Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
File:                     0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json)
Hash identifier:          h0woN+5WU9M843Z04vM3vvVU33Fk+6CcfhEi9P1nSZQ=
Subject key identifier:   93:30:A0:DA:3A:C0:01:58:F5:5A:9E:C5:03:91:61:70:D4:31:7D:2D
Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82
Certificate issuer:       /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482
Certificate serial:       0F0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
Manifest number:          0F02
Signing time:             Tue 12 May 2026 17:38:10 +0000
Manifest this update:     Tue 12 May 2026 17:38:10 +0000
Manifest next update:     Tue 19 May 2026 17:38:10 +0000
Files and hashes:         1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: 05x926rSbu4Nh0dCNBdwwL3v+4DhcZ7ObJ+QrHPSJ9U=)
                          2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: ZJU3E4xLNci2M9TJjjqPAudQ5AtKvMG4lJIWYg4TQLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl
                          rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3851 (0xf0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482
        Validity
            Not Before: May 12 17:38:10 2026 GMT
            Not After : May 19 17:38:10 2026 GMT
        Subject: CN=6a036582-ab54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:76:60:de:80:7a:5a:6b:9a:87:61:ef:89:
                    9a:8a:d7:2c:99:3b:ce:48:aa:3b:07:05:b5:94:d5:
                    67:e2:3e:91:5c:ed:72:bf:8d:59:fd:d7:93:06:a2:
                    82:96:76:50:61:dd:ff:79:dd:2b:e6:22:b7:e5:88:
                    19:0c:c9:6a:2d:46:bc:26:73:1c:38:78:26:ce:0c:
                    e9:4f:44:f7:c3:3e:e3:c2:91:c2:a4:14:4f:7f:c2:
                    7a:f1:f4:44:1f:f6:ba:b4:f6:3f:e2:12:2a:f7:8a:
                    1d:e5:8f:6e:cb:46:36:63:ec:0b:bd:7f:fa:e3:31:
                    19:5d:e6:a2:24:ef:d5:2f:b1:84:0d:5d:b1:a4:de:
                    52:14:f9:d1:25:ef:0d:1a:13:21:71:3c:44:73:57:
                    b1:0f:e4:a9:d9:01:4d:03:a2:2f:0e:f7:e3:02:6c:
                    80:69:ac:27:c4:54:70:7e:b3:1e:e0:5a:a2:05:2f:
                    7a:16:02:55:4a:9f:c8:a5:4f:ce:5a:f5:27:e2:74:
                    5c:a5:e6:a0:2a:df:12:a2:e0:b5:36:94:ca:33:68:
                    b3:d9:84:38:6b:0a:0a:d3:d1:74:df:8b:35:e8:ac:
                    af:90:41:51:d1:82:61:89:3c:0d:39:2c:a9:0a:42:
                    96:ae:d0:86:be:21:71:18:03:de:6c:31:11:e4:7b:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:30:A0:DA:3A:C0:01:58:F5:5A:9E:C5:03:91:61:70:D4:31:7D:2D
            X509v3 Authority Key Identifier:
                keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:26:e0:36:da:0d:04:cd:18:7d:fc:cd:e4:7b:eb:58:53:c1:
         44:db:2b:f6:ab:45:0e:b6:c1:51:6f:de:93:ee:bb:b4:9f:3e:
         2e:ab:e6:0d:e4:3d:5e:15:ac:39:71:5f:fc:da:33:06:cc:38:
         3f:2c:9a:27:9b:e9:8d:bb:5a:ea:e9:95:c6:34:bd:47:de:4a:
         82:52:ee:db:e7:d1:81:73:d6:db:73:4f:6c:d7:7f:43:08:48:
         f2:b0:c9:30:cb:3c:bf:bc:cd:9e:13:7c:92:cc:2c:9f:ed:be:
         36:52:49:98:0f:ba:7b:24:e2:b0:2b:71:ab:32:6c:1a:70:3b:
         76:8d:a8:1a:92:3b:94:0a:44:b7:4e:3e:4e:5b:15:95:72:0f:
         e3:cc:da:27:c1:94:33:3f:c2:18:a7:ee:cb:1a:42:66:18:f8:
         bb:fe:ed:79:06:c0:59:0e:19:64:3c:0b:7a:af:4c:6a:18:85:
         83:25:f5:d1:59:96:f4:1a:e9:d4:bf:43:26:5d:ab:1c:d5:41:
         80:61:46:ee:8a:65:6f:f8:91:65:9c:27:14:be:25:8e:57:fb:
         bd:83:61:f6:39:2c:ba:42:1d:3e:02:46:3f:e6:49:06:8c:b9:
         67:23:3b:7a:ec:19:7c:b6:4e:ef:c2:9c:63:60:a4:64:f5:c7:
         64:6e:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:42 2026 by rpki-client