Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
File:                     ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json)
Hash identifier:          A8wTD0PJwlg5Vki7H+at5DzBhA6y8py9Ml4tugAZvkA=
Subject key identifier:   6F:2B:50:6B:77:E1:EF:C5:45:A0:CD:EE:75:18:5B:4A:EF:63:20:12
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Certificate issuer:       /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial:       0E1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
Manifest number:          0E14
Signing time:             Wed 22 Jul 2026 18:01:45 +0000
Manifest this update:     Wed 22 Jul 2026 18:01:44 +0000
Manifest next update:     Wed 29 Jul 2026 18:01:44 +0000
Files and hashes:         1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: IjwcvCWbfiQRSLq15CM1EtPP68dCmgZ61KHK9eY9Zqc=)
                          2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: ob3kyKb+k6DfPg+34w85RGonL9slb2GFkKFVzFEICJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
                          rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3615 (0xe1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
        Validity
            Not Before: Jul 22 18:01:44 2026 GMT
            Not After : Jul 29 18:01:44 2026 GMT
        Subject: CN=6a610589-8f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:49:9f:d3:56:c0:38:3d:b7:42:37:7f:df:
                    1c:1c:e3:e0:23:6c:f4:45:c3:fb:af:a1:05:3a:bb:
                    74:58:44:26:93:84:55:bc:da:12:4e:b8:a7:84:a3:
                    50:1f:8b:80:4e:af:44:7e:aa:be:f2:eb:c2:f2:f1:
                    82:a6:0f:53:35:ab:95:8e:4b:bf:19:f9:78:f8:69:
                    ee:fc:5c:fe:19:b0:8f:f0:6b:d7:5d:ad:87:d3:d0:
                    e0:45:4d:5e:e3:b2:26:6a:30:35:64:5c:42:40:22:
                    18:76:54:a3:7e:60:16:e5:80:fb:5a:32:87:ff:19:
                    59:f0:44:96:8e:6d:24:8f:3c:27:05:a2:ac:05:1d:
                    8c:3e:ce:e5:97:e0:62:a2:03:5d:04:72:fb:d9:22:
                    19:29:28:68:eb:c8:30:57:32:83:ea:6b:88:18:cb:
                    91:c0:53:51:2c:a8:22:47:d6:bd:d7:6b:da:ee:71:
                    3b:11:b1:e5:bf:67:b1:3e:c5:c0:d9:43:f1:15:69:
                    cd:42:7d:b2:8b:b1:d4:78:a5:e0:ff:d2:7c:cc:eb:
                    df:8a:61:b0:f6:07:6d:13:b7:39:75:53:61:ac:fa:
                    f1:76:9b:aa:8b:a9:dd:2f:e7:c2:18:c5:1a:43:1e:
                    01:4f:93:19:0e:1f:5e:82:27:71:c5:39:b3:95:32:
                    4a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2B:50:6B:77:E1:EF:C5:45:A0:CD:EE:75:18:5B:4A:EF:63:20:12
            X509v3 Authority Key Identifier:
                keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a9:19:7c:9a:c1:ff:18:39:b5:b7:1f:1a:de:38:f9:5a:34:
         0c:1c:92:dc:49:12:27:29:ee:d3:37:95:90:a2:af:aa:a7:70:
         40:7a:06:fc:24:b4:c9:49:45:96:fd:6d:a0:94:88:12:91:b3:
         90:57:74:50:e4:66:e2:49:b4:1b:a7:5a:10:46:2f:ed:3b:b9:
         42:f2:6b:7d:a2:01:fb:9b:a6:d1:67:a0:19:0b:7a:3b:1d:81:
         09:fa:8d:74:91:25:ba:7d:52:f2:f0:bf:d0:20:3d:e6:e4:d4:
         ef:96:4a:c5:bf:11:63:a3:74:5a:98:31:a6:b7:d1:3f:87:20:
         39:08:a5:69:46:b4:c9:4c:d5:f8:bf:b3:92:71:0b:6c:56:53:
         9c:eb:84:7f:b8:19:64:74:cf:90:da:97:95:2d:99:5e:82:d1:
         6e:e3:74:4e:22:2b:d3:7f:e2:3e:00:af:99:66:fc:c1:e9:71:
         bd:b2:29:c1:75:ee:95:59:17:28:e8:b2:66:42:b9:c1:8e:2e:
         19:d2:17:d7:6f:b8:e6:5f:4f:63:91:7a:d6:c3:7f:a9:ab:a0:
         77:27:1b:35:2d:da:e8:12:be:c2:80:74:68:ee:af:31:14:05:
         29:24:c1:aa:30:fa:91:56:83:69:ef:ff:10:91:07:34:13:f2:
         cb:e4:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:57:22 2026 by rpki-client