Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File:                     oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier:          sfytVOSNh9oqXDGs3Ie2+sW8itcLl35k3ifzdu09l+s=
Subject key identifier:   67:8E:AB:05:D4:D7:5D:41:51:DD:7F:4D:1C:D0:D6:05:81:6D:EC:19
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer:       /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number:          020A
Signing time:             Thu 23 Jul 2026 04:21:35 +0000
Manifest this update:     Thu 23 Jul 2026 04:21:35 +0000
Manifest next update:     Thu 30 Jul 2026 04:21:35 +0000
Files and hashes:         1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: FSbO9gEnZ7lOmZjw/NJIESCQQDDKP4BwKzmCvJgyT7g=)
                          2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
                          rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
        Validity
            Not Before: Jul 23 04:21:35 2026 GMT
            Not After : Jul 30 04:21:35 2026 GMT
        Subject: CN=6a6196cf-d90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:9d:84:84:c6:13:70:6c:ac:d3:d4:fb:b2:
                    32:06:42:70:91:42:0f:b6:30:5f:07:88:7c:68:dc:
                    78:73:42:25:b6:a9:66:c3:ef:08:98:09:43:33:ad:
                    8c:4a:94:87:88:b8:31:fc:e2:99:f8:f4:65:05:42:
                    0c:79:d3:3a:26:50:07:48:1d:f0:60:63:72:d7:18:
                    a9:2f:c8:71:d6:d3:2f:e0:18:88:68:72:e2:a2:fd:
                    fd:dc:f2:06:08:4e:50:64:8f:a2:20:82:70:34:ba:
                    80:b6:c1:27:d2:bf:22:9b:e0:5f:4f:e8:30:12:ca:
                    71:9f:7e:fe:39:9e:f6:8b:b4:ab:3a:c1:06:52:a5:
                    fd:3f:aa:09:76:b2:62:f7:6c:23:05:6a:5b:4d:2b:
                    99:a3:37:0e:46:10:00:9d:c3:51:73:90:31:f6:b6:
                    43:92:91:b7:a6:63:89:67:32:be:13:c2:a0:6a:c8:
                    08:a0:0c:75:c0:25:15:c5:43:c7:5a:bc:cc:47:2c:
                    44:16:e9:c8:ae:9e:73:77:dd:af:8d:8e:cc:da:92:
                    3f:19:b3:7e:21:98:9c:da:76:b9:4a:be:ea:c8:f9:
                    b2:21:10:f6:72:4e:ac:57:eb:3f:5e:1d:e0:fe:98:
                    8c:49:3c:85:35:39:af:8e:ce:65:c6:1e:82:7f:ca:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8E:AB:05:D4:D7:5D:41:51:DD:7F:4D:1C:D0:D6:05:81:6D:EC:19
            X509v3 Authority Key Identifier:
                keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:59:57:f2:a5:bf:6b:ea:ff:71:23:5a:f1:8a:55:8e:dd:fc:
         6c:11:76:97:f0:c1:4f:f7:2f:c4:3b:f0:3d:f4:42:95:c0:75:
         df:65:fa:5c:22:66:52:e5:b3:cb:05:7d:de:cd:fd:ab:cd:4e:
         41:74:c9:c1:d9:b6:d6:13:3a:fb:d2:38:3f:07:e6:d0:9b:67:
         00:82:a0:57:ef:7f:ea:0a:93:00:3f:36:d9:8e:fe:83:f8:77:
         a1:6c:e5:b2:c7:cd:c7:48:dd:65:be:31:ba:ec:07:69:ef:c7:
         e7:78:20:ee:a6:18:2d:fe:61:3d:4e:48:5e:29:95:64:0a:22:
         a8:2b:cb:19:15:e8:3b:ce:b0:96:6d:f8:00:48:27:51:b9:9e:
         ca:ff:1e:bc:b8:94:b6:27:b0:91:cd:48:0f:e3:6f:f7:a8:f8:
         05:79:3f:63:d9:b2:ae:2a:c4:4c:6e:52:4d:37:83:09:55:06:
         7e:60:99:37:87:71:41:45:9e:77:e0:eb:d2:26:cf:b2:a6:5a:
         2d:34:1f:bc:c8:4a:c0:15:1c:65:ca:c8:da:f2:3c:22:b5:1e:
         be:79:f6:12:0c:38:61:03:eb:b9:dc:46:49:d4:57:7c:ed:11:
         23:61:cd:50:d4:a6:19:99:dd:b3:13:42:04:67:de:cb:3e:ca:
         11:9c:08:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:42 2026 by rpki-client