Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File:                     kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier:          Kp/Nw21Sc+BhRZLc20jjAEeolXAhAnL4BsSpjBU1egY=
Subject key identifier:   B5:A9:B3:E5:5D:3A:30:77:C6:F1:EF:6E:62:E8:21:0B:78:1D:00:F4
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer:       /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial:       0CDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number:          0CCA
Signing time:             Wed 22 Jul 2026 18:45:16 +0000
Manifest this update:     Wed 22 Jul 2026 18:45:16 +0000
Manifest next update:     Wed 29 Jul 2026 18:45:16 +0000
Files and hashes:         1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: ZQclhat6S73b7TllKYaIX6OQopICtIZdVqH3Zzj6sBE=)
                          2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=)
                          3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
                          rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3292 (0xcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
        Validity
            Not Before: Jul 22 18:45:16 2026 GMT
            Not After : Jul 29 18:45:16 2026 GMT
        Subject: CN=6a610fbc-03aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:b2:89:1a:54:c1:d0:8a:fd:2b:e0:ff:85:
                    73:22:ea:47:ac:ae:8f:d6:fc:89:96:b7:8b:46:a6:
                    8f:7b:93:68:b1:f4:fd:7a:39:03:19:f5:12:68:f7:
                    ac:d3:24:8e:74:e9:a0:65:2d:32:0f:e4:08:d4:eb:
                    b5:81:72:65:2e:f9:e9:d6:8e:06:95:50:53:67:56:
                    a5:f9:f9:82:91:a1:98:d8:7f:c0:46:c9:59:58:f4:
                    57:4e:97:29:88:0c:0d:e0:01:41:32:cd:ae:92:6a:
                    21:65:f3:15:fc:00:a7:cd:aa:aa:8c:5a:72:96:7f:
                    a2:bf:47:27:aa:79:78:d6:de:7a:f8:1d:2a:24:ee:
                    52:c5:b9:f4:95:2f:eb:bb:45:02:56:ba:18:9b:de:
                    2c:9b:d3:16:c1:8d:63:5c:8a:0c:50:75:99:0d:43:
                    40:b5:52:f7:d4:e2:86:78:09:5c:67:7d:64:cc:8a:
                    31:02:9e:96:aa:26:0e:fe:65:e4:ab:7d:08:84:2e:
                    6e:96:38:50:5a:7d:ad:7b:b7:10:92:b8:4a:28:41:
                    1d:06:8d:c1:1f:c2:a5:14:e1:f4:0c:02:f9:2c:b4:
                    4c:74:51:23:18:23:da:2e:1f:dc:bf:52:7b:c0:9f:
                    8e:3f:a7:3b:2d:a6:1c:6c:01:e8:72:68:61:11:a0:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:B3:E5:5D:3A:30:77:C6:F1:EF:6E:62:E8:21:0B:78:1D:00:F4
            X509v3 Authority Key Identifier:
                keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:01:59:a9:69:b3:43:cc:43:79:a0:34:9b:5d:73:d3:90:
         fe:4e:83:02:1c:a4:84:64:ca:7f:55:62:f2:33:55:f6:28:95:
         aa:ee:95:2b:01:02:58:d1:b7:79:b7:c8:e9:e2:2b:18:56:31:
         6b:6b:1e:dc:02:de:9d:47:b5:93:e7:51:c0:c4:02:7e:3e:fe:
         2d:8d:b6:68:30:8b:60:57:cd:5e:7b:ac:5d:e1:bd:4d:f5:3b:
         a2:70:b4:3c:e1:9e:c8:2f:a5:b5:eb:ef:c3:8c:14:bc:a3:51:
         ac:7d:8f:1c:85:89:12:15:34:af:36:92:1e:ce:56:3c:66:b4:
         d9:b2:39:4f:18:77:9a:b4:b7:ad:b1:d3:19:b1:58:91:f5:f7:
         1f:be:bb:57:e5:ad:43:e0:e4:3e:18:52:fc:4c:22:11:c7:ea:
         fb:9d:d4:dd:b6:ef:67:66:ec:85:ea:c3:d3:3a:c5:fa:82:70:
         34:39:1a:cf:47:a0:22:57:5b:a6:21:c2:1a:36:c9:35:5c:bf:
         e3:94:ac:47:86:37:5b:88:23:c8:38:56:92:46:88:64:0f:03:
         8d:8a:ef:6f:aa:31:bd:52:59:80:e4:33:0e:47:8c:3c:e7:94:
         3c:89:13:f0:08:bc:b6:88:6c:81:3c:32:90:08:86:0d:6c:bf:
         4e:84:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:19:35 2026 by rpki-client