Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
File:                     OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json)
Hash identifier:          vlhtILTQ7bcVINFDuj45sX2yy47AEfGH9TsqncAkyv4=
Subject key identifier:   35:A6:60:FC:2A:9A:90:C6:D6:92:03:09:9B:43:F3:17:84:65:63:A7
Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B
Certificate issuer:       /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
Certificate serial:       1871
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
Manifest number:          1865
Signing time:             Wed 22 Jul 2026 16:36:00 +0000
Manifest this update:     Wed 22 Jul 2026 16:35:59 +0000
Manifest next update:     Wed 29 Jul 2026 16:35:59 +0000
Files and hashes:         1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: reRdg08UnAQOhMqEglgjqJ8K6PVmmpm/MNU/Ey/E9k8=)
                          2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: 7JNmlbMqJmYKkSRMUqjjlP0pR2Q9I21oeD7RxmLV6bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl
                          rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6257 (0x1871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
        Validity
            Not Before: Jul 22 16:35:59 2026 GMT
            Not After : Jul 29 16:35:59 2026 GMT
        Subject: CN=6a60f170-fad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:aa:88:2a:8c:c0:73:20:5c:dc:a0:fa:aa:
                    a6:9a:0c:fc:bc:db:07:94:e4:3f:0f:34:da:43:36:
                    42:4c:91:91:f3:2c:b8:f0:4f:e0:85:2d:30:c9:2f:
                    e9:48:d2:7b:65:d3:79:0a:37:0f:fe:6e:60:45:51:
                    39:61:d8:c5:ed:f5:4a:5a:04:c2:e1:76:e7:a4:25:
                    34:0f:8e:e1:7a:dc:73:b3:6f:7e:5e:c2:60:08:e3:
                    24:c8:35:27:1b:97:bb:ab:da:d5:af:13:48:8d:d6:
                    8b:f2:35:45:1d:29:4e:03:3b:9c:fa:17:15:c2:ba:
                    00:59:88:ef:9d:2b:85:29:30:f2:74:42:37:6b:50:
                    83:7c:21:95:c8:ba:33:74:42:55:51:9f:c6:9c:9a:
                    8e:8b:6a:88:fd:c7:da:2c:e7:73:20:ca:7a:40:c6:
                    49:cf:2b:be:e0:56:66:30:f6:fb:35:96:bc:5a:7c:
                    2f:98:37:fe:3a:3d:8f:16:dd:79:67:69:de:7f:4a:
                    ff:cd:9e:dd:e5:99:c0:d4:c3:f7:73:33:2d:dd:1d:
                    9d:86:3d:b0:ee:92:4b:8f:f4:34:b0:d7:45:16:73:
                    fb:34:97:99:cf:3f:bc:87:d8:42:a0:79:8d:7a:4f:
                    c7:a3:c4:9d:6f:7f:ab:47:3f:5a:7a:74:dd:ea:84:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A6:60:FC:2A:9A:90:C6:D6:92:03:09:9B:43:F3:17:84:65:63:A7
            X509v3 Authority Key Identifier:
                keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:0c:1b:ad:4d:0f:94:fb:31:01:3a:1e:c3:ff:69:1e:44:6b:
         a3:44:a1:c7:05:12:57:58:cd:22:c0:54:11:01:47:44:ba:20:
         bd:f1:bb:31:17:49:e0:1e:d9:12:3d:62:7d:10:da:76:c9:c0:
         ba:f1:f9:0e:07:e0:16:c1:0f:70:e5:0a:66:e3:41:2c:68:73:
         e6:2e:c9:ff:e7:c7:f3:63:2c:e3:f4:14:1d:6a:64:47:ff:f0:
         4b:05:f8:c5:fb:f5:f4:d7:01:6a:d4:5a:45:57:b7:ab:ac:96:
         9d:54:f6:1b:f6:d8:94:37:61:9f:ed:15:ee:93:fd:3b:b8:09:
         76:1d:bd:dc:05:0d:49:0b:c7:09:d4:82:f8:dd:e1:a8:e5:52:
         83:1d:4d:d0:a8:4b:de:62:cf:e7:e7:96:83:40:c4:7c:62:70:
         c6:f6:c9:0f:42:0b:d8:4d:d1:5d:2e:8e:59:2f:1a:2f:d1:c6:
         dd:bd:26:32:b9:eb:d2:50:8e:1c:3f:bc:5f:bb:6c:17:dd:e1:
         0b:15:39:51:02:e9:e2:87:90:8c:96:79:99:41:a1:5d:cf:73:
         54:47:ca:00:ba:7a:81:d9:f3:6a:9b:00:fe:9d:a2:fd:07:11:
         b4:ae:6d:5c:ca:b7:f9:84:f4:bc:04:b5:60:90:9e:b5:d6:d0:
         6e:b7:ed:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5
ODlDRjU2MEIwHhcNMjYwNzIyMTYzNTU5WhcNMjYwNzI5MTYzNTU5WjAYMRYwFAYD
VQQDEw02YTYwZjE3MC1mYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/qqiCqMwHMgXNyg+qqmmgz8vNsHlOQ/DzTaQzZCTJGR8yy48E/ghS0wyS/p
SNJ7ZdN5CjcP/m5gRVE5YdjF7fVKWgTC4XbnpCU0D47hetxzs29+XsJgCOMkyDUn
G5e7q9rVrxNIjdaL8jVFHSlOAzuc+hcVwroAWYjvnSuFKTDydEI3a1CDfCGVyLoz
dEJVUZ/GnJqOi2qI/cfaLOdzIMp6QMZJzyu+4FZmMPb7NZa8WnwvmDf+Oj2PFt15
Z2nef0r/zZ7d5ZnA1MP3czMt3R2dhj2w7pJLj/Q0sNdFFnP7NJeZzz+8h9hCoHmN
ek/Ho8Sdb3+rRz9aenTd6oQwWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWmYPwq
mpDG1pIDCZtD8xeEZWOnMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF
QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RENGMC8zMTI3QjAxOENFQUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJ
SUZxZGFSUnhuZ3VZblBWZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArQwbrU0PlPsxAToew/9pHkRro0ShxwUSV1jNIsBUEQFHRLogvfG7MRdJ4B7Z
Ej1ifRDadsnAuvH5DgfgFsEPcOUKZuNBLGhz5i7J/+fH82Ms4/QUHWpkR//wSwX4
xfv19NcBatRaRVe3q6yWnVT2G/bYlDdhn+0V7pP9O7gJdh293AUNSQvHCdSC+N3h
qOVSgx1N0KhL3mLP5+eWg0DEfGJwxvbJD0IL2E3RXS6OWS8aL9HG3b0mMrnr0lCO
HD+8X7tsF93hCxU5UQLp4oeQjJZ5mUGhXc9zVEfKALp6gdnzapsA/p2i/QcRtK5t
XMq3+YT0vAS1YJCetdbQbrftiA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:57 2026 by rpki-client