Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
File:                     oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json)
Hash identifier:          LWhJsAldmZiJaymvnZHPTycBlkL8/ZsfQwYFcanpDzQ=
Subject key identifier:   D0:74:F0:CE:91:59:1E:DF:D5:34:11:A5:A4:65:80:26:E3:90:35:FF
Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
Certificate issuer:       /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Certificate serial:       1420
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
Manifest number:          1411
Signing time:             Tue 12 May 2026 16:55:37 +0000
Manifest this update:     Tue 12 May 2026 16:55:36 +0000
Manifest next update:     Tue 19 May 2026 16:55:36 +0000
Files and hashes:         1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: FoOK5Qes9ORw0DbOJK3wIty7S+YfQN+uaH1cra6Ckiw=)
                          2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5152 (0x1420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
        Validity
            Not Before: May 12 16:55:36 2026 GMT
            Not After : May 19 16:55:36 2026 GMT
        Subject: CN=6a035b89-a480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:a2:9f:e4:49:f3:e0:46:25:2c:f6:03:cd:
                    39:5b:97:94:06:e8:dd:a8:51:42:bd:fa:96:99:ae:
                    f4:c7:19:92:f4:c2:54:d8:11:92:4b:35:5f:ee:c0:
                    d1:d0:9b:fd:ea:37:75:55:a1:df:99:4c:e4:ff:d0:
                    9d:7b:b4:9c:67:51:6b:0b:bf:78:26:74:e1:a8:2c:
                    3d:d4:54:38:90:8f:72:11:e8:ae:c4:03:38:90:89:
                    72:da:46:94:62:6a:b0:c5:e7:ac:a9:d1:78:b7:a3:
                    eb:51:96:3b:bd:bd:1d:d5:78:54:8f:27:dc:1d:eb:
                    69:4e:68:94:d6:86:a6:3b:89:f8:d9:ed:f9:8e:50:
                    0c:1c:85:bc:fd:4f:a5:3c:c9:8f:89:6b:e3:b6:35:
                    e1:8c:20:fd:13:92:79:8a:bc:53:d8:39:49:4d:7f:
                    88:95:03:e1:9a:b4:d0:a7:4f:d2:ec:4e:40:75:3b:
                    5f:a1:c4:f0:db:d4:8e:78:b0:e4:87:d1:65:bc:94:
                    18:c4:7f:e7:6b:c3:8e:fb:d4:96:27:2a:09:39:b7:
                    13:03:fa:3b:cb:87:e2:64:c4:36:91:d3:b2:8f:38:
                    1d:97:85:4d:91:56:54:5a:96:c0:d5:01:43:da:61:
                    b7:6a:0c:33:7f:08:0a:c5:92:6b:8d:73:9d:55:ce:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:74:F0:CE:91:59:1E:DF:D5:34:11:A5:A4:65:80:26:E3:90:35:FF
            X509v3 Authority Key Identifier:
                keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:5e:51:62:78:9a:7e:ce:e0:d8:16:11:ee:59:1d:21:b7:
         6e:70:a0:54:8e:2f:a0:1e:34:50:d6:af:8b:2c:6f:43:0b:18:
         35:d7:be:d5:49:65:ec:de:bc:d9:2b:71:bf:77:61:2b:c7:73:
         2f:d9:b1:57:4c:e2:b5:79:12:f3:d2:cd:be:7e:36:88:14:f3:
         bb:2d:e3:6e:26:10:1d:45:f9:b4:5f:d8:3c:97:69:68:e1:23:
         47:cc:77:8a:fd:c9:65:ae:69:f8:33:a1:ff:26:2b:67:31:57:
         f8:5d:c6:ab:d5:81:fc:78:5f:78:2e:25:ba:52:dd:b1:fd:73:
         90:34:ed:c1:fa:57:f7:90:7d:38:b4:45:3c:fd:1b:cd:14:86:
         e3:ed:6c:0f:57:12:d4:f8:8b:ef:b9:c5:af:51:65:92:8a:44:
         6c:8b:68:9c:1b:84:c6:b8:7f:6e:f2:0b:ec:4c:f5:b5:bd:41:
         87:17:f9:0f:d0:13:d1:23:29:6b:a5:46:d0:2a:3d:20:bb:b5:
         35:63:9a:41:ee:44:a7:ca:62:4a:e6:73:10:86:61:3a:35:df:
         c1:05:e6:10:44:2f:8b:bb:89:58:c4:bf:ca:0f:f0:5e:c7:f4:
         7e:87:15:6f:d2:73:1f:53:83:16:6e:46:66:80:38:09:67:56:
         4b:84:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:29 2026 by rpki-client