Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          pm7o1+Q3iLuvDT7wbM8XZ3ktghR7DsVrL1dEcg2o31g=
Subject key identifier:   B4:98:28:D2:07:88:93:E1:FB:A8:A0:69:2E:87:03:19:1B:3E:56:E2
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          7A
Signing time:             Thu 23 Jul 2026 09:41:32 +0000
Manifest this update:     Thu 23 Jul 2026 09:41:31 +0000
Manifest next update:     Thu 30 Jul 2026 09:41:31 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: p5YS+CrMjHFgwJO+HfeUZ2h30WaBfrc+jSm3hghpgl4=)
                          2: BD3AE9AC47AF11F1862D4448A9833773.roa (hash: Sa/+2RDFFnvmTt5yGyNUTGOg6sr8HGm5v/QNH+G6roA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: Jul 23 09:41:31 2026 GMT
            Not After : Jul 30 09:41:31 2026 GMT
        Subject: CN=6a61e1cc-da26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:04:df:21:cc:a0:18:1b:26:18:76:fb:21:64:
                    c3:37:c7:23:f1:0b:20:a5:4a:c4:48:6d:22:63:e0:
                    e3:21:cb:02:0f:a9:04:0d:e4:fe:ce:ae:1e:9f:ef:
                    53:bd:8e:c0:f5:12:90:19:d1:d2:04:7b:64:e2:1e:
                    50:88:50:d6:4a:c8:94:c5:12:20:0e:39:e5:3b:1d:
                    7f:2e:04:08:62:78:cf:30:b6:3d:5e:a9:4e:11:53:
                    17:d5:15:a6:ce:1b:71:91:94:ff:ac:2f:6b:7c:33:
                    c2:66:cf:41:13:39:c4:48:65:c9:fc:43:95:64:ba:
                    9c:a5:02:b6:c7:09:e4:75:62:a2:78:5e:d4:1b:9e:
                    0b:eb:bd:99:53:c2:ab:3a:2d:e7:73:04:fa:eb:30:
                    4c:94:fa:e1:31:c7:af:82:f1:e2:2f:a7:88:ee:aa:
                    fe:28:6f:51:1a:28:7a:74:82:88:0e:b7:3d:79:fd:
                    dc:38:cf:0f:94:c9:1b:f5:fd:b8:38:90:7d:51:81:
                    11:a5:68:ba:13:3b:8a:b3:a9:0a:1f:45:5f:bd:e3:
                    b6:f9:14:39:b7:0e:56:c3:0a:f5:9f:09:60:60:c1:
                    5d:76:00:3f:d3:1c:7e:a7:30:51:80:02:0e:f1:ea:
                    c4:66:92:18:57:98:8a:4a:e5:54:70:55:a4:09:0f:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:98:28:D2:07:88:93:E1:FB:A8:A0:69:2E:87:03:19:1B:3E:56:E2
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:37:2b:07:77:de:6c:21:58:fe:b0:db:fa:b6:ad:50:e1:41:
         58:84:de:de:dc:03:28:d8:90:9f:cf:c9:af:5a:5f:f1:e4:22:
         06:74:82:2e:52:36:e2:8c:dd:9e:bf:fb:43:98:68:a8:68:73:
         93:6f:bc:ce:a4:67:89:bf:90:0b:b4:29:22:aa:de:2a:10:c6:
         1b:95:67:c0:d9:0a:60:8b:c3:7c:40:73:63:12:e5:55:21:e8:
         90:3e:25:a1:cc:86:0c:be:28:11:4b:2a:16:b7:dc:02:7c:cf:
         98:c2:70:68:b9:34:3c:31:50:06:69:32:79:e4:32:ae:77:e1:
         0f:5a:87:64:a0:84:c6:bb:ba:4e:1e:38:09:ce:c9:f0:2b:5f:
         cb:58:db:7d:c5:fa:5e:f0:c3:1b:77:45:a5:d5:e9:02:b8:92:
         00:90:f7:f2:1e:35:28:6c:12:25:cd:a2:2e:2a:cc:5b:f8:1a:
         16:4b:04:f3:ae:12:a7:1b:37:94:3a:7e:9d:e3:c0:4d:d4:ec:
         5c:dc:0e:b6:46:3c:62:aa:81:3d:55:41:d8:da:fd:24:17:cc:
         41:75:79:54:de:75:be:bf:96:01:05:77:d1:d5:c1:5e:32:4b:
         16:e8:73:76:35:24:0a:99:51:61:d0:58:74:b2:34:56:21:8b:
         89:94:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:05 2026 by rpki-client