Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
File:                     oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json)
Hash identifier:          PnEMXEpum0bnuXadKJwjmcuojXveqvfpuTsLP2041hM=
Subject key identifier:   9B:3A:06:C5:C6:97:A6:1B:61:FD:51:9B:B3:AB:4C:81:12:1F:49:81
Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73
Certificate issuer:       /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
Certificate serial:       0276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
Manifest number:          026F
Signing time:             Thu 23 Jul 2026 03:14:15 +0000
Manifest this update:     Thu 23 Jul 2026 03:14:15 +0000
Manifest next update:     Thu 30 Jul 2026 03:14:15 +0000
Files and hashes:         1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: cR0pdJA/apWyii5A+MTDOulVegm20krF1519L1J5lFM=)
                          2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: zHAD2aRjfS80FrmwnylIxolsBZEI+CFeAtlJuiT/1ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl
                          rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
        Validity
            Not Before: Jul 23 03:14:15 2026 GMT
            Not After : Jul 30 03:14:15 2026 GMT
        Subject: CN=6a618707-12dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:b6:91:ce:97:a3:0a:1f:4c:f1:b8:93:5b:
                    d0:bb:30:e8:97:02:50:75:aa:7e:dd:fe:fa:db:a5:
                    f4:34:a1:f6:5b:19:04:ef:bd:8a:a6:47:8f:f2:c3:
                    04:9c:6c:37:32:3c:fb:1a:5a:5b:84:08:d7:ff:3e:
                    68:f5:ab:e0:ed:16:3b:35:ae:33:15:a2:ab:73:df:
                    33:45:f2:c8:ed:83:2d:66:78:90:9b:06:d8:f9:15:
                    d5:6e:b9:4a:4c:3b:98:21:74:0a:7c:6f:f7:33:eb:
                    2a:f8:00:9c:a3:48:8d:11:be:38:10:ce:c8:d8:67:
                    55:a3:5c:56:a4:81:cb:37:a4:b8:b0:01:80:60:40:
                    2b:0b:25:6d:a7:ca:1d:88:81:3d:e4:0a:b9:03:27:
                    a5:3e:47:d9:7e:fa:c6:80:5a:72:36:92:5d:1b:c8:
                    f3:12:9e:6a:d9:1b:72:a0:34:09:a9:4d:35:5f:2b:
                    5b:cc:64:3e:a8:6c:50:00:a3:cf:5d:5b:7b:7c:93:
                    c0:0f:93:66:d8:9d:f3:28:5a:bf:ab:9e:98:5e:68:
                    18:12:58:1e:5a:35:5d:80:87:5f:9e:2a:98:d0:cd:
                    a2:09:91:09:5f:2e:6c:10:8f:72:53:d0:31:30:d9:
                    ad:02:e8:06:f7:3a:c1:83:94:9b:e2:f8:41:e7:60:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3A:06:C5:C6:97:A6:1B:61:FD:51:9B:B3:AB:4C:81:12:1F:49:81
            X509v3 Authority Key Identifier:
                keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:10:6f:9b:e0:88:fc:5b:6f:59:01:c5:2a:d0:6d:22:7b:a1:
         0e:b7:2d:28:96:1a:a3:46:2d:6e:4a:bb:60:e2:6b:4c:f5:00:
         c4:33:f0:e5:41:7c:55:6a:79:54:d7:70:35:28:6b:f8:f0:c8:
         28:78:1a:93:63:54:7e:2b:c6:76:8a:de:ec:2b:3b:3a:cc:ea:
         af:ee:3f:b9:81:e8:af:d9:4d:28:f8:c9:64:da:54:c7:11:bc:
         30:ae:7d:dd:18:f5:3d:cd:b2:bc:3d:ed:8f:20:8d:c4:18:83:
         36:ec:f4:60:d8:25:01:23:34:70:c9:e2:ae:cd:10:25:49:a4:
         86:99:04:5e:86:4d:ba:90:bf:d7:fc:73:a4:b9:40:94:fc:81:
         d8:42:99:d9:04:7a:71:0e:e9:1d:3a:c8:3b:6b:5e:35:f6:08:
         42:21:97:c0:10:0b:2f:cf:2a:4b:ab:19:cd:24:8c:c3:29:55:
         c2:26:a6:17:3a:24:39:4d:d0:90:97:63:97:9e:cf:a3:36:06:
         67:94:55:96:16:e9:5c:17:a5:07:83:56:73:2e:c4:0d:f0:f1:
         f2:01:2f:67:f4:cc:62:c7:72:2b:1f:fc:bf:42:f2:93:72:e6:
         a1:26:e1:fa:6e:28:7c:68:74:63:4c:da:be:dd:db:c5:86:05:
         51:cf:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:34:44 2026 by rpki-client