Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
File:                     OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json)
Hash identifier:          6gRJZzo7oSenJbnj5ou/JHrSn0Gzw/+2RDR18PqM4tc=
Subject key identifier:   37:CD:5E:2C:BA:15:03:BE:FF:85:EA:33:D3:DA:C2:A8:95:45:A0:F7
Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
Certificate issuer:       /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
Manifest number:          014B
Signing time:             Thu 23 Jul 2026 06:52:27 +0000
Manifest this update:     Thu 23 Jul 2026 06:52:27 +0000
Manifest next update:     Thu 30 Jul 2026 06:52:27 +0000
Files and hashes:         1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: nnAgWEUb6fkqTEsq2+RRL9+ZHyvlRJcM/qyaGAVk4A0=)
                          2: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: dKI7uA/SKO3RusYnEdr0A/ZscE+vPWKaXvZ4/iotjxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
        Validity
            Not Before: Jul 23 06:52:27 2026 GMT
            Not After : Jul 30 06:52:27 2026 GMT
        Subject: CN=6a61ba2b-61c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:63:d2:c0:eb:06:a8:83:b7:5c:c7:29:7f:99:
                    6b:61:e0:f3:82:98:a3:e5:d1:95:a2:d3:61:27:5a:
                    fb:06:d5:44:50:9d:92:d1:a2:d5:52:20:8a:33:8c:
                    79:64:68:4b:e4:c7:f4:28:4f:ad:c8:4d:b7:9d:16:
                    8f:fd:cb:65:95:10:d3:fb:26:bc:78:2f:d5:5c:ff:
                    e8:29:0c:ef:e1:9d:cc:9d:de:28:fe:d6:a6:99:92:
                    ae:77:00:95:5a:d1:ec:cd:0c:1f:81:e0:3a:0b:30:
                    84:ca:8b:ab:1c:25:67:f0:ff:9b:cb:f1:69:8b:9d:
                    ba:a1:dd:8d:9e:26:b3:ac:68:58:1f:3f:4e:aa:82:
                    98:db:1d:6f:0a:40:98:83:43:af:d8:0e:ba:3a:06:
                    ed:be:15:57:f2:7f:d0:7a:d1:54:af:b0:d2:d5:22:
                    2a:81:cc:b6:4e:8b:14:c8:63:78:25:0f:86:8e:14:
                    59:ce:46:20:4d:75:27:ea:8b:b1:4a:1b:6b:82:64:
                    93:c4:57:0b:3f:52:7f:f0:ed:64:eb:fa:03:5d:43:
                    07:65:b0:2b:58:80:6d:b3:22:45:26:78:a2:b8:e6:
                    1c:82:ba:2a:b1:85:cb:54:68:83:6b:c6:3b:6b:e2:
                    3a:94:42:59:89:5a:b5:6e:c5:58:f3:db:66:6e:46:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CD:5E:2C:BA:15:03:BE:FF:85:EA:33:D3:DA:C2:A8:95:45:A0:F7
            X509v3 Authority Key Identifier:
                keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:21:08:1c:23:87:7c:f8:89:9f:64:18:d2:90:a6:0f:8f:24:
         e1:a5:10:65:89:60:f4:f8:a6:2c:37:ee:fc:64:25:fb:11:60:
         82:08:e6:b8:f2:62:30:cb:92:55:30:bc:f0:87:3a:fd:a3:a1:
         5d:fd:9f:f1:85:7e:53:da:55:1f:66:4f:ea:6e:b5:ce:4f:bf:
         f0:f2:e1:01:87:99:38:ce:94:2d:3a:31:ba:4b:23:19:5e:3d:
         51:06:bc:21:66:0f:ed:9c:cd:ca:34:c3:26:ab:0e:34:59:08:
         06:73:42:0a:14:c8:ad:13:95:9b:81:6a:71:1d:b5:4c:e6:fa:
         28:66:7d:67:06:56:9e:9d:11:48:3d:89:c9:2b:4b:6a:bf:b6:
         de:a9:83:f7:7e:7f:ce:fb:e1:02:1b:21:43:fa:ff:1f:6c:7b:
         8c:45:81:e3:6d:b1:af:2b:a1:fc:35:76:a6:94:74:6e:e1:e1:
         74:00:2c:ac:a7:40:25:ec:d8:3f:d2:c2:d9:5e:ec:57:03:29:
         9e:2a:d5:c2:22:fa:a1:b5:0b:57:1c:ea:85:4c:f9:b9:d2:bd:
         73:54:b3:7a:59:34:51:f1:8f:53:73:63:a4:57:d5:1e:cb:a6:
         b6:da:d4:2c:c9:6d:29:9b:8f:4a:48:ec:24:99:e9:08:48:3e:
         04:9e:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:26 2026 by rpki-client