Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
File:                     OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json)
Hash identifier:          ygHl9340LOHL/8yOm4Gf2S9Rxj9NTXH1o2K/yAvRrzY=
Subject key identifier:   6B:46:D8:5B:C2:0F:EB:E4:6F:35:90:C2:9E:FE:95:B2:84:7C:6C:0B
Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
Certificate issuer:       /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
Manifest number:          015E
Signing time:             Thu 23 Jul 2026 06:33:22 +0000
Manifest this update:     Thu 23 Jul 2026 06:33:22 +0000
Manifest next update:     Thu 30 Jul 2026 06:33:22 +0000
Files and hashes:         1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: ygaQPHCee31DVU1H/rb843ue39Xkvq5gWCtlheC1PP8=)
                          2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: 1cWKe61JXoqpcmn6lNJya/Zcn9d/497NYBSEDuJwXJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
        Validity
            Not Before: Jul 23 06:33:22 2026 GMT
            Not After : Jul 30 06:33:22 2026 GMT
        Subject: CN=6a61b5b2-e092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:b0:37:62:64:d8:30:b5:bc:2b:23:f7:40:
                    a3:25:ab:2b:2b:2f:3f:a1:87:34:63:d3:63:a2:ab:
                    36:5f:59:0f:3f:50:58:c6:ee:1e:81:0b:46:e8:c7:
                    a4:cf:9a:0d:e3:9d:11:02:0b:3b:a7:22:7b:1d:59:
                    51:f2:cd:8c:f9:21:65:f6:51:4c:ef:8d:ba:01:f0:
                    3b:5e:29:4e:86:f6:ff:a9:53:ea:78:ea:61:72:c4:
                    51:98:b6:fd:99:84:bb:76:65:c6:18:56:d9:35:db:
                    fe:32:92:9f:1f:8c:67:56:1d:f7:3f:40:98:20:e6:
                    90:cd:78:3e:f2:9f:0f:33:ce:ed:4e:02:b2:5a:3d:
                    c8:58:74:fb:bf:cc:b9:dd:38:73:6c:a1:08:45:d6:
                    13:3f:00:11:9e:d0:a5:59:06:0f:19:9d:dd:fa:dc:
                    12:4c:fa:1e:57:ad:6a:c2:6a:af:0a:e4:32:93:9c:
                    f8:cc:c8:e8:bb:97:6c:18:93:6d:f8:ef:5e:11:fa:
                    b3:4e:52:fa:2f:9a:1e:1f:05:68:55:db:56:16:7f:
                    32:1f:0f:5c:60:23:59:d7:cd:f5:81:97:3a:29:ac:
                    35:a1:4b:d2:df:3f:2f:9a:42:81:e0:a8:59:70:0e:
                    1a:b9:36:35:6d:28:43:f0:d4:04:d2:8e:7b:b4:ce:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:46:D8:5B:C2:0F:EB:E4:6F:35:90:C2:9E:FE:95:B2:84:7C:6C:0B
            X509v3 Authority Key Identifier:
                keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ce:8f:e1:5f:3f:bc:8b:d2:68:3d:a7:00:c5:4a:b6:f6:b4:
         37:35:e5:6b:5c:7e:a0:06:9a:16:89:35:27:64:09:91:8d:27:
         9b:49:d9:76:2a:60:06:a8:4b:44:f8:17:31:22:dc:45:00:0c:
         20:86:cc:b0:a8:83:2a:29:e2:31:a4:8e:60:a3:81:0a:03:cf:
         bb:db:82:44:1c:92:2a:e8:fd:df:13:aa:cc:2e:3f:15:cc:45:
         b7:98:4e:a7:7b:73:62:10:01:05:8c:f2:65:5e:e9:21:6e:5a:
         65:fa:ed:36:98:eb:69:f2:19:55:24:b6:65:ac:fb:4c:27:5a:
         60:fd:f4:05:bb:4b:93:18:18:4f:c5:bd:8a:1c:40:b6:fd:1d:
         53:ae:23:59:20:30:5c:6f:ff:4b:61:04:78:fc:db:68:ca:db:
         40:4c:40:d7:38:5b:70:98:c3:21:22:7a:2a:87:d6:7b:52:18:
         04:0c:b5:03:66:25:69:6e:ea:79:79:92:83:f2:af:ef:8d:57:
         64:2e:17:ea:cc:c1:7e:08:16:72:dd:46:64:38:43:c9:55:8f:
         07:b7:ce:44:2c:f7:05:05:27:ae:c6:dd:52:df:7e:14:65:40:
         a2:2c:f6:21:96:ce:68:07:75:fe:84:b0:6d:b7:bf:fe:7c:31:
         a5:b2:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:42 2026 by rpki-client