Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File:                     os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier:          Z4yFLixbKqEQn2bTMVMweRIk3Y6Ce2mahdsrLkzCio0=
Subject key identifier:   06:2C:D5:2B:82:C0:64:96:37:B9:D7:AA:81:4D:F4:3D:A2:CD:A4:14
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer:       /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number:          0223
Signing time:             Thu 23 Jul 2026 04:10:30 +0000
Manifest this update:     Thu 23 Jul 2026 04:10:30 +0000
Manifest next update:     Thu 30 Jul 2026 04:10:30 +0000
Files and hashes:         1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: pYKf7ZdArbpnnuKuaRz2JunGNM8MEab7r3xlbU76axo=)
                          2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: jt/Em4DLUT3Wo1hryGzSXiSThIZtCbpBQGAGGsyRT4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
                          rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
        Validity
            Not Before: Jul 23 04:10:30 2026 GMT
            Not After : Jul 30 04:10:30 2026 GMT
        Subject: CN=6a619436-9a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:fd:ac:42:40:e5:1d:30:21:91:b0:0c:62:
                    30:02:ea:c8:8c:1d:c5:a2:51:08:dc:5d:8b:85:f4:
                    f6:cf:c4:e8:5e:da:c6:de:b8:71:36:e7:15:16:b9:
                    f5:a0:d6:04:ac:28:c7:be:74:7f:90:0d:e6:45:3e:
                    78:f9:5c:19:99:05:07:86:ef:e5:60:6e:7c:d1:f1:
                    ca:14:c6:2a:a2:e8:f4:43:67:bb:8a:81:3f:98:1d:
                    4c:04:7e:91:33:ea:bb:05:e1:11:f5:d2:7b:0e:10:
                    b4:8f:7e:cd:75:66:6b:67:a3:f0:23:3f:13:51:fd:
                    5d:c2:de:03:1c:7e:90:b5:6b:1d:46:18:23:4d:7a:
                    01:e1:d4:8c:69:28:2f:30:b5:ea:76:b6:44:9d:c5:
                    19:69:68:c1:99:e6:09:10:71:a2:d4:f7:66:97:87:
                    7d:b1:c1:b4:89:e5:0b:8d:54:64:92:4d:f5:4a:a4:
                    a0:68:14:e5:87:ab:2b:f4:44:94:70:8a:81:fd:84:
                    72:6f:ce:b8:9f:3e:8a:14:60:cd:72:f1:f1:6b:e5:
                    fc:15:67:02:78:82:99:ef:94:36:f6:96:bd:a1:be:
                    b9:e2:60:b0:70:39:b4:9b:e1:ee:08:7d:06:d8:83:
                    7c:16:cd:37:2c:64:00:ca:35:39:b6:82:d0:0d:69:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2C:D5:2B:82:C0:64:96:37:B9:D7:AA:81:4D:F4:3D:A2:CD:A4:14
            X509v3 Authority Key Identifier:
                keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f2:e9:73:e6:b4:5d:f9:88:61:81:fa:e7:f2:cd:44:f4:d6:
         71:6a:6b:b3:d4:58:ff:3b:9e:ae:cb:95:64:55:8a:fa:8b:5b:
         f6:49:e6:d8:2a:3d:cb:f4:ef:d2:16:71:39:93:3c:c8:3e:c6:
         57:c3:08:67:45:57:2b:6f:ef:82:62:1b:24:5c:63:56:62:50:
         b0:f2:09:73:b6:5a:c3:98:4d:3c:ce:ce:7a:0d:35:41:13:28:
         63:f5:8d:ad:f3:0d:fa:d8:9f:c7:6a:23:0b:f0:05:06:8f:47:
         85:90:b5:96:ef:77:2a:3a:33:e9:fa:13:5a:52:23:9e:1f:65:
         35:35:dd:d4:2e:5e:fd:b6:fd:1f:e5:df:17:45:6b:82:85:e2:
         ce:dc:f7:01:a9:78:17:d9:ca:45:a0:b9:2c:dd:72:c4:5b:24:
         de:27:4c:19:ad:ee:df:8b:b6:32:77:73:63:0a:9e:d5:f5:a3:
         d5:bf:0a:d4:34:15:12:ec:4e:14:97:7f:2c:ee:2e:5d:b9:9a:
         b5:ef:2a:57:f5:73:ff:6d:1f:ff:31:e3:75:ff:f2:15:77:e5:
         c9:85:6f:6c:e7:4c:4e:c3:11:e8:73:46:87:05:a5:cc:ff:1f:
         1e:7d:4c:3b:b5:01:97:a0:9e:a0:19:e0:32:c2:44:10:ff:ed:
         62:ff:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:44 2026 by rpki-client