Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          x/ptNXzptwC5hul+opb7KlBa9G/vCnosUpfMYemzDbw=
Subject key identifier:   5C:F0:10:BC:B9:C5:CA:CD:52:A6:B9:E9:6C:EC:EB:13:75:E4:4E:11
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       10CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0DB9
Signing time:             Wed 22 Jul 2026 20:00:36 +0000
Manifest this update:     Wed 22 Jul 2026 20:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:35 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: fWgp4TsyVuFx2Gy2hFcHJF+gl7FWfJv4rdjfM+ObICc=)
                          2: 07AFB46A568111F1BFDD8E7BA2833773.roa (hash: ZvJ5fhIY6CfeJohE5TY8AgeuE4gKHOwKdm8RhUQsacA=)
                          3: D9419C8A39B911F1AC578A42AE833773.roa (hash: CLEgT+31n9lfpw3XpUHDWcRMwaIMCh3p4zBTbpfh18U=)
                          4: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: 24u4HBCO1KtwHfOL7e2RjvlMPalnF3UcOXpG6jE4G34=)
                          5: 4CE25F844D5211F1B621E394CB833773.roa (hash: qg8/Ls1Uj1/gpLrqzBq1E3uEwVmukE98NL+Us2r+7rk=)
                          6: 65020FA2288011F1BBF58DB5A8833773.roa (hash: ZSdTfWuzS86WLzpkvNdiXv34xqzKQg41A9OfgH776Xc=)
                          7: 3103D08881EE11F1BCCFB8F676A30FBC.roa (hash: 0F75vGJp7QEVxmzwvf+1elG3eEW1I0YdTbfCV7Eu7Ww=)
                          8: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: HfE1oxJBV9/OZ3j2t8tmYR1MylA9yl/mZSo2he5GbKo=)
                          9: F85564DA127711F18BE24F01353D8C67.roa (hash: xLEMW1WeRTdeL1parZjm1o3kSVKBhcygphTEuPzcr9E=)
                          10: BE73AF6E4F9A11F1A2D5B2D798833773.roa (hash: lo2u0+WfK+UWYKhemyyCgZa5VVMMfS2jANMqUG3ECZA=)
                          11: 4C692978419711F1B231ABB69F833773.roa (hash: j6EC0scEQGwbeez5XUvQrEX6Zct0WAzh456SxbrLHgU=)
                          12: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: z0LgFHba0FwF6fQrrQACVyXZeL4NTZdHGfqQ2uiux64=)
                          13: 849E45A839B811F1B2456B00AE833773.roa (hash: WrHoimy7W3Kh4V/ViVWvGFPYBxuHZRvygLPr6i6VQGA=)
                          14: 6D2E74CE119511F18720E261383D8C67.roa (hash: ohbtR0bU4Nw5MTZqq0EScoDeeVXif9T0EFY44v6uECc=)
                          15: F94772A2127711F18BE24F01353D8C67.roa (hash: Ia2OY00mHGLN5kewmPdoukAdUzDfyI0EliOAKlUSYq8=)
                          16: 56B5AFE081EE11F1A249C6F676A30FBC.roa (hash: TTnaRlxzgFOFYgpP1UGOGXpRtM/sH5rO0Ok740Un/kU=)
                          17: 74B6DA6279E411F1AFD43C6B67A30FBC.roa (hash: 7653pV244pDWboEui27vIwisaAusSIEHShyPRxxAiw0=)
                          18: 4F892B3E79E211F186F7A31866A30FBC.roa (hash: XKGsErCTmvNic5yyMv5NHoTthxsLU6Gk44XbyZxgJ60=)
