Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
File:                     O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json)
Hash identifier:          rXVkXFfytOTG0DlcwsjfL++8wF9aGMxbCI6hwAvtZBY=
Subject key identifier:   89:09:62:87:3B:C8:30:7F:95:ED:DB:7C:8F:64:6F:84:EF:16:91:7D
Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
Certificate issuer:       /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Certificate serial:       095C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
Manifest number:          0953
Signing time:             Wed 22 Jul 2026 20:35:32 +0000
Manifest this update:     Wed 22 Jul 2026 20:35:31 +0000
Manifest next update:     Wed 29 Jul 2026 20:35:31 +0000
Files and hashes:         1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: d1fU3dRtmSy1endpTaU6R/n6OgKjByZhR7VyFbRYsX4=)
                          2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: PcM9VvZwEtkWziWmDAYLmLOnlkBtxqnyiAkGfpwesWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
                          rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396 (0x95c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
        Validity
            Not Before: Jul 22 20:35:31 2026 GMT
            Not After : Jul 29 20:35:31 2026 GMT
        Subject: CN=6a612994-d8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9a:17:54:3f:cf:c2:61:f2:8e:b1:96:92:bd:
                    35:22:54:28:69:a1:92:f4:23:8e:52:01:f2:39:95:
                    46:3a:51:02:90:85:2e:7e:11:3d:a1:07:ae:66:29:
                    49:0e:be:81:71:c5:3f:d5:cf:38:57:f4:77:32:41:
                    2c:6b:b9:65:04:22:be:8e:80:e0:51:80:f2:dd:99:
                    5f:13:db:c0:69:d3:da:97:10:9d:b4:ac:c8:3a:b5:
                    41:ef:25:2e:cb:76:f9:b8:5b:1c:93:fd:75:fc:8a:
                    f4:88:a4:06:eb:b3:65:21:00:00:85:7e:07:3b:51:
                    3d:7b:99:dd:b5:f0:eb:66:67:27:1f:29:3b:3c:49:
                    2e:1c:0f:50:6e:54:b2:5f:fe:f4:eb:16:91:9a:ba:
                    98:5c:3c:c0:f7:97:07:2d:b1:04:a0:45:89:fd:07:
                    e8:55:27:b3:7e:db:4f:c6:a4:f1:25:d4:b9:30:f9:
                    1f:a7:07:ad:90:91:b6:a9:14:a7:8a:fc:8b:93:c5:
                    1e:4f:40:4c:ae:8b:87:85:fd:f7:cb:7d:89:7b:4b:
                    34:e3:16:03:70:59:81:85:01:fb:38:bb:93:0d:f4:
                    12:de:fa:9c:30:8c:ac:7a:19:85:34:b3:36:7b:19:
                    6b:74:27:37:99:b6:b3:ca:73:f5:86:25:00:78:70:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:09:62:87:3B:C8:30:7F:95:ED:DB:7C:8F:64:6F:84:EF:16:91:7D
            X509v3 Authority Key Identifier:
                keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4a:90:31:05:56:6f:69:53:d4:e5:96:e6:2a:f8:34:69:43:
         61:2f:f1:58:2a:83:90:5a:1d:18:c3:57:0e:2f:5b:01:18:bc:
         db:47:08:8f:00:ff:58:2c:78:54:42:b5:52:e2:28:43:8f:7c:
         b9:c6:b8:72:55:a5:f8:33:42:96:57:af:b8:13:5f:1d:f0:ee:
         5e:66:7f:ec:6b:d7:23:83:f2:31:8d:7e:fc:92:e9:8b:3e:b8:
         91:87:ff:e0:cc:88:8a:95:51:69:34:aa:dc:4e:92:a4:25:e9:
         17:51:d9:3b:bb:71:2d:23:40:2e:fa:75:d5:82:06:04:40:9f:
         0f:ac:ee:5a:20:20:26:36:5b:2c:18:b3:1c:12:fe:c6:50:de:
         88:55:f8:11:ff:92:0f:9a:05:ef:ae:55:94:a6:7e:cc:66:40:
         6b:02:e8:53:7c:c9:a4:76:5f:b8:a3:43:ff:7a:11:60:12:56:
         e4:8e:20:67:58:b8:8c:bb:ec:09:57:db:24:0d:0e:cd:ef:3e:
         c2:1a:49:da:30:6e:40:cd:29:54:38:3b:c6:e7:2b:13:95:5c:
         b9:61:80:fd:d2:b0:14:3e:d6:ad:6f:6f:c4:4f:5f:c6:b4:61:
         54:e0:80:60:9f:a0:a9:7f:44:b8:26:ab:24:b2:58:a8:b6:af:
         a6:12:aa:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw
QzEwQkUzRTcwHhcNMjYwNzIyMjAzNTMxWhcNMjYwNzI5MjAzNTMxWjAYMRYwFAYD
VQQDEw02YTYxMjk5NC1kOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0poXVD/PwmHyjrGWkr01IlQoaaGS9COOUgHyOZVGOlECkIUufhE9oQeuZilJ
Dr6BccU/1c84V/R3MkEsa7llBCK+joDgUYDy3ZlfE9vAadPalxCdtKzIOrVB7yUu
y3b5uFsck/11/Ir0iKQG67NlIQAAhX4HO1E9e5ndtfDrZmcnHyk7PEkuHA9QblSy
X/706xaRmrqYXDzA95cHLbEEoEWJ/QfoVSezfttPxqTxJdS5MPkfpwetkJG2qRSn
ivyLk8UeT0BMrouHhf33y32Je0s04xYDcFmBhQH7OLuTDfQS3vqcMIysehmFNLM2
exlrdCc3mbazynP1hiUAeHBz9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkJYoc7
yDB/le3bfI9kb4TvFpF9MB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx
OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1
dG1YdmN1a21RRjhNRUw0LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtkqQMQVWb2lT1OWW5ir4NGlDYS/xWCqDkFodGMNXDi9bARi820cIjwD/WCx4
VEK1UuIoQ498uca4clWl+DNCllevuBNfHfDuXmZ/7GvXI4PyMY1+/JLpiz64kYf/
4MyIipVRaTSq3E6SpCXpF1HZO7txLSNALvp11YIGBECfD6zuWiAgJjZbLBizHBL+
xlDeiFX4Ef+SD5oF765VlKZ+zGZAawLoU3zJpHZfuKND/3oRYBJW5I4gZ1i4jLvs
CVfbJA0Oze8+whpJ2jBuQM0pVDg7xucrE5VcuWGA/dKwFD7WrW9vxE9fxrRhVOCA
YJ+gqX9EuCarJLJYqLavphKqeg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:24:58 2026 by rpki-client