Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
File:                     O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json)
Hash identifier:          wb1Q+Fm1s37DwOqiJlmV3ohowm5Nb6twkg06SVw7Qzs=
Subject key identifier:   34:76:07:AA:B6:C4:0B:06:11:33:BE:DF:33:7F:DA:D7:A2:A4:1A:98
Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
Certificate issuer:       /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Certificate serial:       0938
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
Manifest number:          092F
Signing time:             Tue 12 May 2026 20:16:32 +0000
Manifest this update:     Tue 12 May 2026 20:16:32 +0000
Manifest next update:     Tue 19 May 2026 20:16:32 +0000
Files and hashes:         1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: RIZXkHwp1KZw1JFT+UqaAY3wEzF82qCneZuFF2LOY3Y=)
                          2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: PcM9VvZwEtkWziWmDAYLmLOnlkBtxqnyiAkGfpwesWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
                          rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
        Validity
            Not Before: May 12 20:16:32 2026 GMT
            Not After : May 19 20:16:32 2026 GMT
        Subject: CN=6a038aa0-4929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:90:a0:8b:60:3e:a0:5b:c3:10:a6:6f:e7:
                    e5:fa:7f:c1:90:d7:65:1e:39:3f:b2:f7:41:79:49:
                    5d:81:0f:fd:01:d1:b2:5a:bc:6d:9a:82:02:74:10:
                    20:04:b7:76:59:ae:d6:56:24:49:07:ad:43:06:07:
                    de:a6:5c:5d:3b:63:38:97:72:25:36:9c:48:9e:c0:
                    5f:c9:d7:4f:ae:dc:b9:61:21:ee:22:d3:02:1f:a2:
                    3c:f4:80:9c:6e:5d:a0:2e:31:8d:f3:d5:1c:ce:91:
                    af:95:cb:01:fe:34:f9:c3:7d:0f:bd:25:9f:0b:66:
                    d9:4a:f9:e0:16:32:38:40:f4:5d:2f:fd:8b:e8:c5:
                    17:ac:44:06:09:e8:f2:c0:8a:01:a8:5c:ef:42:0c:
                    0b:10:c9:1e:9e:de:b3:92:ec:10:70:e5:ea:e0:45:
                    82:ce:cc:a1:15:b6:47:da:3b:fb:13:03:a9:3b:94:
                    27:90:14:19:39:68:5c:8b:c7:b4:8a:a3:7b:39:98:
                    04:70:80:66:4e:4e:c7:18:1f:7b:8d:5c:e0:bd:4b:
                    0b:a9:0a:12:98:76:55:d6:17:43:85:34:b7:b2:20:
                    19:9e:4f:9b:6a:99:4b:9f:75:8f:80:f8:d8:78:de:
                    22:0d:04:fd:6b:7c:19:57:9d:b8:65:b0:55:71:28:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:76:07:AA:B6:C4:0B:06:11:33:BE:DF:33:7F:DA:D7:A2:A4:1A:98
            X509v3 Authority Key Identifier:
                keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:6f:6f:3b:44:66:2a:f0:ba:d9:7f:b0:fb:9d:4a:55:77:
         96:d5:08:9e:a6:68:ef:87:15:4e:46:35:93:66:53:c5:81:c1:
         ad:fa:62:db:9b:37:5a:83:bf:13:5b:f6:16:e7:10:b6:16:a8:
         6c:59:dd:1c:ce:d6:72:bb:7a:10:b0:f9:2a:ca:68:eb:1c:12:
         c7:cc:e6:c8:ef:c7:7c:88:40:74:20:a6:58:27:23:c6:12:a6:
         33:41:95:d2:3e:6e:8f:bd:b0:e3:c8:6a:14:24:2e:3f:24:c7:
         01:9b:ba:9f:0a:84:f8:42:13:61:0d:41:d4:5a:71:40:c8:bc:
         06:c6:e0:aa:1e:fa:d0:3e:8c:51:41:a2:26:f1:30:8d:f4:7d:
         47:bb:ed:aa:3d:0d:08:31:71:d1:ab:f1:9f:f3:cc:83:6c:72:
         9e:fb:a3:16:9b:3e:40:cf:c8:63:65:34:ee:b7:a2:2c:76:9b:
         a4:da:de:6f:53:fb:7b:1f:d6:1b:3b:eb:5d:91:35:39:91:f4:
         8c:8e:88:2b:1c:67:a7:3f:67:b2:bf:04:e2:5d:f1:7c:34:b6:
         70:88:29:bb:d1:e0:f4:e8:f8:ff:bd:54:49:f8:c9:67:a0:1d:
         f1:f5:c6:7d:ac:53:fb:76:74:9e:b6:80:c6:6b:5e:46:7a:ea:
         b9:f4:15:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw
QzEwQkUzRTcwHhcNMjYwNTEyMjAxNjMyWhcNMjYwNTE5MjAxNjMyWjAYMRYwFAYD
VQQDEw02YTAzOGFhMC00OTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0lOQoItgPqBbwxCmb+fl+n/BkNdlHjk/svdBeUldgQ/9AdGyWrxtmoICdBAg
BLd2Wa7WViRJB61DBgfeplxdO2M4l3IlNpxInsBfyddPrty5YSHuItMCH6I89ICc
bl2gLjGN89UczpGvlcsB/jT5w30PvSWfC2bZSvngFjI4QPRdL/2L6MUXrEQGCejy
wIoBqFzvQgwLEMkent6zkuwQcOXq4EWCzsyhFbZH2jv7EwOpO5QnkBQZOWhci8e0
iqN7OZgEcIBmTk7HGB97jVzgvUsLqQoSmHZV1hdDhTS3siAZnk+baplLn3WPgPjY
eN4iDQT9a3wZV524ZbBVcSgq6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDR2B6q2
xAsGETO+3zN/2teipBqYMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx
OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1
dG1YdmN1a21RRjhNRUw0LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWB5vbztEZirwutl/sPudSlV3ltUInqZo74cVTkY1k2ZTxYHBrfpi25s3WoO/
E1v2FucQthaobFndHM7Wcrt6ELD5Kspo6xwSx8zmyO/HfIhAdCCmWCcjxhKmM0GV
0j5uj72w48hqFCQuPyTHAZu6nwqE+EITYQ1B1FpxQMi8Bsbgqh760D6MUUGiJvEw
jfR9R7vtqj0NCDFx0avxn/PMg2xynvujFps+QM/IY2U07reiLHabpNreb1P7ex/W
GzvrXZE1OZH0jI6IKxxnpz9nsr8E4l3xfDS2cIgpu9Hg9Oj4/71USfjJZ6Ad8fXG
faxT+3Z0nraAxmteRnrqufQVkg==
-----END CERTIFICATE-----
Generated at Tue May 12 23:13:38 2026 by rpki-client