Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
File:                     oaoqLFbmSp2buqM3ttarNhctNo8.mft (raw, json)
Hash identifier:          y4XUTPgR7d09M3mlU8KDbanoZEMcMXlWhI0I1vK0/pI=
Subject key identifier:   CF:8E:09:21:D3:80:41:C8:A7:14:15:FB:FD:97:DA:F8:50:D4:18:B4
Authority key identifier: A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F
Certificate issuer:       /CN=A912E8F6/serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
Manifest number:          46
Signing time:             Mon 11 May 2026 08:33:47 +0000
Manifest this update:     Mon 11 May 2026 08:33:46 +0000
Manifest next update:     Mon 18 May 2026 08:33:46 +0000
Files and hashes:         1: oaoqLFbmSp2buqM3ttarNhctNo8.crl (hash: Yat6R2Ct7UNwNZcLy+U5HMuEncNKeZQA1/QQtL32u4Q=)
                          2: 21C6EACAE7B011F0A5419645536F56BC.roa (hash: mbVKHxvDHfsDn3xPoeQPYidGJVTPmS9WOCsflAWApWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl
                          rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E8F6, serialNumber=A1AA2A2C56E64A9D9BBAA337B6D6AB36172D368F
        Validity
            Not Before: May 11 08:33:46 2026 GMT
            Not After : May 18 08:33:46 2026 GMT
        Subject: CN=6a01946b-f484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:01:e3:a3:32:82:7b:7c:51:4b:27:03:20:b2:
                    cb:4d:01:7e:5f:b3:e0:ea:75:ea:83:01:41:bb:5a:
                    82:77:ad:b0:7e:ef:2e:61:d3:d4:80:7b:70:f4:cd:
                    13:ae:14:7f:89:d0:46:fe:b5:b0:46:05:46:c6:4c:
                    13:7c:16:94:64:60:f4:65:1d:70:06:de:21:ab:13:
                    42:c7:51:ec:bb:a1:e0:53:06:a6:af:a8:79:42:d9:
                    b6:f0:e5:88:af:9d:b1:9a:a5:ed:5a:3b:df:0c:d4:
                    57:2d:ce:9e:a3:20:af:2e:3d:d4:b2:56:67:a9:72:
                    f8:41:db:1c:ca:88:31:06:46:32:89:a0:4b:d2:56:
                    85:f3:bd:41:f9:7d:9e:04:8b:15:95:5c:77:c0:e8:
                    d7:b3:73:07:47:1b:5b:59:90:a7:8c:8a:4c:de:89:
                    01:9d:1f:53:56:2a:38:b5:90:eb:f6:fa:31:f0:5e:
                    9a:e9:39:1d:75:e3:b1:ac:96:e5:bf:c5:8f:7f:c9:
                    65:85:8b:21:ac:b7:72:ba:6e:7d:28:fa:36:41:07:
                    ef:13:5b:07:dc:c5:98:f3:24:eb:f0:cc:d7:11:15:
                    6a:ea:f1:41:94:b1:21:74:32:f8:4d:06:e9:49:00:
                    13:af:89:b9:aa:07:2c:85:00:aa:1a:18:2a:25:14:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8E:09:21:D3:80:41:C8:A7:14:15:FB:FD:97:DA:F8:50:D4:18:B4
            X509v3 Authority Key Identifier:
                keyid:A1:AA:2A:2C:56:E6:4A:9D:9B:BA:A3:37:B6:D6:AB:36:17:2D:36:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oaoqLFbmSp2buqM3ttarNhctNo8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/3D6D8FF0E7AF11F09B06A342536F56BC/oaoqLFbmSp2buqM3ttarNhctNo8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2f:3c:0e:fa:04:d2:b8:33:7d:e3:1e:f5:28:15:81:70:9b:
         40:b7:bf:b9:6f:cd:77:98:d4:1c:fd:0a:a9:ec:8e:54:c2:2e:
         4b:44:78:7d:54:aa:06:e9:d5:0f:6a:b4:21:b9:b0:c6:14:5c:
         2d:74:6b:7e:57:cf:36:be:fb:e3:2d:21:56:4f:e6:c1:d1:c4:
         40:2b:ab:cd:d8:98:d9:f2:62:80:83:3b:e7:c4:d7:5c:2d:7d:
         08:69:f3:87:86:a4:74:8b:e1:e1:f6:08:02:33:0f:d3:84:f0:
         f1:69:f8:07:ec:b0:ee:5f:d2:ab:95:eb:09:3c:2c:bc:48:4f:
         91:a4:e5:e2:3f:e2:35:02:71:51:56:da:b3:11:96:ad:4b:18:
         5d:41:7f:df:0d:85:2b:ac:ff:59:b4:ba:b8:3c:8c:09:c0:59:
         11:76:a9:d0:10:ca:c7:50:2b:88:64:f7:c4:56:7f:1b:bb:66:
         ab:3a:e1:d5:3a:d5:f6:c5:81:c5:4c:fb:4d:22:72:e2:da:89:
         ab:bf:43:b7:b1:dc:5b:fe:e5:7b:81:46:22:36:94:47:a7:6d:
         39:52:96:17:2e:d6:f5:6d:cd:f7:b0:ee:a6:eb:21:3f:38:ad:
         64:c5:73:e2:0e:35:97:7f:b3:72:68:95:cb:a8:3b:19:5c:ad:
         80:12:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:50 2026 by rpki-client