Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
File:                     O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json)
Hash identifier:          gf/N/j44ug+swS/tmcaW4GWARmUlJ6shf8OB31RfLks=
Subject key identifier:   E3:D8:38:F0:3C:C1:B3:71:C8:1C:81:65:37:57:64:26:4E:00:90:32
Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
Certificate issuer:       /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
Certificate serial:       0853
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
Manifest number:          0838
Signing time:             Wed 22 Jul 2026 21:37:39 +0000
Manifest this update:     Wed 22 Jul 2026 21:37:38 +0000
Manifest next update:     Wed 29 Jul 2026 21:37:38 +0000
Files and hashes:         1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: HUIW36wg1eM021feDHZsAJ70FIdX4iwgb4MHw0ODLoY=)
                          2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: 5MbzWeSizcZ+fI1SVAcYiTyKAUTIOGDA65fh3pICN7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl
                          rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131 (0x853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
        Validity
            Not Before: Jul 22 21:37:38 2026 GMT
            Not After : Jul 29 21:37:38 2026 GMT
        Subject: CN=6a613823-7186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:ed:bb:4c:81:12:60:1e:64:9a:55:90:35:
                    d4:0e:56:ff:47:2b:18:f1:18:03:98:6f:d8:d5:38:
                    2b:0b:26:93:7f:85:fc:b8:18:7d:1b:59:d7:44:22:
                    00:21:d3:b5:c1:02:77:e4:f7:cc:f1:de:1b:1d:f7:
                    61:bc:7b:38:64:e9:4e:f6:f9:7f:65:39:b4:2a:d5:
                    61:8f:6a:93:18:78:c5:6b:48:87:49:e4:64:ac:54:
                    c1:1c:9f:1e:14:28:7e:06:94:75:cf:8f:71:87:a6:
                    dd:3c:02:20:76:0c:c3:91:4b:32:76:13:3b:c7:8c:
                    9f:ca:b6:e7:c8:80:a8:9e:ee:91:8b:53:6d:ed:6f:
                    84:2f:54:61:54:8b:d9:32:de:83:21:03:b9:4f:d4:
                    3d:41:23:94:75:fa:89:e4:00:91:a2:d7:db:22:6e:
                    2f:b8:ed:c2:32:04:70:3e:ac:52:a8:d6:56:3e:0f:
                    8c:21:c3:12:34:50:ad:ba:f3:8f:a7:68:63:11:55:
                    dc:08:27:ab:4e:f4:f4:d1:61:03:59:d1:83:dc:f9:
                    be:3c:41:3f:0e:56:fc:e4:83:7f:1c:da:c0:29:0d:
                    42:83:4f:a1:44:ca:84:34:14:38:05:87:37:2c:f0:
                    a6:9a:1e:fb:bd:fe:82:ea:5e:6c:b8:d4:82:fc:1e:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:38:F0:3C:C1:B3:71:C8:1C:81:65:37:57:64:26:4E:00:90:32
            X509v3 Authority Key Identifier:
                keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8f:27:00:0c:8b:22:47:c6:cb:8e:5b:38:6f:61:b9:6b:eb:
         6f:09:35:78:6a:b0:cc:8a:59:68:34:a8:fd:14:47:14:83:03:
         a9:a8:20:95:f3:31:2f:cc:0c:0a:ad:d7:8a:39:e9:37:24:ac:
         01:5e:37:7f:c2:8a:bc:01:01:e9:5f:e7:31:9a:d9:48:c5:49:
         e4:c0:24:75:e1:f7:1b:81:26:31:e5:84:28:72:a6:a8:6a:a0:
         76:e8:b6:2b:b3:51:39:d2:ec:51:e0:e7:a3:02:07:ac:6f:11:
         8a:2a:e9:8f:88:58:a3:a8:32:61:a6:c8:2f:c0:3c:18:25:cd:
         47:80:22:e5:dc:a9:0a:7f:d5:05:2b:cb:ce:e0:9e:3a:d4:c1:
         d2:f1:93:f8:26:0f:be:ac:ae:84:01:43:9d:fa:6d:ff:9a:b3:
         5f:94:69:46:90:e7:76:e0:2a:60:17:f4:28:d1:01:bc:39:bf:
         9a:77:d6:7d:84:60:ea:e6:a6:81:c7:d9:d7:ea:f8:7e:39:89:
         27:d7:c7:f9:d5:59:a8:4d:0a:1d:65:39:ec:f5:4f:cc:54:84:
         25:50:8a:5f:84:87:3f:78:b0:57:95:15:25:de:1d:fe:13:ed:
         54:46:c6:b3:a6:ff:2c:75:9b:7d:6a:91:a2:64:89:68:1d:53:
         66:65:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:21 2026 by rpki-client