Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
File:                     OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json)
Hash identifier:          LvAukk0uAQpBrpV4WC6RZQlLQdtqQSb7p+CZ+vWFgAg=
Subject key identifier:   67:8F:D4:89:F5:2C:1C:5B:26:ED:90:3E:76:B2:66:C4:5F:69:FC:95
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       07E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
Manifest number:          07AF
Signing time:             Wed 22 Jul 2026 22:09:38 +0000
Manifest this update:     Wed 22 Jul 2026 22:09:37 +0000
Manifest next update:     Wed 29 Jul 2026 22:09:37 +0000
Files and hashes:         1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: XxhjheFrs2nmwfNAdHuxhwSJjJfrrTfqo0UxrmRxJxk=)
                          2: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (hash: LukrNGdWIpA2iY565dCcLM1eI6t107rjxby6IG7sOGk=)
                          3: B8A6EC507C0311F19A8027EB8FA30FBC.roa (hash: RktWgMVGnQd10TU8uymOUDety5T/DYJSsiw+PrZkojY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Jul 22 22:09:37 2026 GMT
            Not After : Jul 29 22:09:37 2026 GMT
        Subject: CN=6a613fa1-0a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:77:49:b4:18:77:03:a5:48:61:d6:85:19:
                    fe:64:80:1a:47:00:e6:ef:59:ed:1b:d5:a0:be:dd:
                    f0:ef:c5:84:80:ef:40:0d:f5:4a:d2:77:46:ff:79:
                    28:dd:26:fc:46:3f:4e:33:35:42:b7:57:a2:37:3b:
                    13:a6:ca:97:87:eb:35:a4:4e:00:06:dd:a1:2b:9a:
                    6c:64:d2:1b:5b:8f:6f:2a:9c:36:76:74:34:1c:8e:
                    3b:b9:05:c8:d2:88:44:28:e0:a8:82:f4:ca:3f:5d:
                    29:a8:5f:3b:b6:ed:f7:c8:44:2e:fc:f2:f1:61:c8:
                    ba:45:4b:4e:80:5c:37:3a:b7:39:3e:28:ca:f0:a7:
                    bd:33:ba:b6:33:1c:71:ae:c8:25:ac:17:50:a0:57:
                    6f:c1:31:50:e8:e2:97:36:16:fe:6c:ef:bd:f4:51:
                    16:e2:2d:b8:1e:37:76:e3:81:1f:82:fc:f7:1a:45:
                    a6:e1:d6:a6:7d:5d:2c:34:7c:2f:be:e0:e0:10:7c:
                    71:c1:03:47:b3:28:80:97:08:43:ed:14:94:53:b5:
                    0e:2b:3d:f9:3c:65:4d:84:79:7c:d6:d5:f8:c9:c6:
                    85:a5:fc:65:ca:68:a1:f6:65:68:c2:e7:b8:fb:d9:
                    96:16:9f:f4:a2:d1:26:15:2a:22:09:f3:ff:cc:72:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8F:D4:89:F5:2C:1C:5B:26:ED:90:3E:76:B2:66:C4:5F:69:FC:95
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:58:3e:25:60:63:36:9e:d2:b5:ff:c0:04:49:35:ce:df:
         eb:25:8f:33:47:2d:60:58:49:54:49:9a:43:f1:d5:66:46:26:
         dc:c2:c2:fe:62:37:23:bb:f1:6b:98:77:a3:46:85:57:28:32:
         9a:d1:db:c5:b1:51:53:43:32:cc:df:68:aa:65:05:67:2e:ee:
         93:b0:64:9b:8f:ae:e2:47:ad:9b:82:3f:b4:da:62:4d:a6:99:
         b7:7a:56:f7:67:6a:a6:d8:14:0e:9e:fe:56:19:d9:a9:5f:2a:
         36:21:6f:76:0a:e6:33:8e:3a:72:6f:24:20:c5:ad:64:78:7c:
         c1:bb:f7:2c:83:ae:e0:5d:11:e0:d1:67:0b:44:ca:ea:c0:0d:
         63:72:6b:36:79:18:4c:1b:89:a8:7e:da:1b:04:94:a6:83:90:
         a0:2d:03:12:af:6b:b1:ae:5f:a5:1f:97:3c:98:e1:5c:c8:2a:
         bc:7a:92:00:a3:47:99:fb:76:44:4c:ac:90:90:c2:ed:14:39:
         85:f9:5b:71:40:f8:b0:32:2b:fa:f6:84:83:16:1f:e0:13:14:
         e9:c4:40:d0:87:de:1b:3a:66:9f:46:16:7f:7b:49:59:ce:67:
         62:2d:b9:49:dc:32:20:55:04:27:af:52:81:1f:f2:93:82:58:
         77:68:9c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:45 2026 by rpki-client