Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
File:                     ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft (raw, json)
Hash identifier:          sYtr5Ya4DhgpF6fncZPh9dKmK9VreYHdwqFKlBV8VGY=
Subject key identifier:   50:31:95:89:66:A7:55:B8:37:57:DC:FC:72:54:4C:D2:ED:A9:35:B5
Authority key identifier: A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D
Certificate issuer:       /CN=A912B1E4/serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
Manifest number:          3B
Signing time:             Thu 23 Jul 2026 10:35:36 +0000
Manifest this update:     Thu 23 Jul 2026 10:35:36 +0000
Manifest next update:     Thu 30 Jul 2026 10:35:36 +0000
Files and hashes:         1: ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl (hash: FEtgauyFLaRtV3jSh7w9KPn+m68gos1gzSCwzzgkagU=)
                          2: 3BE765AC2E5911F1AF1402DA99833773.roa (hash: 4vN9DxDqav8XQy5RbRHkPzQNR/xKvXelfPI7Z+9SlN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl
                          rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B1E4, serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
        Validity
            Not Before: Jul 23 10:35:36 2026 GMT
            Not After : Jul 30 10:35:36 2026 GMT
        Subject: CN=6a61ee78-dca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:c9:82:ea:eb:20:01:15:a9:16:b8:51:d9:
                    5c:8d:9d:19:31:91:0f:3d:32:c1:d0:20:7f:b4:59:
                    b7:e2:d0:5b:e6:f0:fe:fe:3d:68:aa:09:89:20:42:
                    63:fd:e9:6c:1e:6f:c7:6b:ad:35:c8:d5:b9:bb:87:
                    8a:6e:f7:1e:5e:26:c0:be:7a:b9:dd:bd:7c:c9:a4:
                    09:72:ff:2d:d8:de:d0:d5:40:7d:a0:e8:77:e9:c3:
                    39:a2:56:d5:2e:79:f4:2f:0d:b3:b9:68:c6:fa:58:
                    57:6c:07:96:d9:c1:ff:51:ef:3b:8e:ec:b6:e5:f3:
                    ae:82:cf:f3:4d:3c:7a:9b:4a:6d:00:ab:97:8a:37:
                    2e:42:3b:33:39:96:94:50:d4:fc:4d:de:4c:ee:ac:
                    d4:aa:1e:41:87:65:df:fd:6b:9c:fd:36:f3:59:4d:
                    9d:67:c7:35:c8:b6:5b:5a:d9:87:2b:e0:27:37:06:
                    7c:56:d0:7c:a4:c7:65:8d:b9:f4:10:9c:cb:23:be:
                    19:62:68:16:fe:ec:13:6c:13:f3:cd:de:05:a2:a0:
                    d3:47:4e:34:bf:74:e7:b6:68:06:c5:76:e0:b7:23:
                    e6:e8:6a:90:6d:63:dc:9f:8a:16:38:aa:b3:39:9b:
                    6f:70:a9:99:8b:38:91:79:34:df:1e:1a:aa:c4:a2:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:31:95:89:66:A7:55:B8:37:57:DC:FC:72:54:4C:D2:ED:A9:35:B5
            X509v3 Authority Key Identifier:
                keyid:A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:28:77:01:d8:b2:a7:8d:fe:4b:2d:dd:98:51:7c:1a:a0:
         78:df:40:cc:6f:e9:35:d3:66:23:c1:a8:70:b5:be:44:25:0f:
         e6:8f:09:3f:6c:3c:f2:90:86:b8:f1:67:f1:ef:66:c6:bf:d1:
         40:20:0e:be:99:6c:b6:24:93:a4:d8:b7:49:d2:85:7f:33:39:
         da:8c:3e:f4:9b:93:2a:6e:66:8a:5a:49:cc:d8:bf:6a:42:2c:
         6d:8b:d4:21:79:a3:68:b7:e6:02:e1:28:93:6b:4f:92:9d:56:
         08:be:22:ab:5e:6a:66:26:29:7b:01:e4:4d:cd:2e:0e:ab:30:
         68:3d:54:ef:74:8f:87:b2:fc:6a:1d:49:6f:9f:1d:ec:c7:74:
         3e:0f:4a:e4:2f:25:da:ea:22:21:6a:66:71:4e:ab:52:6c:35:
         33:cf:8f:60:ff:c8:1b:e3:07:20:a3:5d:36:32:09:1e:af:d1:
         63:31:ce:bb:58:62:05:bc:13:1a:29:19:18:6c:5f:7c:f2:a0:
         68:bd:da:bd:97:7f:b1:4e:c1:cf:6d:7c:47:8c:d7:40:68:9c:
         5f:98:ce:3c:88:5a:ff:b8:b4:fb:95:b0:0a:c3:86:3d:67:33:
         d0:1e:60:d4:4f:42:a5:b3:5d:98:08:42:4b:d8:27:56:41:b5:
         06:2c:55:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:15 2026 by rpki-client