Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
File:                     Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json)
Hash identifier:          oDrt0TkRfmYqI/HzCXj1To2U1xc18eiG73qIuvdelhQ=
Subject key identifier:   74:AF:1E:08:B7:6A:46:2B:80:E9:7D:F6:37:C1:92:9D:0F:F5:FD:E6
Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61
Certificate issuer:       /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
Certificate serial:       37C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
Manifest number:          36AC
Signing time:             Wed 22 Jul 2026 14:25:01 +0000
Manifest this update:     Wed 22 Jul 2026 14:25:01 +0000
Manifest next update:     Wed 29 Jul 2026 14:25:01 +0000
Files and hashes:         1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: +V5wIeqxf/AnaxsLP67DqvjPqlmzW6FLg6D2roe4L30=)
                          2: CBD7334E244611F1B0E42AFABC833773.roa (hash: oIuHBmVkguz2cQuiJxpSxVksNQEWn1GyNSy8/gbXR/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl
                          rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14281 (0x37c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
        Validity
            Not Before: Jul 22 14:25:01 2026 GMT
            Not After : Jul 29 14:25:01 2026 GMT
        Subject: CN=6a60d2bd-0778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ac:6a:e1:94:46:31:15:52:b8:b2:cd:25:ff:
                    a4:1f:e9:6c:b9:e2:ee:ac:a9:74:7c:0a:fe:da:9c:
                    66:46:87:bb:0b:56:b5:24:7c:75:d7:89:90:79:09:
                    b3:50:6f:da:4c:e3:29:8e:75:de:b9:b9:23:c7:a0:
                    fc:94:8d:71:5e:a6:ff:63:68:f6:11:8f:f3:d5:48:
                    3a:d0:c7:2c:7b:0f:e8:84:90:35:87:fe:2e:85:d5:
                    37:11:4d:59:18:be:fc:82:f1:1d:f9:c3:4e:fd:e6:
                    f7:07:87:12:88:8e:65:c8:86:98:64:a5:12:c3:7c:
                    2d:1e:3f:79:07:0d:ec:8a:6e:95:70:d6:1a:ad:b0:
                    bd:4f:b3:4f:30:7b:14:01:68:41:88:cd:b2:dc:49:
                    00:c8:c8:84:36:30:f9:0d:bc:ca:bc:d9:95:e4:79:
                    1d:5f:ea:b2:db:d7:1b:e2:5e:04:56:b3:53:b2:c0:
                    61:67:d3:9d:7f:aa:94:c9:61:ba:ab:54:dc:13:f1:
                    43:29:05:1a:15:d4:f3:6d:c6:59:41:8a:f9:e6:79:
                    70:1c:ea:cb:af:39:e7:26:93:ce:52:56:0e:41:54:
                    2a:cf:0b:28:dc:c4:97:da:9d:e2:51:21:b0:c1:62:
                    ac:ad:39:92:61:71:4b:d0:49:30:ab:cc:11:74:56:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AF:1E:08:B7:6A:46:2B:80:E9:7D:F6:37:C1:92:9D:0F:F5:FD:E6
            X509v3 Authority Key Identifier:
                keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e1:96:fc:d0:f9:db:4f:41:29:34:05:88:b8:1f:a7:53:0f:
         60:7c:b7:e1:f6:3a:61:ab:fe:a5:bd:d3:bb:07:cf:15:20:8f:
         5b:c1:01:f4:b2:77:b0:e5:97:e6:f1:90:28:c0:7b:67:74:54:
         01:7a:6b:30:7a:91:d6:0f:c7:ad:cc:f4:0a:b5:2f:a2:e9:12:
         73:ed:cc:55:6c:14:0c:06:6a:98:2d:61:a7:04:ec:c7:26:85:
         82:cd:12:4e:74:bb:df:bb:ad:5e:0a:85:03:7f:52:e9:cd:ff:
         41:5c:be:86:0d:70:57:ff:c8:5a:0d:72:43:4d:7e:9e:ec:fe:
         78:9d:c9:bb:e4:92:e3:f6:b1:f7:38:53:66:b9:81:b7:8b:7e:
         23:49:57:dc:e8:e3:8c:8c:a7:fc:2c:19:7d:81:8e:47:48:fd:
         c0:79:98:e7:69:af:61:46:ac:75:97:82:f3:1c:c8:7a:0d:68:
         67:eb:96:e7:6d:88:1b:a1:a7:b6:9b:1b:d8:b4:25:83:2c:f8:
         2b:c0:57:84:b0:af:36:09:74:f4:69:17:d8:44:46:1d:a7:57:
         04:f5:5a:01:5e:3e:10:79:a5:e9:b1:ab:a9:db:71:29:1d:71:
         5c:9a:1a:41:31:91:6d:da:e4:c2:46:ba:1b:14:25:11:76:fb:
         eb:d8:b0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:30 2026 by rpki-client