Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          gE/dwGaol5RQSyaOMFm+p7Qr/dEIXdC3yFwQA2oNLpM=
Subject key identifier:   A2:8C:8B:0F:68:95:9A:12:BC:C9:F1:7B:67:81:92:30:9B:B9:A3:BB
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1067
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0D76
Signing time:             Tue 12 May 2026 19:44:15 +0000
Manifest this update:     Tue 12 May 2026 19:44:15 +0000
Manifest next update:     Tue 19 May 2026 19:44:15 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: Aepi5aO1NWIXA1+Z+96V4+2geYLZ3+lBnkJzhPuySR0=)
                          2: F85564DA127711F18BE24F01353D8C67.roa (hash: xLEMW1WeRTdeL1parZjm1o3kSVKBhcygphTEuPzcr9E=)
                          3: 849E45A839B811F1B2456B00AE833773.roa (hash: WrHoimy7W3Kh4V/ViVWvGFPYBxuHZRvygLPr6i6VQGA=)
                          4: 6D2E74CE119511F18720E261383D8C67.roa (hash: ohbtR0bU4Nw5MTZqq0EScoDeeVXif9T0EFY44v6uECc=)
                          5: 1032DBDC43C411F19EF40EF49E833773.roa (hash: TLYnbVCtKL9+DW+fSfcwbZQtNwrqRS1EtGPCUYnEE+c=)
                          6: 4C692978419711F1B231ABB69F833773.roa (hash: j6EC0scEQGwbeez5XUvQrEX6Zct0WAzh456SxbrLHgU=)
                          7: F94772A2127711F18BE24F01353D8C67.roa (hash: Ia2OY00mHGLN5kewmPdoukAdUzDfyI0EliOAKlUSYq8=)
                          8: 9C1227FE164511F1992ACCC2403D8C67.roa (hash: B5QpT3KOJZjxftF1mEkAc77f38gbyfCcpBtAmGDEp3Q=)
                          9: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: z0LgFHba0FwF6fQrrQACVyXZeL4NTZdHGfqQ2uiux64=)
                          10: 4CE25F844D5211F1B621E394CB833773.roa (hash: qg8/Ls1Uj1/gpLrqzBq1E3uEwVmukE98NL+Us2r+7rk=)
                          11: 65020FA2288011F1BBF58DB5A8833773.roa (hash: ZSdTfWuzS86WLzpkvNdiXv34xqzKQg41A9OfgH776Xc=)
                          12: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: vtYeDrgDVDYpydstxqGvKZDpQ+8m/h2qUkMiKDSPoy8=)
                          13: D9419C8A39B911F1AC578A42AE833773.roa (hash: qwSxeuQSB6Duh1LMHCpJoNbQHXCiqNIZI9gcnzEG6ds=)
                          14: 0F2483DA43C411F19EF40EF49E833773.roa (hash: v1WOhEhUKOCQ3XK7nF8XmWsAvTu3F/dSZv3FoVz4rO0=)
                          15: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: 24u4HBCO1KtwHfOL7e2RjvlMPalnF3UcOXpG6jE4G34=)
                          16: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: TEd4/aWDB1KLW6JK30VIuFWcMe+qda12gGy9MUlfqhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4199 (0x1067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: May 12 19:44:15 2026 GMT
            Not After : May 19 19:44:15 2026 GMT
        Subject: CN=6a03830f-83d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:9a:c4:d2:32:b9:22:f9:40:80:6c:83:e4:
                    8a:f5:9c:4b:bb:df:ca:4a:88:4c:68:76:78:13:43:
                    dd:47:d5:8e:4a:15:40:7b:ad:76:9e:e2:58:a2:22:
                    fd:cf:37:8d:4f:47:e4:5a:fd:81:fa:21:da:24:88:
                    22:99:6d:65:a0:54:49:c4:96:09:a5:8f:49:6a:56:
                    55:4a:bf:cc:91:1e:7d:c6:a0:80:f6:d1:e2:1d:29:
                    4a:96:1e:b9:b8:08:48:0b:99:f1:e8:b4:27:34:b0:
                    a6:37:1c:56:c0:ac:9b:9b:09:b3:cb:51:05:41:09:
                    ee:ef:3e:3e:fb:48:2d:15:01:ba:c5:35:d5:d4:3f:
                    67:3d:9d:67:ae:37:d1:19:fb:da:10:01:14:d6:6b:
                    d2:63:ad:8c:91:e1:58:84:11:a8:bb:09:28:63:af:
                    91:e5:8e:66:e1:e0:3a:aa:1c:21:7a:04:fd:ed:8f:
                    52:01:f4:3f:d7:b9:02:e6:51:59:8c:ba:b9:57:a1:
                    18:d4:db:76:4a:24:07:1b:96:f7:c8:a3:e6:20:34:
                    14:d0:17:3f:00:43:4a:1e:53:13:ca:55:d5:4b:5f:
                    52:87:e1:ec:10:5e:bb:ca:11:65:c2:d7:73:21:d1:
                    c6:ee:4e:48:77:3b:2e:c3:0c:bf:81:57:c7:76:45:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8C:8B:0F:68:95:9A:12:BC:C9:F1:7B:67:81:92:30:9B:B9:A3:BB
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6e:7d:4c:68:e4:3c:4b:d6:08:3d:a9:c6:d2:fe:b1:fa:03:
         26:71:d8:5f:24:85:d1:c1:c2:b7:f9:c7:a7:86:70:d5:0a:11:
         a0:bf:5d:0e:5e:86:87:90:a5:24:8e:9a:0c:e9:1a:d5:ab:e0:
         27:23:af:51:6f:32:f0:aa:4c:3c:c6:f1:ef:cc:66:26:a6:85:
         19:9a:ac:fb:24:3e:9b:4d:c0:40:75:2e:ed:66:35:e1:45:75:
         17:ae:6f:a9:9a:5e:8d:db:fc:2b:f1:28:6d:76:10:91:55:7c:
         e4:62:ac:82:d4:15:18:a0:04:ea:7a:12:ef:b5:30:d6:43:9a:
         96:69:8a:ca:9a:18:12:90:8e:31:71:bf:a2:3d:7b:0c:bd:dc:
         6c:26:91:8a:f0:32:4f:9a:c4:82:26:17:ba:67:eb:33:ab:51:
         48:1a:69:22:87:13:e6:34:d5:62:0a:56:8d:d1:77:4b:ec:96:
         1b:12:91:0b:46:34:23:85:6b:98:ca:ce:fb:2a:1c:aa:50:02:
         24:ee:f6:e3:a4:8b:42:a1:3b:6c:ef:92:3e:94:0e:94:ba:a7:
         14:45:c6:3e:03:45:3f:d7:51:95:df:e2:29:05:2a:d0:22:59:
         2f:9b:a3:9a:bd:7a:2b:91:f2:27:41:d4:d4:a4:67:1c:b5:d7:
         50:21:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:38 2026 by rpki-client