Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File:                     Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier:          OBoqvXT9v9E13E1YfPmPUDM8XhBEbygEyVGDhuXk1z0=
Subject key identifier:   43:76:FD:3E:3F:EE:5C:2D:51:2C:57:9E:65:45:0D:92:FE:D8:9A:D6
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer:       /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number:          C2
Signing time:             Mon 27 Jul 2026 09:01:48 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:47 +0000
Manifest next update:     Mon 03 Aug 2026 09:01:47 +0000
Files and hashes:         1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: ZhLa7cohhOmS1JLJb1kWsoieeDyksG/gyZtWvpo1mCU=)
                          2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: rWKDZcXDRvxkeevoTmv1zvdbGFQP1gVAwd/TCsKJ1Qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
                          rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
        Validity
            Not Before: Jul 27 09:01:47 2026 GMT
            Not After : Aug  3 09:01:47 2026 GMT
        Subject: CN=6a671e7c-d202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:71:5b:dd:b1:5e:e2:0d:33:1a:b4:1a:49:
                    35:77:70:39:ea:49:cf:cf:a7:ec:79:3f:5f:50:a8:
                    3a:c5:4a:50:25:70:5b:ac:40:4e:4f:f2:2b:12:64:
                    60:aa:f4:18:fa:9e:d8:02:60:a0:9c:0e:52:41:9d:
                    f6:a0:6e:90:e2:cf:9e:2b:aa:06:1b:5d:7a:07:b2:
                    67:23:a4:21:47:db:b6:49:86:e9:d7:f4:af:6b:5e:
                    e2:2e:77:dd:1f:ca:5d:ab:1b:d9:fd:a3:2d:1b:c8:
                    24:3d:f4:f8:be:42:f8:d1:63:71:02:91:13:a6:26:
                    d0:e2:03:bd:72:ce:19:1b:0f:2e:e8:5a:95:90:41:
                    e7:25:07:23:35:af:57:82:cf:a0:d1:79:32:df:3c:
                    86:3b:e0:0e:98:88:ac:08:ca:6a:9d:41:c4:1c:bf:
                    e2:b3:33:2b:94:26:87:d7:18:4a:dd:68:1a:e6:fb:
                    fe:b8:cb:ac:8e:8a:9a:b3:1d:e0:d4:d3:1e:bb:6a:
                    5a:f7:fa:a2:0f:ef:d5:d8:93:58:d9:52:c6:53:b7:
                    50:2f:15:8b:95:16:40:87:19:35:6e:30:d2:68:6a:
                    16:47:f9:f6:0b:4f:da:8e:a6:27:ea:2d:b3:b6:4f:
                    e3:41:ba:15:d8:c0:cf:ea:12:84:62:7e:37:6a:a8:
                    64:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:76:FD:3E:3F:EE:5C:2D:51:2C:57:9E:65:45:0D:92:FE:D8:9A:D6
            X509v3 Authority Key Identifier:
                keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1b:51:07:fb:7a:d8:16:7b:b9:c5:77:b1:01:9a:3e:5f:67:
         d7:ab:38:2d:7c:7f:80:a9:53:a1:59:28:e2:98:f9:a5:32:f9:
         cf:05:57:91:95:15:89:3e:2c:b7:39:44:8e:44:b8:e0:a4:6c:
         81:2c:a3:a3:6f:ab:34:22:da:8e:81:b8:c9:57:c9:63:31:95:
         cf:32:bc:6a:ad:6d:f3:9c:73:6c:07:1c:3c:44:b7:51:ef:10:
         7a:ba:6d:3b:ff:4b:56:bc:b0:27:70:f0:92:94:03:ad:25:53:
         ca:4c:4b:bd:c3:0f:b2:5f:00:7d:58:3f:7b:31:a3:e7:48:5c:
         58:da:6b:6d:1c:f3:14:d9:bd:21:51:50:e8:81:63:d3:ab:67:
         e8:10:6a:c6:c0:83:53:6a:84:3c:46:9c:4b:e6:58:cb:0f:bc:
         2e:ad:e0:ed:1c:50:58:f4:9f:85:71:a0:6c:2e:9e:4e:a6:ad:
         b8:42:14:ad:ce:97:74:f9:cd:57:83:16:38:1c:46:7e:37:e0:
         a8:80:90:06:68:d4:63:d4:1c:a7:cc:66:34:92:f3:c7:90:7b:
         73:83:0b:db:23:7b:f7:0e:a0:63:e8:0b:e1:a2:ab:10:45:f1:
         c5:74:a1:07:23:1d:07:4a:87:67:bd:08:9a:7b:6f:5d:37:b3:
         54:bd:3e:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdDRDUxMTAvBgNVBAUTKDNBQ0Y0NDVDRkNFQ0ZCQjI5MTNCMzQ3RDY3QTgyOEUw
NDBBMTVBMUQwHhcNMjYwNzI3MDkwMTQ3WhcNMjYwODAzMDkwMTQ3WjAYMRYwFAYD
VQQDEw02YTY3MWU3Yy1kMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvK1xW92xXuINMxq0Gkk1d3A56knPz6fseT9fUKg6xUpQJXBbrEBOT/IrEmRg
qvQY+p7YAmCgnA5SQZ32oG6Q4s+eK6oGG116B7JnI6QhR9u2SYbp1/Sva17iLnfd
H8pdqxvZ/aMtG8gkPfT4vkL40WNxApETpibQ4gO9cs4ZGw8u6FqVkEHnJQcjNa9X
gs+g0Xky3zyGO+AOmIisCMpqnUHEHL/iszMrlCaH1xhK3Wga5vv+uMusjoqasx3g
1NMeu2pa9/qiD+/V2JNY2VLGU7dQLxWLlRZAhxk1bjDSaGoWR/n2C0/ajqYn6i2z
tk/jQboV2MDP6hKEYn43aqhkVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEN2/T4/
7lwtUSxXnmVFDZL+2JrWMB8GA1UdIwQYMBaAFDrPRFz87PuykTs0fWeoKOBAoVod
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NENS81REI3NEIwQTVG
QTgxMUYwQjU5NzhDMkNDNEY5QUUwMi9PczlFWFB6cy03S1JPelI5WjZnbzRFQ2hX
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0NENS81REI3NEIwQTVGQTgxMUYwQjU5NzhDMkNDNEY5QUUwMi9PczlFWFB6cy03
S1JPelI5WjZnbzRFQ2hXaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKhtRB/t62BZ7ucV3sQGaPl9n16s4LXx/gKlToVko4pj5pTL5zwVXkZUViT4s
tzlEjkS44KRsgSyjo2+rNCLajoG4yVfJYzGVzzK8aq1t85xzbAccPES3Ue8Qerpt
O/9LVrywJ3DwkpQDrSVTykxLvcMPsl8AfVg/ezGj50hcWNprbRzzFNm9IVFQ6IFj
06tn6BBqxsCDU2qEPEacS+ZYyw+8Lq3g7RxQWPSfhXGgbC6eTqatuEIUrc6XdPnN
V4MWOBxGfjfgqICQBmjUY9Qcp8xmNJLzx5B7c4ML2yN79w6gY+gL4aKrEEXxxXSh
ByMdB0qHZ70ImntvXTezVL0+3w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:03 2026 by rpki-client