                          19: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: 0YoPMQw7ZQ5kCQUd3F7ZIgdfuVPe710u9EKW9PtZo3w=)
                          20: 9-v86EkpKDvsJyj3Wr4bqrtxDMA.asa (hash: 7Alqi4Ghhev7HAdtX/b5FsIjChDv2NgVieTTvUqPbFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4298 (0x10ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Jul 22 20:00:35 2026 GMT
            Not After : Jul 29 20:00:35 2026 GMT
        Subject: CN=6a612164-9ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:8d:81:02:47:bc:13:cd:96:cf:93:f2:ce:
                    58:17:9d:64:e0:0f:f6:2b:ba:69:61:c8:58:ab:2f:
                    9e:46:ec:3e:3a:14:c9:d3:e0:fc:9e:23:c6:76:d2:
                    1c:cd:de:40:1c:ed:6a:6c:43:ce:a6:60:fb:8f:a7:
                    ae:14:a2:ab:fa:4d:d2:83:94:35:bb:d6:ca:ed:6e:
                    f6:f2:c5:7e:2d:84:eb:f5:61:0e:d1:84:9a:84:32:
                    69:f0:d4:cc:6a:23:22:0a:5a:fa:2a:b5:ae:ba:0d:
                    da:53:66:0a:ed:da:63:ae:9c:25:24:5c:d5:8d:eb:
                    4e:d3:fe:af:b3:2d:19:0d:f8:d9:95:e9:4f:33:62:
                    31:cd:9d:49:51:5a:28:85:dc:43:72:74:af:5f:bc:
                    3a:f6:90:85:fa:99:22:24:be:a7:01:1c:2f:60:db:
                    fd:48:c1:65:df:e4:02:01:27:7f:57:4e:94:11:31:
                    57:29:1c:df:62:84:90:a9:25:33:5a:bb:d5:30:4b:
                    ad:e4:6e:0d:fe:09:53:39:31:b7:3d:ac:83:7e:ff:
                    88:52:6d:1b:74:81:cb:2a:6c:35:1c:92:4e:f9:3f:
                    ec:ab:e8:d3:cf:a3:b0:d5:28:80:12:e5:90:1c:c6:
                    46:68:2d:c1:3e:5b:7c:4a:11:76:b2:f6:6e:99:0e:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F0:10:BC:B9:C5:CA:CD:52:A6:B9:E9:6C:EC:EB:13:75:E4:4E:11
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0b:82:c9:fb:5a:be:db:02:50:68:8b:d8:5a:ce:20:fc:92:
         cb:59:84:da:18:bb:46:2a:65:7f:31:a6:cf:0b:9a:1a:2a:f0:
         83:5a:ed:ea:03:3c:2b:37:9b:2c:27:9b:8f:57:46:9d:64:01:
         8f:d3:36:50:2e:65:f6:b3:e3:ed:c6:e4:54:6e:31:04:5a:db:
         2e:6a:24:df:3c:2e:36:50:e6:a6:e0:3e:46:ea:59:83:8f:d5:
         3c:71:c2:88:9b:fe:00:9a:d5:a5:f1:00:34:e5:30:c2:0b:f5:
         75:ae:c3:6d:12:58:d9:e2:5f:7f:f0:ec:b6:0e:12:aa:e4:6c:
         28:4f:bd:7b:1f:2d:58:92:6a:80:fb:ce:37:40:4b:79:e7:f7:
         6f:e3:b2:d3:67:1a:f4:4c:1a:b2:91:49:33:3f:4b:6a:56:13:
         7f:44:bb:08:ed:64:03:ec:a2:89:54:53:f6:8d:10:c4:e8:18:
         c3:1f:6c:79:8f:97:a0:c7:2c:2b:23:71:98:8f:5b:d8:d7:34:
         29:09:e6:0a:b8:0c:9f:14:f0:87:8a:0d:02:b2:3b:80:36:08:
         34:32:5b:c6:5a:fb:48:8b:53:7d:a5:78:f8:00:61:2d:ca:4e:
         97:30:e6:2e:74:d4:af:e9:92:75:b2:6e:ba:f9:ed:bf:de:0c:
         84:18:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:37 2026 by rpki-client