Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
File:                     oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json)
Hash identifier:          oQQeIluLtbZz7A6qoU4ismCjpWVDXgiAuNJu04Kibn4=
Subject key identifier:   75:12:32:9D:F9:52:38:B2:54:91:53:6C:55:FB:F9:85:33:2A:66:C8
Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
Certificate issuer:       /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Certificate serial:       0383
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
Manifest number:          0370
Signing time:             Thu 23 Jul 2026 01:47:35 +0000
Manifest this update:     Thu 23 Jul 2026 01:47:35 +0000
Manifest next update:     Thu 30 Jul 2026 01:47:35 +0000
Files and hashes:         1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: k9w8CObSoFcKxT5kdZI2aGy/ttwvhaDTQH6VBB1L46Q=)
                          2: C258B0D0E03C11EF991E147AC4F9AE02.roa (hash: X4W03lfAeMlljE4GAKwUtjHV/L977l42ii4F4eQTOn8=)
                          3: C08A3ED6E03C11EF991E147AC4F9AE02.roa (hash: sBJZeZ++/x7I1pXhx5Ucb2PyYvnG4JjYuOXlXA0qZVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl
                          rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899 (0x383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
        Validity
            Not Before: Jul 23 01:47:35 2026 GMT
            Not After : Jul 30 01:47:35 2026 GMT
        Subject: CN=6a6172b7-7fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:d2:27:34:11:69:f8:8a:27:ea:3f:14:a5:
                    61:33:af:ae:b4:67:35:23:0d:8e:3e:b2:71:56:d6:
                    b4:61:c9:0b:75:e5:7f:76:e7:42:7c:a5:35:62:eb:
                    d1:da:b3:b3:63:39:b9:ea:e7:33:7c:5b:a8:77:e8:
                    df:dc:0c:a8:95:68:9f:ee:9a:0b:74:c9:3f:fd:ed:
                    1a:62:0f:ee:4a:35:ea:16:b9:8b:cc:81:e7:02:66:
                    65:2d:61:0b:a9:a9:61:95:f9:4f:6c:3f:83:36:1e:
                    b0:8c:97:0a:16:1f:6d:b8:ab:09:1f:af:94:90:6b:
                    27:b1:e2:f6:c3:b8:c3:fd:cc:66:07:4e:67:06:ee:
                    ed:d0:48:55:d0:7c:6e:d3:6e:65:07:fd:a0:da:b5:
                    ee:10:48:85:00:c9:0a:86:24:8d:b7:d0:c2:25:df:
                    14:87:6c:7b:24:02:4f:ae:d8:92:c5:4e:4e:43:cb:
                    8f:78:3c:95:03:c4:c3:fb:44:d2:fa:5b:2c:28:c9:
                    c3:51:b1:8c:4c:90:ac:8f:3d:28:c8:03:46:27:29:
                    dd:96:97:82:c0:1f:17:fa:2a:c2:51:03:6b:ae:93:
                    71:d9:76:ab:03:70:5f:f4:a8:ca:42:be:0b:73:54:
                    e6:36:c1:1d:ae:c8:73:aa:cf:2c:95:02:f8:91:89:
                    fe:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:32:9D:F9:52:38:B2:54:91:53:6C:55:FB:F9:85:33:2A:66:C8
            X509v3 Authority Key Identifier:
                keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:93:70:a4:c9:b3:a6:ea:7f:68:25:e5:f2:d2:0c:cc:f7:82:
         38:c2:b3:dc:14:d2:ad:56:a6:28:e3:f1:2e:55:98:87:76:d5:
         a8:2f:c8:27:41:fb:1b:0b:8c:84:31:57:f9:0a:cf:74:50:c2:
         ed:31:7e:ea:18:51:33:40:cc:b3:bd:18:3b:fc:c7:2d:df:72:
         db:f8:6e:5c:09:37:72:dd:ef:2e:3a:ca:fe:e4:26:a0:dc:2a:
         ba:44:c4:4b:6f:e9:8e:c6:02:f7:0a:f4:a5:c0:62:d2:9b:61:
         e1:0c:f8:fd:c9:07:3f:65:9b:8a:7d:50:66:c2:83:b6:82:ab:
         ee:9c:4c:31:e8:49:47:8b:dc:32:51:00:27:e3:cc:3d:79:ab:
         58:fd:77:7c:96:02:99:05:87:49:d0:c3:1f:db:a2:59:80:94:
         46:fb:9e:d1:9d:fe:19:e0:ed:2e:53:f8:3e:c3:1c:03:c3:16:
         c6:1d:b7:1b:9f:24:12:d6:f1:d1:68:eb:bf:78:15:50:31:a5:
         b4:17:65:38:03:bf:46:81:4e:64:25:e3:d4:e7:62:80:a1:4c:
         e0:44:92:ad:b4:2e:01:85:7d:eb:b9:e4:49:b2:17:9d:c7:78:
         d9:cf:ec:77:a2:92:f8:b8:b2:44:c5:f6:23:79:4e:aa:a7:b9:
         1e:96:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:47:01 2026 by rpki-client