Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
File:                     O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json)
Hash identifier:          ltRMF+q1u4C65pF6J11KeuweNAEsY8eHe2INMAkAh/Y=
Subject key identifier:   D1:12:77:B6:11:11:31:84:B6:31:97:E2:A0:71:D0:DA:2A:FE:02:A2
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Certificate issuer:       /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
Manifest number:          0255
Signing time:             Thu 23 Jul 2026 03:26:06 +0000
Manifest this update:     Thu 23 Jul 2026 03:26:06 +0000
Manifest next update:     Thu 30 Jul 2026 03:26:06 +0000
Files and hashes:         1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: J+e94AlRguJHjXefy0bMTOeLCXoLs76x2BobmhpR/ws=)
                          2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: f+SXz/7qnkULN0UO8ykoynDM3JBtbR5ZSL/l0DN40Vo=)
                          3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: uOBgq1wqwkIdJF6l8fQkWsM2YOmgJUVNC/DA3LL3Uc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
                          rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
        Validity
            Not Before: Jul 23 03:26:06 2026 GMT
            Not After : Jul 30 03:26:06 2026 GMT
        Subject: CN=6a6189ce-f326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:f0:5c:36:47:75:64:1a:5e:ed:f3:89:c1:
                    b8:2d:5f:36:94:96:15:76:41:21:dd:03:54:fa:a8:
                    eb:62:af:87:37:46:5e:b4:be:e3:c4:59:f1:a1:49:
                    b3:07:64:c8:5f:34:c1:83:ed:05:ea:e4:91:45:d0:
                    23:6b:05:57:1a:79:94:6d:2a:8a:54:8a:f8:cd:37:
                    e7:e6:35:3f:0d:af:79:5e:c1:61:34:8e:8b:68:26:
                    6d:3d:bb:dd:1c:ef:c4:98:2e:11:30:dd:d8:ff:50:
                    a6:0c:4c:bc:3f:98:aa:c1:16:3a:e6:71:06:4d:0c:
                    87:64:1f:36:14:c5:47:69:64:bb:bc:6f:52:9a:f1:
                    b1:ae:0a:ea:2b:2a:e3:95:b0:84:e0:36:5d:24:59:
                    ea:ae:d8:a3:e3:29:54:7f:81:01:73:44:f4:30:37:
                    15:49:d5:f6:67:d0:53:8b:9a:f1:ff:c0:14:a3:25:
                    e6:ed:ff:03:bf:75:79:dc:61:7b:cf:3a:37:20:e9:
                    6b:bb:d8:9a:05:1b:96:e8:fd:06:e2:99:51:9d:db:
                    56:0e:e8:6d:93:9e:5f:c1:a2:92:b0:2c:d7:fa:7b:
                    07:1c:84:22:dc:dd:c1:2f:8d:4e:5d:54:13:22:f9:
                    69:e4:2b:32:b0:64:18:51:9a:36:e6:6f:c9:60:8e:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:12:77:B6:11:11:31:84:B6:31:97:E2:A0:71:D0:DA:2A:FE:02:A2
            X509v3 Authority Key Identifier:
                keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c2:db:0f:df:4f:76:4a:42:03:16:8f:df:8b:9a:70:64:dd:
         90:19:6f:67:09:1d:7f:22:07:39:c8:e2:5d:b4:0e:8d:f6:87:
         39:26:e2:6b:5e:91:6e:60:b9:a9:86:04:0b:50:06:8d:bb:b5:
         8b:71:05:e2:f6:7d:b5:20:95:8f:e0:75:ce:a2:e9:82:7d:ed:
         d2:85:a9:5d:9c:b4:48:eb:1e:f5:44:82:ad:b1:a5:cc:40:46:
         40:c4:5c:cb:11:2a:3b:4a:b2:82:cd:d7:fa:fb:00:52:bc:5b:
         01:e4:de:40:71:25:52:76:ef:72:f7:19:45:da:22:a0:5b:a6:
         79:4b:73:64:cc:f2:bf:23:a4:52:43:1a:c3:2d:40:0f:3d:75:
         3c:22:29:29:82:c2:b3:90:69:23:54:da:26:29:cf:3b:49:9c:
         e5:fe:5f:9b:21:86:be:00:77:ad:aa:6b:fb:b1:58:5c:bd:5a:
         44:fa:34:e5:1d:35:b1:7e:43:65:13:14:ec:2a:11:30:0b:86:
         30:99:07:72:49:54:18:1d:42:ce:ae:54:d0:b8:76:38:5c:d6:
         4a:d0:bc:20:13:b7:e2:f6:69:a4:aa:fa:81:be:7b:bd:cf:57:
         50:16:af:c3:3b:f8:a7:42:0f:b2:90:75:8e:56:e9:12:25:8f:
         01:e3:22:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:08:09 2026 by rpki-client