Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
File:                     OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json)
Hash identifier:          eKzG1c/cA68mb6kBMxkko9qpF96pRrqsGosac2NpuqY=
Subject key identifier:   F9:17:34:0B:83:38:B9:64:3F:5A:06:FC:01:1D:D2:9A:74:A5:6A:86
Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
Certificate issuer:       /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
Manifest number:          012F
Signing time:             Wed 13 May 2026 05:41:27 +0000
Manifest this update:     Wed 13 May 2026 05:41:27 +0000
Manifest next update:     Wed 20 May 2026 05:41:27 +0000
Files and hashes:         1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: yXfg9682S01VvILrAUQaTrw+QdsqrCxE9b99zaTVWSo=)
                          2: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: FGzuhrRvwprB5KpbvWYZLSjwv3h28HP8C3ekeqhOVdI=)
                          3: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: l3eydfjGEoMs5mo5Jx4Wnn5QeJIXXCfrBKeGcyLZ8Fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
                          rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
        Validity
            Not Before: May 13 05:41:27 2026 GMT
            Not After : May 20 05:41:27 2026 GMT
        Subject: CN=6a040f07-f0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:d1:b8:89:19:a8:a8:f7:a9:61:1a:f4:4e:
                    32:fd:b5:44:3b:62:b2:33:00:de:1b:47:c3:ab:fa:
                    aa:fc:17:a7:21:5e:2d:42:c0:78:f1:aa:a0:3e:4a:
                    37:43:c8:f5:b6:1e:22:6c:ba:8d:77:41:fa:c7:ba:
                    ce:f0:31:96:72:5a:95:3c:3c:73:6a:7c:7d:2e:41:
                    f2:85:90:5f:6e:3c:6d:c0:bf:6a:f6:0c:7d:b7:65:
                    46:a4:9a:3d:e5:2b:e0:85:b2:74:b3:89:13:8a:ea:
                    89:01:f7:5d:4c:23:c2:82:c5:ff:92:e7:c2:a5:87:
                    ee:50:f9:eb:70:19:19:6b:0a:cc:f4:32:63:85:ee:
                    fb:66:cd:91:89:79:ef:1a:14:74:82:0a:45:ff:48:
                    a1:d6:6e:3f:f4:a9:74:3f:3a:db:01:82:40:05:ea:
                    96:d5:3c:36:cb:7c:80:bf:a0:ae:fc:e7:22:59:ff:
                    11:c5:1d:68:ae:8a:4e:f3:e0:68:17:e0:06:72:4e:
                    90:c6:df:0d:12:4b:aa:38:3f:9d:94:49:2b:22:27:
                    ae:a3:fa:3b:b2:f5:7e:18:cb:a3:a9:de:f4:38:16:
                    ac:ef:90:9b:ae:30:cb:21:4f:a1:a8:09:5c:ab:89:
                    e6:fa:a9:13:d4:61:04:3a:81:b1:98:3d:db:63:a0:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:34:0B:83:38:B9:64:3F:5A:06:FC:01:1D:D2:9A:74:A5:6A:86
            X509v3 Authority Key Identifier:
                keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:27:ce:a9:63:05:7d:a0:e4:53:d8:88:b6:ea:c5:e7:b1:d8:
         2c:69:5c:fd:72:f1:74:c1:ff:31:08:ed:33:0e:ba:1d:62:78:
         9a:11:af:41:26:af:5b:d9:d8:2b:c6:e2:2a:a7:07:ac:9d:a9:
         16:b3:e2:86:5f:23:36:98:4a:e1:41:7b:d9:cb:65:90:22:9d:
         63:1f:ca:c5:e9:91:2c:0c:9c:f6:e6:27:b3:6e:aa:e7:22:60:
         02:18:03:8a:02:8d:67:b1:c0:a3:78:c5:fd:a2:ff:e4:a1:44:
         4f:9f:b9:c8:86:7d:29:fe:cc:e6:97:19:cf:4f:56:c6:61:1d:
         fb:bc:23:9e:5e:61:06:69:c1:6b:3e:52:34:dc:c5:aa:cb:de:
         ad:2f:05:15:b4:55:26:9e:b4:e2:57:2d:84:ff:1f:04:4c:e1:
         0d:a5:16:9a:a4:13:45:b3:db:f9:6f:c8:92:f0:6f:48:21:07:
         cc:19:10:73:75:19:af:bd:bf:ca:a0:38:bb:83:d0:f8:76:bb:
         21:19:6e:2a:40:db:c5:c7:f5:dd:45:f5:dd:f0:5a:45:ee:f3:
         3a:e2:71:d1:9d:b4:e8:d2:75:a1:90:54:2a:ba:a5:48:df:90:
         e0:f6:e8:cc:7f:bf:3e:be:cb:9e:70:7c:c4:5b:98:00:40:84:
         16:a8:2e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:02:31 2026 by rpki-client