Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File:                     OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier:          nIwHjXdoV5dfSVHqXlQL+0AYvqc7KdXKob7AbD33Hkk=
Subject key identifier:   BB:10:FC:B8:9D:EA:B8:8C:1E:9D:4D:3F:B3:3C:50:3B:C8:19:56:AD
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer:       /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number:          01AD
Signing time:             Thu 23 Jul 2026 03:20:30 +0000
Manifest this update:     Thu 23 Jul 2026 03:20:29 +0000
Manifest next update:     Thu 30 Jul 2026 03:20:29 +0000
Files and hashes:         1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: d3Fn56Ug4bNkCuxCuJyHwGPN9YmUb3LWIs2TcRii8hw=)
                          2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: +DCvPGD1gJzVRYp0NyLyo9qI/LocUFsJLWMxD2e8AY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
        Validity
            Not Before: Jul 23 03:20:29 2026 GMT
            Not After : Jul 30 03:20:29 2026 GMT
        Subject: CN=6a61887e-c45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:a7:b8:ca:95:4a:3d:7b:ae:d2:68:3f:07:
                    ef:f4:fd:ec:49:35:76:7e:9d:69:eb:7b:f2:53:50:
                    69:db:83:61:4c:0b:9d:1b:53:1c:f0:3a:e4:2f:a5:
                    2b:11:02:7a:cd:02:a0:1b:a9:b7:34:d4:c3:85:f4:
                    a7:d1:91:47:78:61:d6:26:aa:f7:ef:70:ba:15:08:
                    e4:17:b9:7e:53:ad:81:48:58:3f:0f:ad:38:24:95:
                    d0:42:96:72:f2:26:68:03:1e:d0:12:3f:a7:e4:d0:
                    f2:f9:16:be:d0:92:2d:3f:51:8d:6e:93:75:68:93:
                    ce:f3:fd:8e:b1:32:63:f2:4b:a7:62:0b:b7:31:61:
                    be:36:3c:87:9a:09:76:59:3a:2b:0e:09:95:e5:fe:
                    7c:de:8c:8d:fd:21:70:a2:2f:ef:56:e0:2d:0f:73:
                    34:e7:76:e4:0a:c1:16:2f:d7:bc:42:b9:78:f5:56:
                    5f:8a:8c:d2:83:7b:07:08:67:eb:ec:b7:4e:27:51:
                    81:4a:50:f8:fe:63:2b:8f:be:d1:e0:81:a7:66:aa:
                    d6:27:9d:a1:48:62:89:84:76:d2:69:d3:ae:81:22:
                    80:42:01:77:20:50:bb:39:f3:73:b2:1a:8b:6d:f2:
                    79:f0:66:6f:9e:dd:eb:7c:39:c9:d3:06:27:f6:9e:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:10:FC:B8:9D:EA:B8:8C:1E:9D:4D:3F:B3:3C:50:3B:C8:19:56:AD
            X509v3 Authority Key Identifier:
                keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:d1:4c:5a:26:f8:c7:85:63:36:df:a8:e6:37:7a:7f:57:
         54:28:47:9f:d6:cf:6f:4e:63:dd:eb:a6:0e:7b:4c:eb:10:dc:
         b2:46:b6:c8:36:c3:6e:06:4e:d4:f2:9d:bd:0c:d0:05:b2:b6:
         20:7b:e9:ba:dc:02:84:87:82:8c:e1:b5:2e:d4:0c:37:78:d3:
         38:f6:19:52:58:32:32:47:da:6d:49:a9:e6:4f:19:a9:cb:6b:
         d6:b0:7e:6e:94:c7:96:30:f6:03:3b:a7:cd:4c:25:e1:4e:19:
         49:d6:3d:4c:84:a1:09:cd:08:40:04:18:c6:b1:aa:cd:8d:36:
         56:f1:82:ed:db:15:93:44:58:c2:3e:58:ae:c7:44:86:77:24:
         28:98:8e:84:a0:ab:ef:e1:9e:e5:38:59:2f:79:60:d6:f6:82:
         66:a6:46:a9:87:d6:59:53:51:14:fa:d1:ec:ea:bf:54:95:bf:
         13:a5:a4:20:bf:03:96:3d:bd:90:5d:5f:4d:e1:6e:2f:42:0c:
         de:58:f7:7c:c7:dd:f7:b7:c3:5e:24:74:39:53:13:c6:0e:2a:
         c7:05:9f:bd:c6:01:bf:14:3e:38:f6:db:94:c0:a6:03:24:81:
         d2:4e:10:7b:8f:f1:9c:d6:d5:bc:2e:82:9e:9d:ab:3d:3b:f2:
         ff:f9:cb:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MjAxMTAvBgNVBAUTKDM4MENENkJDQzlFMUMxMUZFQzRFRTI3REE4OTM4MjRE
QURCNTIxMkEwHhcNMjYwNzIzMDMyMDI5WhcNMjYwNzMwMDMyMDI5WjAYMRYwFAYD
VQQDEw02YTYxODg3ZS1jNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt7OnuMqVSj17rtJoPwfv9P3sSTV2fp1p63vyU1Bp24NhTAudG1Mc8DrkL6Ur
EQJ6zQKgG6m3NNTDhfSn0ZFHeGHWJqr373C6FQjkF7l+U62BSFg/D604JJXQQpZy
8iZoAx7QEj+n5NDy+Ra+0JItP1GNbpN1aJPO8/2OsTJj8kunYgu3MWG+NjyHmgl2
WTorDgmV5f583oyN/SFwoi/vVuAtD3M053bkCsEWL9e8Qrl49VZfiozSg3sHCGfr
7LdOJ1GBSlD4/mMrj77R4IGnZqrWJ52hSGKJhHbSadOugSKAQgF3IFC7OfNzshqL
bfJ58GZvnt3rfDnJ0wYn9p45vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsQ/Lid
6riMHp1NP7M8UDvIGVatMB8GA1UdIwQYMBaAFDgM1rzJ4cEf7E7ifaiTgk2ttSEq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC84RjkwOTFENDMy
QjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdSX3NUdUo5cUpPQ1RhMjFJ
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09Beld2TW5od1Jfc1R1SjlxSk9DVGEyMUlTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjUyMC84RjkwOTFENDMyQjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdS
X3NUdUo5cUpPQ1RhMjFJU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk9TRTFom+MeFYzbfqOY3en9XVChHn9bPb05j3eumDntM6xDcska2yDbDbgZO
1PKdvQzQBbK2IHvputwChIeCjOG1LtQMN3jTOPYZUlgyMkfabUmp5k8Zqctr1rB+
bpTHljD2AzunzUwl4U4ZSdY9TIShCc0IQAQYxrGqzY02VvGC7dsVk0RYwj5YrsdE
hnckKJiOhKCr7+Ge5ThZL3lg1vaCZqZGqYfWWVNRFPrR7Oq/VJW/E6WkIL8Dlj29
kF1fTeFuL0IM3lj3fMfd97fDXiR0OVMTxg4qxwWfvcYBvxQ+OPbblMCmAySB0k4Q
e4/xnNbVvC6Cnp2rPTvy//nL0Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:45 2026 by rpki-client