Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File:                     OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier:          yAxzl/CaTjuIN5zL8ATAEv/GmqtPmRVF0F3mtV3Lxzw=
Subject key identifier:   EB:88:08:44:AA:D8:7A:AC:17:0F:6D:D7:29:72:BB:A3:0F:04:C5:51
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer:       /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number:          0188
Signing time:             Wed 13 May 2026 02:35:27 +0000
Manifest this update:     Wed 13 May 2026 02:35:27 +0000
Manifest next update:     Wed 20 May 2026 02:35:27 +0000
Files and hashes:         1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: 3Ru0lUhDLDF2cFAN1Ntns2D/UVcq1hxTsHe64DGzOzk=)
                          2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: W7D/CE6bwRnzbpMvwdGdNhRCXEBo9prgW8s4Z6/gD9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
        Validity
            Not Before: May 13 02:35:27 2026 GMT
            Not After : May 20 02:35:27 2026 GMT
        Subject: CN=6a03e36f-bac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:b5:7f:6a:81:c9:17:bc:a2:b3:96:84:3f:
                    fa:5b:e2:92:58:a1:c4:e3:c5:4c:f7:0b:c6:a8:b0:
                    2d:3f:cc:b4:3f:79:e9:e5:a1:9c:95:71:f6:0b:d5:
                    f3:b6:77:aa:4c:fd:0b:94:90:8b:26:c6:f9:3e:91:
                    f5:a8:32:9a:d6:e1:f7:95:ef:50:49:af:29:c7:60:
                    9e:74:d6:f9:95:2c:55:ac:e8:9f:6e:33:16:9f:1d:
                    e7:63:21:e6:e4:5d:e0:53:4c:31:54:f0:13:d1:17:
                    14:4c:e2:68:99:ba:00:38:e1:62:8c:22:3b:ef:4a:
                    86:c4:76:c7:43:f3:94:be:9a:f7:b7:75:0f:b6:23:
                    8d:0a:ce:5c:b8:fb:c0:8b:01:f8:b0:c4:05:3c:29:
                    59:a1:a1:97:d9:6c:3d:67:ba:0f:e1:31:5b:8d:22:
                    b5:d2:f1:67:26:8b:e6:06:3d:a6:b0:69:93:bc:da:
                    f0:84:45:4e:d1:4b:40:89:3e:c6:9e:15:b8:e4:4f:
                    7b:f2:a2:66:04:18:72:a5:36:14:14:58:c8:87:a6:
                    13:7d:4a:8b:6a:60:75:28:56:d5:07:87:49:ab:24:
                    27:4c:5f:16:99:45:f1:7d:01:b9:ce:7d:b3:b0:cd:
                    02:5a:f1:6f:26:1a:44:bf:bb:f1:66:f4:cd:e9:1f:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:88:08:44:AA:D8:7A:AC:17:0F:6D:D7:29:72:BB:A3:0F:04:C5:51
            X509v3 Authority Key Identifier:
                keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:36:29:8d:4b:d9:cb:7b:ba:88:40:35:af:b0:89:2a:78:70:
         c0:34:b0:24:4c:9a:b1:50:4e:c1:8a:85:5b:a1:3c:2f:62:90:
         ed:10:ff:81:33:0c:7a:2d:6e:04:7b:88:07:54:e1:fb:57:33:
         29:02:e5:8a:a4:63:2a:70:fc:b0:2d:ae:0a:0f:0f:fb:b7:2b:
         0f:ea:1e:91:f0:69:a4:db:48:f3:f4:a8:21:15:92:62:39:32:
         50:c2:05:5e:d9:39:07:89:32:fa:ae:1b:51:53:f0:26:40:cc:
         a8:1f:78:db:a5:67:62:c0:a5:f6:9a:81:4a:51:82:fd:08:10:
         f0:24:7e:85:cb:0d:ef:73:83:78:6c:fd:eb:36:e2:a4:60:ef:
         40:bb:b6:ae:b4:cd:f0:28:c1:ea:b2:8b:f8:ac:67:47:08:09:
         15:5c:34:03:b6:4e:a2:b7:92:dd:7b:95:db:69:a5:28:5e:0d:
         00:e3:24:cd:66:4f:c4:de:48:e2:43:ae:38:89:6a:a2:5a:c0:
         79:e2:98:e0:5e:37:f3:3d:fa:32:4b:ae:03:64:96:9f:61:8e:
         54:f5:ce:0f:de:77:dc:7c:86:01:71:1d:5d:7a:a4:18:2e:14:
         b5:4c:10:91:2f:b1:54:09:b9:36:80:5e:8f:9a:9b:dd:65:71:
         9d:d6:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:15 2026 by rpki-client