Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
File:                     OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft (raw, json)
Hash identifier:          C6ZnzjuQUqOfswluQo2LdS9s9r3yDrAXJ//lb88Etso=
Subject key identifier:   40:2A:BF:B5:7F:DB:FF:92:17:EE:19:5E:4B:53:5B:4F:1A:EC:00:D3
Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
Certificate issuer:       /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
Manifest number:          0211
Signing time:             Wed 13 May 2026 03:09:21 +0000
Manifest this update:     Wed 13 May 2026 03:09:20 +0000
Manifest next update:     Wed 20 May 2026 03:09:20 +0000
Files and hashes:         1: OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl (hash: g1RB2UomAfUYzmaLWTlFffPZ/7t6BfyWJjbiW73n4F8=)
                          2: FC73357271B811EEAEDED685C4F9AE02.roa (hash: akhySB51PMI2y7wAP//uAqapHy/Dl5nwYVbMKbRi7uI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
                          rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916600A, serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
        Validity
            Not Before: May 13 03:09:20 2026 GMT
            Not After : May 20 03:09:20 2026 GMT
        Subject: CN=6a03eb61-281e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:bd:0e:13:00:1a:b4:3a:09:37:ca:27:22:
                    1a:e1:64:71:e2:e2:40:7c:b6:7f:15:a6:c6:28:cf:
                    4c:fd:ec:71:b2:f8:5e:41:07:77:e5:3b:9b:77:df:
                    0f:93:f5:a1:ab:b4:30:9c:9a:56:10:72:88:55:00:
                    d1:e5:e8:ae:44:15:05:70:8f:63:d1:63:77:96:78:
                    cf:60:cc:a5:d6:84:24:62:a2:b6:a0:cc:7a:98:7d:
                    75:31:e2:99:6f:b6:12:db:75:5a:e1:57:b5:56:bd:
                    0b:05:81:80:4f:a1:4b:07:a3:65:18:18:85:fd:2e:
                    26:18:fd:5a:22:c6:e0:05:5b:5b:16:4a:1c:80:f0:
                    3d:18:09:f3:9f:65:14:b9:4f:56:a0:3a:7f:b1:20:
                    a2:b9:63:20:fb:b8:29:14:51:b9:4e:8f:9f:1f:b6:
                    c1:e7:6a:0e:fd:8b:85:92:43:5b:88:61:53:7a:c5:
                    b2:04:4e:ba:87:57:3d:52:e7:aa:62:49:ed:4f:ba:
                    96:22:6b:b7:a6:e5:29:bc:d2:4e:d0:25:b8:9a:3f:
                    06:b3:e0:f7:af:ba:8a:e0:7f:0c:6f:42:29:d9:b1:
                    8a:70:5c:d4:f9:15:f8:0f:1e:1f:71:43:c1:64:9b:
                    1c:59:08:24:99:63:ef:d7:bf:7d:b5:72:a8:78:eb:
                    66:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2A:BF:B5:7F:DB:FF:92:17:EE:19:5E:4B:53:5B:4F:1A:EC:00:D3
            X509v3 Authority Key Identifier:
                keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:95:09:06:31:b2:5a:d2:46:79:46:1b:01:63:60:04:87:cc:
         eb:4e:5a:75:ab:2b:4e:90:3a:a8:46:7b:17:e2:62:70:f3:b6:
         d1:60:08:93:a4:4a:b3:66:e2:1d:8f:57:87:0f:15:1d:fa:f7:
         ea:2f:ff:63:ee:c2:3c:ef:65:77:e2:f4:75:50:d0:5e:0b:c0:
         63:62:3e:1c:0a:2e:48:7e:fc:ce:16:c6:27:5a:37:5a:7e:3a:
         8b:3e:64:0a:3f:4a:ff:87:ef:76:cc:08:d7:1c:79:e6:30:76:
         ba:7a:8f:92:7a:2c:d6:20:dd:8d:49:bd:3a:55:27:68:0c:e9:
         36:3e:d2:eb:ac:c7:3a:6b:3e:d2:f3:22:cc:e9:74:e8:f2:91:
         ac:00:8c:4b:ba:b6:6c:56:ac:22:82:04:91:b5:cb:e0:03:99:
         9c:7b:45:5d:a9:fe:d5:fb:24:b8:e8:3f:2c:9a:79:fa:76:b3:
         6b:d7:8a:b3:c6:d7:46:16:ca:49:98:2c:dd:1e:e4:5f:1d:b0:
         e7:b2:b4:fd:99:57:a0:65:50:8a:48:da:d0:7a:50:6b:95:df:
         4a:38:0b:e3:38:2f:49:7b:1b:b7:22:60:be:7f:11:dd:4a:a0:
         8b:58:2f:82:01:80:6a:d3:c7:17:6d:e0:8f:1a:3b:00:9b:1a:
         9a:ee:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:21:01 2026 by rpki-client