:
                    1f:b6:10:53:30:22:b6:a1:ea:d1:50:b0:1c:62:e6:
                    43:84:68:5c:b7:f9:cf:ca:51:4b:83:79:3b:48:b8:
                    ac:64:ce:fa:de:e0:1d:7e:4b:a6:e0:7f:31:88:ec:
                    00:b4:5e:ce:3e:55:5c:c7:9f:2b:c1:1e:e2:1e:b9:
                    d6:4a:fb:5c:df:16:23:40:49:4c:34:e6:b3:4a:6a:
                    68:c3:2b:2d:25:b1:d8:c1:9c:20:17:39:ea:8f:98:
                    e5:14:66:89:10:b0:a7:92:47:3a:b6:cc:2c:00:29:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0F:D8:33:A3:42:68:81:A6:6A:CE:E8:D3:2B:68:15:00:FD:7A:40
            X509v3 Authority Key Identifier:
                keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2f:3a:ec:b6:52:84:c4:dd:75:63:4d:ba:ef:8a:ec:db:cf:
         67:95:53:57:82:11:27:b8:00:8f:db:45:ff:10:59:9f:c8:4c:
         b2:af:bd:dc:62:00:b9:23:9e:fd:f0:ae:9e:48:e4:03:b1:6a:
         46:55:93:e4:89:d9:f7:35:fa:21:33:f2:c8:f1:1d:02:df:8d:
         f2:3a:83:7e:1c:7a:7a:e7:60:cc:47:f8:61:51:fb:62:69:34:
         d6:09:d4:be:0b:c8:31:9c:d2:d0:ae:02:84:99:2b:d8:34:73:
         c9:86:24:35:70:b1:1b:a1:33:2f:fe:21:36:fd:7e:d2:19:90:
         61:cb:b1:d2:1d:f2:3b:ac:db:b6:1c:3a:c8:0d:af:ec:b5:48:
         0b:a1:22:ef:f2:c7:b8:fd:6f:d8:c1:7f:c3:02:95:14:3e:b1:
         af:b8:1d:44:b2:e4:59:33:93:08:88:f1:a6:91:e0:f3:0c:a4:
         ec:65:c5:f9:d6:da:38:68:71:8e:fe:d9:85:a2:cb:5d:5f:41:
         37:9e:14:8a:0e:f0:99:ed:ef:47:cd:50:8e:01:5f:de:7a:7c:
         e0:7f:a4:06:95:63:90:53:36:82:24:c9:98:50:1c:51:59:51:
         a2:28:11:99:a9:88:c2:c1:bb:45:38:7c:6a:be:4f:65:ba:a6:
         9d:3d:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:08 2026 by rpki-client