Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File:                     OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier:          tAbivCo7CmGrdH3aJHUP/mA+CUW3KX26RBqV3RHYWhQ=
Subject key identifier:   0F:8A:AF:13:F4:88:D3:16:3D:3C:24:F3:58:AC:CC:5E:1A:7E:A3:E0
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer:       /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial:       087E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number:          085A
Signing time:             Tue 12 May 2026 20:54:42 +0000
Manifest this update:     Tue 12 May 2026 20:54:42 +0000
Manifest next update:     Tue 19 May 2026 20:54:42 +0000
Files and hashes:         1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: KUNMiapejChV+7ih9dkcIfnm7WYPPV0w+mBiTX1uHBk=)
                          2: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: sQEpQuEbqYjD3RRWz6oiGW1QaCfG5tvcyqPy8Tyv+nc=)
                          3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: ev3sBPy0Q1f1TCa3FQ+DO7T8UGM3EjS+3+xQyEkvgdw=)
                          4: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=)
                          5: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: U/Zn+Je0L7uZPSDNgEJoOIW1ujI2JNhGIHidbTwoXrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
                          rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Validity
            Not Before: May 12 20:54:42 2026 GMT
            Not After : May 19 20:54:42 2026 GMT
        Subject: CN=6a039392-b07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:8b:9a:9d:67:3e:f9:86:7c:8a:6b:f8:50:
                    db:1d:cc:98:ae:cc:aa:d5:61:66:06:da:74:00:39:
                    35:95:6d:4e:a2:64:ed:88:c4:33:e1:4e:a9:aa:7d:
                    34:e4:dc:38:dd:84:f8:75:96:f9:27:4a:36:c0:f5:
                    51:00:d6:e2:b8:20:fa:f7:69:3e:b6:95:59:e5:0a:
                    5e:e7:a2:63:86:81:2c:70:16:3e:e9:e7:71:e7:41:
                    3f:3c:e1:63:a4:fa:97:c9:1f:07:07:0a:d6:cf:ad:
                    7e:c6:1e:01:fa:e5:b9:2b:97:e8:72:58:c5:bb:85:
                    65:bd:a3:22:f4:bf:cc:a5:75:48:3a:5c:4b:db:5c:
                    ed:09:ca:36:77:91:c5:c0:2a:51:19:6a:ef:7a:c0:
                    48:6f:9e:b9:7b:c6:89:23:a5:d7:d2:06:11:ce:c9:
                    36:6e:a0:77:a2:94:f2:ac:12:3e:1b:fd:5f:31:c7:
                    8a:ed:11:b4:75:23:16:6b:a0:5a:82:16:1d:d2:42:
                    9b:f5:f2:a4:1f:3c:70:4a:2a:73:2b:b6:3b:89:29:
                    1c:37:28:02:c8:88:73:9e:9f:74:7d:c3:43:3e:7f:
                    25:11:d1:30:8f:f5:95:de:3c:7b:c7:05:28:43:99:
                    00:17:f0:52:58:bc:2a:87:73:fa:93:cd:65:c6:b3:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:AF:13:F4:88:D3:16:3D:3C:24:F3:58:AC:CC:5E:1A:7E:A3:E0
            X509v3 Authority Key Identifier:
                keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:60:e4:6f:6d:13:3e:6e:77:c1:b6:6e:06:0e:f5:d5:85:4a:
         ac:74:d3:8c:8f:5d:8c:af:20:3c:02:82:a6:7b:5e:a9:00:41:
         5f:11:c2:2a:66:4a:0e:2c:2f:aa:59:bb:b5:9d:60:10:e9:63:
         20:8e:4f:5c:b2:f4:20:86:cb:71:e4:d0:27:de:25:3e:2d:f8:
         f1:04:9d:f8:42:09:7d:fb:f2:80:59:ca:19:81:08:8f:db:ff:
         74:e4:da:a5:9b:aa:73:28:d5:f5:e3:06:97:4d:3b:63:fb:43:
         53:ac:8e:bc:d3:45:6e:ba:8b:09:d4:26:72:80:af:50:f3:d2:
         af:28:b4:2e:1c:82:21:c6:3b:49:8b:52:b9:2e:ff:99:de:fc:
         ff:c2:c9:47:0f:38:88:45:30:35:86:a3:0f:9c:b5:f0:b2:08:
         7c:dd:1e:60:a2:38:49:05:51:e3:33:71:1e:08:99:cb:aa:54:
         01:77:b9:11:b0:fd:c7:77:12:b2:27:26:30:93:66:80:29:25:
         90:59:fa:d5:0f:1c:d2:bd:6d:b8:18:4b:e1:0a:bd:62:cc:90:
         0e:86:21:4f:a6:fa:42:78:1f:02:0c:b4:e5:51:9b:01:95:13:
         a4:b2:10:7d:a4:90:2c:dd:24:de:10:9a:cf:46:4f:5c:24:ee:
         44:a0:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:43 2026 by rpki-client