Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft
File:                     1OqUZPMism19ISjcN1LyKIgAFto.mft (raw, json)
Hash identifier:          iMOoB142cE6zaWZnuoLB3ihTBqwHnVaeC4cwvI69Swc=
Subject key identifier:   72:28:FD:D2:3D:EE:E3:9F:EC:DD:53:99:78:30:B9:F2:5D:B7:C0:F7
Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA
Certificate issuer:       /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA
Certificate serial:       087E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft
Manifest number:          086A
Signing time:             Wed 22 Jul 2026 21:26:01 +0000
Manifest this update:     Wed 22 Jul 2026 21:26:01 +0000
Manifest next update:     Wed 29 Jul 2026 21:26:01 +0000
Files and hashes:         1: 1OqUZPMism19ISjcN1LyKIgAFto.crl (hash: TxNmhqWGObHY0UQQ3X8VmgWELHbNMXDBOYLnkESCV7o=)
                          2: BF13AB8C5D3311EFA43E0C6EC4F9AE02.roa (hash: O/DaZ2TyDSBDVUnKUn1vpjjbru6lNNlGoCvBk79DOHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl
                          rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913367F, serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA
        Validity
            Not Before: Jul 22 21:26:01 2026 GMT
            Not After : Jul 29 21:26:01 2026 GMT
        Subject: CN=6a613569-d201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:df:14:6b:0d:9e:61:15:6c:dd:b2:1b:49:
                    85:e7:3a:dc:fa:4d:09:cc:dd:7a:94:f0:71:f2:b3:
                    ee:bd:16:eb:da:4c:da:1b:35:6a:8c:ea:28:23:55:
                    80:53:da:d4:5b:82:e2:85:1d:cb:0f:e5:8e:83:62:
                    0e:0e:ae:4a:86:71:02:2b:29:d0:cd:6f:7a:4d:87:
                    32:0f:ef:85:54:b0:5f:39:df:5e:41:ee:1e:b1:af:
                    86:f1:e5:84:70:56:16:d9:ef:61:e4:b6:95:f2:9a:
                    ba:cf:e8:01:4c:2d:00:19:88:f5:ec:42:c1:d2:7d:
                    76:5e:e7:f5:a4:c3:91:bb:47:7b:0b:f7:8f:09:4a:
                    2c:38:b8:50:be:ca:61:3a:4c:91:00:b8:14:b7:cc:
                    b6:77:bc:2e:ef:e8:7c:73:bd:0f:d8:19:70:15:df:
                    42:34:d4:f9:c7:94:07:a5:42:b2:05:dc:09:8f:d3:
                    66:00:4f:0b:a0:0d:ec:1d:12:89:e8:6a:49:fe:ab:
                    84:f0:da:92:da:7a:22:22:81:ae:10:dd:4a:ec:20:
                    6f:fb:f2:b9:72:a5:7a:87:d4:00:78:d8:2a:07:09:
                    0a:04:61:f2:a3:43:60:11:6a:46:22:1f:e1:0f:1a:
                    cd:14:80:c9:c7:97:4c:91:48:de:32:65:15:2c:60:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:28:FD:D2:3D:EE:E3:9F:EC:DD:53:99:78:30:B9:F2:5D:B7:C0:F7
            X509v3 Authority Key Identifier:
                keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:00:2c:05:cc:8d:13:b1:cf:ef:2b:03:ac:ea:c1:4c:28:d6:
         e9:5b:9f:f1:db:f7:9e:15:ba:73:69:03:f4:14:d6:00:c1:55:
         a1:6e:3b:d1:5e:14:69:4b:18:03:e5:9b:79:13:36:d5:86:0f:
         f9:1c:d4:d0:5e:67:de:2b:4e:94:0d:24:c6:7d:b3:6a:ee:53:
         36:29:16:0c:40:d6:69:05:ae:d8:18:23:41:11:6d:03:1c:d5:
         aa:25:ea:60:8c:0b:50:bd:da:3e:a5:66:61:dc:12:0e:7e:ea:
         b6:ae:2a:7e:be:8e:63:fe:13:8e:1d:38:40:b2:c4:71:c3:84:
         84:dd:03:5f:8d:b0:e0:94:4d:8a:4e:1f:1b:50:dc:36:cc:38:
         4a:f0:6b:18:c1:67:a6:9b:db:83:cb:7c:0f:97:ba:e7:c7:2f:
         ea:d0:b1:67:b9:8e:74:72:2e:51:86:f2:bb:ce:e4:22:ec:c7:
         1e:f5:b6:71:05:ce:73:7c:29:52:42:0b:1f:ed:7d:2d:26:52:
         a1:09:e8:58:d7:2d:6c:4f:76:82:ff:41:ea:be:f8:e4:64:01:
         13:c6:19:ed:99:aa:f8:15:1c:83:21:60:df:3f:d7:84:c3:53:
         b0:6c:7f:ad:3e:71:62:d0:d7:d6:68:e4:7e:44:94:ce:a9:ef:
         4e:65:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:01 2026 by rpki-client