Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft
File:                     oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft (raw, json)
Hash identifier:          zBHIb0NuuzVZ7Ya/dnXgApqDMJ89ujZE/sAw/ICjviM=
Subject key identifier:   8B:16:1D:8F:99:DE:C4:48:4A:E3:4C:36:70:85:69:C0:A8:AC:D1:6E
Authority key identifier: A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE
Certificate issuer:       /CN=A9111537/serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft
Manifest number:          13
Signing time:             Mon 27 Jul 2026 11:30:15 +0000
Manifest this update:     Mon 27 Jul 2026 11:30:15 +0000
Manifest next update:     Mon 03 Aug 2026 11:30:15 +0000
Files and hashes:         1: oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl (hash: C/bqn3WUo0DGa0J71vyOo9CIKdQaWPVlaRbY1p0rFZc=)
                          2: D5D654E4760611F1B28E97E07AA30FBC.roa (hash: LKzEPMeNq68lEF5DAAViO1AMnnXw1fNEUoGr5S01Lg8=)
                          3: -f1KKuk3XOdvY5Wq0W7fBdDDcis.asa (hash: 34xWYncooXu/pLgDlCTm9aAnxYEkji43aa8EWG7l/8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl
                          rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111537, serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE
        Validity
            Not Before: Jul 27 11:30:15 2026 GMT
            Not After : Aug  3 11:30:15 2026 GMT
        Subject: CN=6a674147-2476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:f8:fb:ef:87:65:41:f0:92:b7:82:bb:10:
                    67:88:2c:02:fe:c8:c4:b3:98:80:be:a3:c5:a5:5c:
                    82:f2:2c:d0:34:6b:fa:56:c4:1d:a4:91:71:16:77:
                    ac:8a:2d:62:06:27:61:42:a4:e5:a8:f3:05:be:c0:
                    ce:be:37:28:5c:aa:b4:25:d4:85:67:09:0a:85:42:
                    72:3e:e1:5f:ea:29:f7:ac:97:54:a9:1f:95:ce:2d:
                    f8:43:7c:ad:28:57:eb:60:36:2f:b6:31:03:9f:bf:
                    54:20:a6:43:5d:b8:9d:f3:c1:ed:f1:36:31:55:65:
                    ae:1f:ea:5a:8b:b8:24:9a:b3:9f:4b:11:44:b1:a6:
                    4b:64:3f:0b:c8:e3:56:00:ad:15:88:9f:ed:12:9a:
                    24:56:01:8f:4f:c3:68:b2:af:76:e3:3b:a6:fe:d1:
                    af:ad:fc:0e:1c:a4:a8:11:69:57:84:c8:15:66:7e:
                    81:2c:ad:8c:97:27:7b:07:21:24:02:4c:6b:66:d9:
                    8f:c8:d2:eb:78:2c:77:8e:99:3a:1e:6f:49:6b:bc:
                    ac:d8:5f:32:52:c2:a9:1a:4b:43:44:fa:e3:4f:23:
                    ac:bc:f0:0a:2f:c2:84:b5:48:72:bb:5c:86:8b:c7:
                    c3:fa:ca:12:90:1b:59:bb:97:af:13:74:d5:32:8d:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:16:1D:8F:99:DE:C4:48:4A:E3:4C:36:70:85:69:C0:A8:AC:D1:6E
            X509v3 Authority Key Identifier:
                keyid:A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:72:09:3c:53:1f:e0:00:fe:f0:96:7f:f9:cc:ad:11:f2:6b:
         76:84:1c:24:ad:72:99:fd:94:3c:05:88:eb:c4:44:2c:85:a9:
         5c:9e:1e:ab:6b:3e:c8:92:6f:87:52:c8:ee:98:af:7f:3e:68:
         47:54:55:aa:75:5a:98:46:c2:8a:1d:af:0a:08:3a:3e:06:ce:
         ac:1f:68:70:12:00:61:47:39:8e:fa:2d:fa:f1:32:09:ad:e4:
         06:83:6c:ee:e4:94:f1:33:c6:55:57:ca:21:0f:bd:eb:3c:c1:
         95:af:57:49:c8:0e:50:93:54:b8:ba:0d:44:77:ad:85:c3:7c:
         22:c8:6c:b4:6a:3d:86:c5:e8:f6:84:a9:00:b5:1e:d9:5a:44:
         d6:40:f4:78:ee:2f:03:64:98:84:c7:4d:8a:d1:bc:67:40:3b:
         a2:de:82:80:f6:36:28:a8:f1:f4:cc:c7:44:00:ea:85:8d:c1:
         b4:d3:dd:5c:79:f9:c0:11:40:42:d8:4f:0c:77:4a:c5:9d:16:
         eb:9f:28:9e:c4:be:53:54:dd:77:3a:bf:0e:56:b6:e8:2d:81:
         a9:eb:c9:8c:bb:3a:fe:d5:a5:f3:1d:20:15:ef:d3:cc:34:86:
         12:c1:c9:b4:93:11:29:15:0a:6d:f1:b8:78:d6:aa:9d:cf:1f:
         de:13:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:34 2026 by rpki-client