Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
File:                     Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json)
Hash identifier:          XEReqnX94YsAVEzE5sMy3XTrMNEoA17wrWXQ+txUaUk=
Subject key identifier:   CF:24:94:FF:2A:0F:64:D3:ED:B7:2D:3C:0E:F1:CE:14:97:35:0F:D4
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
Manifest number:          01BF
Signing time:             Thu 23 Jul 2026 05:30:13 +0000
Manifest this update:     Thu 23 Jul 2026 05:30:13 +0000
Manifest next update:     Thu 30 Jul 2026 05:30:13 +0000
Files and hashes:         1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: 8OKaLFZVtpN3utO25Lizv6Hg4GwQNeQOLXuwiYY/IBU=)
                          2: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=)
                          3: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: E5hqQqMyoQ9aOSGCT2wM7hBxXm+pQQiTCiLoJNmSSp0=)
                          4: B7B28B24B29611F091864D65C4F9AE02.roa (hash: 1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: Jul 23 05:30:13 2026 GMT
            Not After : Jul 30 05:30:13 2026 GMT
        Subject: CN=6a61a6e5-8dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:c0:4e:70:40:99:ca:bf:ec:91:7b:a7:5f:
                    ee:d1:97:af:bb:07:4e:88:c3:74:bc:8e:f9:70:06:
                    31:b9:88:31:69:25:1c:44:ec:be:f2:94:27:5d:2c:
                    5c:34:ba:0a:9c:b5:71:fb:38:1e:b5:09:04:25:74:
                    95:ba:e3:1a:b4:27:83:f5:3e:4b:41:2b:2f:c4:b4:
                    be:43:d8:ae:08:70:9e:6c:33:47:58:b7:df:23:f5:
                    23:9b:dc:81:8e:e5:c8:1a:99:dd:78:29:f3:7f:3e:
                    f2:a5:95:1b:88:6b:c0:a0:04:6a:a6:bf:ce:e7:83:
                    80:6a:91:ab:a2:49:da:f7:53:8d:9c:74:fb:18:93:
                    a1:48:5e:a9:32:6b:bf:6c:8f:55:fe:ba:6f:a3:40:
                    4a:ec:f5:69:a0:9a:30:92:12:d9:80:3a:6a:9f:b8:
                    ef:31:f3:07:a9:0e:f1:bf:ef:3a:f8:9f:fa:1f:27:
                    7f:3e:e9:ee:86:ff:eb:1f:c7:9d:1d:ad:6d:ab:06:
                    e9:ec:12:c2:47:e4:b1:d9:1e:d9:80:53:43:3d:13:
                    59:32:ee:58:2f:73:89:82:a0:42:a1:bd:a5:b9:58:
                    18:b8:15:92:a0:0f:24:46:24:f5:fa:c6:d0:b9:a6:
                    b4:d8:72:45:ff:28:06:79:f8:34:ff:5e:64:92:2d:
                    83:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:24:94:FF:2A:0F:64:D3:ED:B7:2D:3C:0E:F1:CE:14:97:35:0F:D4
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:06:a6:30:60:cf:1b:a7:46:fd:78:49:a0:74:11:3a:f1:96:
         27:e8:43:52:c0:d4:bd:78:bf:b7:fe:80:0f:2d:49:89:e2:53:
         ed:f8:4a:8e:7a:24:1f:d7:2c:db:53:b5:7c:ae:d1:97:ec:94:
         fd:35:6b:1b:c5:d6:ec:78:91:4f:c0:3c:1f:97:03:4e:50:af:
         87:06:65:49:5f:f0:83:e3:02:8a:31:18:9b:1d:d1:cd:d8:06:
         61:bc:77:37:ca:44:fe:fc:c2:11:3a:f6:b4:91:83:f6:f8:8e:
         06:43:d0:a9:a6:db:95:7c:cf:59:74:b2:9e:7d:51:af:ca:e5:
         df:95:1b:51:47:52:cb:cc:1b:11:72:d1:f8:0c:ee:56:84:a5:
         19:66:a5:3d:d1:ee:c3:fa:5c:54:32:54:de:20:e4:4a:3e:3c:
         42:e8:ef:4f:3f:73:40:a6:46:37:51:f5:88:1d:b6:3c:4f:8b:
         2c:10:52:70:ff:42:b0:50:fa:10:49:98:be:37:59:90:c3:87:
         3e:53:fc:43:85:d9:e1:c0:35:82:41:3c:b8:c4:85:85:e5:be:
         e9:2b:5a:64:7f:74:ff:51:2a:dd:8a:d1:a4:cc:ef:44:9b:ee:
         53:db:e6:3d:5a:a8:a1:27:52:2b:7f:9f:3c:13:a0:bd:52:9f:
         58:39:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:16 2026 by rpki-client