Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File:                     Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier:          ltrRmSgZCHAdbNAowAYR7P9OeO+zfGes8EuyThqGMIU=
Subject key identifier:   EE:66:40:B5:91:67:6B:FE:FA:C1:7A:53:94:84:36:9D:7A:7E:6B:69
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer:       /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial:       03E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number:          03D8
Signing time:             Thu 23 Jul 2026 01:07:28 +0000
Manifest this update:     Thu 23 Jul 2026 01:07:28 +0000
Manifest next update:     Thu 30 Jul 2026 01:07:28 +0000
Files and hashes:         1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: /8DQEcCJMCcanyGofVQS9ssaPhW+GBpFFE29S39MoIg=)
                          2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: zU41dHVA7lg5HqNGf7meOX/A+lf9KSiIpMkJ1tgmeCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
        Validity
            Not Before: Jul 23 01:07:28 2026 GMT
            Not After : Jul 30 01:07:28 2026 GMT
        Subject: CN=6a616950-e498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6e:b1:77:f0:53:38:2c:d8:68:5b:f0:2e:04:
                    75:86:7d:ea:57:54:b9:28:72:11:4a:c5:65:8a:da:
                    1c:cc:38:11:de:22:47:4d:a7:b9:7a:71:02:91:81:
                    bd:21:52:6b:5a:91:6a:4c:b5:4b:c2:75:dd:7b:be:
                    50:75:15:3b:98:ec:09:11:7b:8d:45:5a:06:6c:b5:
                    57:b0:4c:74:bd:cf:19:c7:61:1a:c4:03:7d:39:72:
                    df:42:7f:fb:8f:6e:63:b5:1d:26:18:27:2e:da:2c:
                    36:88:be:c5:d0:2e:e3:6f:09:50:6e:de:79:e7:49:
                    69:26:20:30:08:78:01:32:d9:5f:8a:44:2e:61:3b:
                    5c:c1:a7:57:0d:c3:49:6c:70:14:21:31:1d:60:29:
                    38:ca:40:a7:ed:4b:b6:7b:f7:7e:fb:63:13:9e:0a:
                    fe:45:cf:da:fe:6b:31:2a:9f:8b:1b:12:22:4c:a8:
                    6e:37:39:3e:44:4e:50:01:ea:93:e7:f3:99:0b:ad:
                    6b:0f:54:77:59:3f:14:06:fc:a6:bc:21:87:87:7f:
                    dc:d9:74:62:a5:6e:bf:5a:8b:67:55:4a:c5:44:cf:
                    4f:d1:bd:6c:2b:bd:bb:1c:ab:1f:1f:62:ff:f8:b3:
                    1c:e7:7b:47:cb:b5:7d:5c:55:e0:39:6d:d0:09:0d:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:66:40:B5:91:67:6B:FE:FA:C1:7A:53:94:84:36:9D:7A:7E:6B:69
            X509v3 Authority Key Identifier:
                keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:ab:b3:23:8f:3d:89:d2:17:1f:af:fc:dc:10:2f:0d:e4:
         7e:e0:57:9e:83:03:42:7f:35:8e:07:8c:60:b8:d8:70:5e:be:
         72:da:ac:b6:00:2c:c0:b0:3a:7e:4c:99:76:71:d5:c3:60:a7:
         96:06:7b:ba:c3:d7:7d:0d:bb:72:05:d0:71:10:af:17:74:e8:
         c5:79:9f:0e:a9:0d:ff:7c:db:44:6e:19:2a:22:ec:cd:0c:e4:
         ef:61:2d:ca:de:52:da:01:8f:52:5d:16:3e:e1:89:29:70:50:
         1f:b6:13:89:2a:0c:33:27:77:0d:86:13:6f:14:39:2c:36:bb:
         9a:bc:89:34:0c:2b:cc:1d:1e:35:b5:c5:d5:9c:e6:81:fd:83:
         eb:33:0d:cc:cc:a4:74:27:ba:12:e7:85:17:47:79:e9:1b:b7:
         20:83:65:9b:9c:04:34:64:2a:25:eb:5e:50:85:8c:4a:4f:c2:
         c3:2e:d8:5b:44:0b:26:55:b0:bd:c3:1c:fa:73:7f:88:05:52:
         29:26:2c:1a:8a:f9:2a:c1:b9:b3:a2:61:8e:b2:a6:5e:17:50:
         ef:e0:7b:ca:b8:c3:47:93:d7:9d:9f:50:92:1a:88:fb:92:34:
         2f:af:66:1d:05:87:ab:ff:da:d1:83:b7:80:0a:8a:ed:43:15:
         a0:81:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:50 2026 by rpki-client