Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File:                     OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier:          ewF7YwozZhfHbY7YDrXswoS5Sc8P7pRkWHvvHP/DTB0=
Subject key identifier:   3F:8E:5F:ED:05:39:FA:96:81:42:D0:FA:E6:EC:31:FE:3D:E0:C0:C7
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1B6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number:          1B2A
Signing time:             Wed 22 Jul 2026 16:22:28 +0000
Manifest this update:     Wed 22 Jul 2026 16:22:27 +0000
Manifest next update:     Wed 29 Jul 2026 16:22:27 +0000
Files and hashes:         1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: MTgh8mXBGNG88kfPbnlWlw4y/hGKcAmncWXwLn/RE+k=)
                          2: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 2kYQB/1ehx0OoDHYCfNabfp1Bn54gGxKktYjFpVzelU=)
                          3: 96F7E1784E8F11F1BB8AFF5DB7833773.roa (hash: qvhkzDn6OfQuvCTV8G5Fvq3qQbKfUPKsi0/SYUxzYw8=)
                          4: 95851A544E8F11F1BB8AFF5DB7833773.roa (hash: DZ5DPupzTqqmSWdwYpXblDHHSqI4zxqj2PRZ30A7k3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7019 (0x1b6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Jul 22 16:22:27 2026 GMT
            Not After : Jul 29 16:22:27 2026 GMT
        Subject: CN=6a60ee44-1345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:b2:7f:85:2b:14:e2:eb:96:4b:b9:52:d3:
                    9d:2b:89:61:94:1e:97:f2:8d:bf:43:a9:63:62:c4:
                    34:c2:57:bd:55:cc:c9:7f:64:71:4d:f7:71:ff:4f:
                    fb:a0:c5:de:cd:ab:e2:40:1d:ef:ae:cc:e5:99:38:
                    fa:4f:ad:38:bf:3e:a1:bd:c7:2a:dc:e4:58:97:58:
                    e3:f6:7c:b0:fa:d6:92:5e:a2:78:96:23:b3:c7:f3:
                    16:94:26:67:61:e2:34:af:19:7a:82:b6:95:ff:24:
                    ab:f3:bb:3d:0b:4d:6d:38:fe:e1:91:ab:b4:f7:04:
                    47:a5:9e:dd:34:88:06:34:a2:63:38:1e:cb:6e:b0:
                    2c:3c:bb:3c:7e:df:fd:7a:22:ba:50:3e:59:b0:cd:
                    48:c9:de:dc:bb:54:db:15:ef:35:e7:19:af:b1:1f:
                    19:df:fa:31:e2:97:68:0b:90:68:b1:62:2d:5c:16:
                    97:74:04:e5:83:5d:cb:94:ce:2f:16:13:32:e5:c7:
                    f5:f5:dc:4e:7d:52:c8:11:ea:23:f1:8c:51:b8:f3:
                    6c:26:0c:c3:4c:0e:07:89:a2:2f:1c:3d:ac:bf:9b:
                    91:a6:7b:ff:17:c3:6f:7c:74:e4:bc:ee:8e:ac:ff:
                    07:71:41:66:0d:20:f0:5b:51:e4:c5:6f:1b:38:8e:
                    e6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8E:5F:ED:05:39:FA:96:81:42:D0:FA:E6:EC:31:FE:3D:E0:C0:C7
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:91:bb:6d:a3:4b:80:8c:78:2f:38:16:05:a2:77:a1:b3:b3:
         34:e5:f3:ee:21:ab:12:c8:ce:57:91:e9:f9:44:c7:03:77:41:
         e9:dc:0d:05:66:92:93:f7:85:f6:0f:2d:5d:d2:2b:5f:9b:2b:
         d4:d8:95:0a:53:b7:f7:a7:28:d5:b8:32:3f:c2:45:cc:09:64:
         7a:27:29:74:18:e7:19:b5:b9:6e:71:42:43:ab:16:58:90:52:
         c3:73:2f:b8:d7:d1:b3:f6:da:26:c7:04:dd:c9:96:b1:8c:2d:
         a8:e2:dc:3a:57:99:cc:fb:9b:5b:af:f9:e0:cb:32:1b:bb:7d:
         22:57:20:93:3a:7e:12:c5:86:32:d7:f2:c2:51:5b:33:63:eb:
         4d:a1:9c:51:39:62:0f:8c:47:46:42:bc:10:9b:3c:e1:4d:31:
         2c:36:05:c0:9d:4b:d9:ac:50:d6:ad:2c:5d:d7:00:d1:57:8a:
         49:77:f6:88:ac:4e:95:4f:d4:6b:d7:93:df:c7:e2:f6:c8:7b:
         a6:a0:d2:60:25:2b:22:79:a2:e4:81:7b:c2:87:2c:4d:e0:a8:
         f7:7a:f7:ff:9e:be:c1:91:2d:ce:fe:32:80:71:ac:27:bd:89:
         11:0d:28:a6:8a:f6:b4:0c:84:b5:36:eb:64:cb:89:af:f1:0d:
         a6:21:e3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:08 2026 by rpki-client