Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File:                     oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier:          QVx5czLTzUnfdxy/80qgL2sH4omoCIdudc/4Rlr6aA4=
Subject key identifier:   B0:47:71:F5:8D:4B:15:B5:3D:A1:52:C7:25:C8:8C:E8:F3:BE:25:DD
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer:       /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial:       366D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number:          35DF
Signing time:             Wed 22 Jul 2026 14:26:35 +0000
Manifest this update:     Wed 22 Jul 2026 14:26:34 +0000
Manifest next update:     Wed 29 Jul 2026 14:26:34 +0000
Files and hashes:         1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: 9NqW8JeWCMDJR4Wuvljspb7NMZbiHkILzTfmcOTQ1k4=)
                          2: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: +E2YvC30N7G4XyfUFImEIGM741TQeBV6oc6cEcKy0A4=)
                          3: 02C97520985011F083EA2077C4F9AE02.roa (hash: elpetSZnc/cw/UNBwFiiaE6GRjUvr9tLQSkFah9iq8Y=)
                          4: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: SDyY9CxWbpTxTv2y+7w0t15rfAMVOucoRmveZEJG2J4=)
                          5: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: aKgJ5Lr0RjgCGZC/3syl2BTMU1aaDSTAss+LizAPlBc=)
                          6: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: GDg6tzHTkf4U+SPLrShf4CtKLD6rp4wOgPpuQzEBJ6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
                          rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13933 (0x366d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
        Validity
            Not Before: Jul 22 14:26:34 2026 GMT
            Not After : Jul 29 14:26:34 2026 GMT
        Subject: CN=6a60d31a-a05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d7:6f:bb:f8:9d:e0:7f:79:43:e6:8f:f3:d9:
                    8a:ca:bb:b6:66:f4:c7:c9:96:28:47:52:25:e9:db:
                    c1:36:b1:2e:6c:57:08:e8:67:53:6a:6f:d7:84:7c:
                    1d:ef:1c:fd:71:c7:04:dc:06:51:85:e0:8c:16:b3:
                    95:f6:45:53:0c:1e:92:8d:1a:cd:2c:6f:fb:01:15:
                    35:0a:39:75:52:2b:91:fa:65:ba:fa:e1:ed:fe:91:
                    f8:c8:fb:09:16:59:83:e8:c4:3b:f4:2f:73:fd:40:
                    a9:cf:ef:9f:8c:41:7c:ca:29:ed:ff:21:1c:82:b2:
                    20:2c:d5:25:c6:08:2e:65:5f:dd:2a:11:f0:ff:2f:
                    91:04:d0:f5:7d:f7:f5:88:ea:e3:6b:a4:02:81:28:
                    11:da:47:a1:f4:f1:fb:8b:a0:07:e2:76:0a:e4:be:
                    65:fc:71:a5:55:90:fc:a8:ea:fd:38:0b:26:84:db:
                    6f:cc:a3:d1:8c:a1:80:9d:c5:e6:ed:e8:51:39:43:
                    51:49:01:97:7f:f2:7e:4c:15:fd:b9:f6:ff:74:bf:
                    5f:65:15:4d:39:19:e6:9c:dc:ef:5d:c3:6b:c1:51:
                    34:b1:94:06:9c:9c:1d:65:9b:7f:08:56:ef:00:71:
                    33:0e:4f:d8:78:a4:7b:a8:90:63:db:f8:3e:b8:f3:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:47:71:F5:8D:4B:15:B5:3D:A1:52:C7:25:C8:8C:E8:F3:BE:25:DD
            X509v3 Authority Key Identifier:
                keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:08:9a:07:14:dc:79:83:e8:ae:ed:66:3f:27:43:a4:1b:31:
         25:7d:16:4f:ee:f1:29:9c:68:a9:d9:4f:23:0f:64:2f:3e:28:
         00:61:43:76:31:b5:b8:d3:0a:5e:20:d3:71:38:c6:27:15:c5:
         99:c1:d4:31:b3:4e:6e:26:31:7a:a2:40:8e:9a:b3:a3:a4:69:
         0d:b2:f2:7b:93:aa:b9:a9:be:d4:10:d8:e1:71:c7:f7:ff:e0:
         f8:48:5d:2b:af:f5:83:b0:d0:b8:7e:43:b0:38:c9:e5:7d:05:
         18:3d:fa:11:34:e1:8d:e8:90:30:c7:33:6a:cd:60:30:1e:86:
         dd:d9:ac:02:03:17:be:a2:5d:b5:6e:50:1b:f2:c0:ae:0b:95:
         96:91:81:8a:31:b0:1d:c7:13:94:99:f7:ec:57:70:1e:55:e0:
         c4:0c:75:91:b7:20:49:72:49:01:df:46:25:e3:04:eb:6b:d6:
         45:f6:22:2a:7f:89:3c:75:78:c5:e7:5b:6a:a0:a0:b0:cb:a8:
         12:67:9d:7c:a5:9b:eb:02:6e:0b:a0:b8:65:85:9c:34:0f:9c:
         24:ef:f2:de:70:75:fa:d8:1e:37:01:3e:fa:d9:56:69:0c:c5:
         1e:3c:18:af:12:8c:03:d3:cd:77:96:b4:19:17:c6:33:fc:c0:
         7c:cf:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:47 2026 by rpki-client