Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
File:                     Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json)
Hash identifier:          OUQHMFjkRHS104CYkO7Pn22UcwSZeS7sutUpKxtM+c4=
Subject key identifier:   32:BC:81:E8:0A:33:68:AC:86:06:2C:FB:0B:31:64:FF:1F:BE:4C:AE
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
Manifest number:          01C1
Signing time:             Mon 27 Jul 2026 05:48:25 +0000
Manifest this update:     Mon 27 Jul 2026 05:48:24 +0000
Manifest next update:     Mon 03 Aug 2026 05:48:24 +0000
Files and hashes:         1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: SNT6n+DwF/RCIgFEr2ty7jdUofTo1fCwaObKJE5vsgg=)
                          2: B7B28B24B29611F091864D65C4F9AE02.roa (hash: 1Y5EWX2B5Sr7pLRnjhTyg4ghHXLoKpdO7vaR/h8E6x0=)
                          3: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: E5hqQqMyoQ9aOSGCT2wM7hBxXm+pQQiTCiLoJNmSSp0=)
                          4: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: Jul 27 05:48:24 2026 GMT
            Not After : Aug  3 05:48:24 2026 GMT
        Subject: CN=6a66f129-dcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ee:76:7f:a6:ab:73:b3:2c:b1:d7:36:81:f8:
                    1b:c7:9d:fa:ae:22:78:c3:f4:6b:d8:8e:3f:b7:f7:
                    ce:c3:84:2d:d9:ba:88:0a:8a:81:c9:a9:7e:b4:52:
                    69:74:df:97:da:14:c4:44:9c:d5:0a:a0:cd:14:cb:
                    56:a6:d8:c9:5d:4a:a5:a6:3a:28:76:cf:82:49:3c:
                    5e:a4:de:49:cc:69:0d:49:12:c4:04:c0:0e:03:f7:
                    b5:e7:55:d1:fe:60:1c:b2:33:49:48:82:1c:f2:f0:
                    a1:dd:0f:24:26:72:cd:f1:20:47:b6:4a:86:14:af:
                    12:35:df:d6:4c:b9:41:dc:2f:e2:45:f4:55:e2:62:
                    0b:c9:b8:fc:49:aa:0a:8a:36:12:5c:f2:47:44:9d:
                    df:12:82:5d:71:63:27:81:88:37:64:57:5f:fd:99:
                    06:14:8a:f9:32:5a:1f:d0:04:b3:3f:ea:ac:ab:95:
                    b0:c3:e3:6b:25:7f:b8:6d:45:7e:62:2a:77:f5:e1:
                    e1:85:c2:37:9f:18:98:ab:1d:a8:e8:ff:ba:cb:1a:
                    4f:a4:0a:9e:f4:24:78:68:83:9d:55:ec:e1:7b:bd:
                    d3:d6:93:94:47:31:2f:92:d7:0d:5b:a0:1b:54:fb:
                    ac:16:b2:77:9a:e4:18:48:2b:aa:51:d7:63:ff:62:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BC:81:E8:0A:33:68:AC:86:06:2C:FB:0B:31:64:FF:1F:BE:4C:AE
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:9c:42:d4:ba:c4:17:70:6e:1d:b3:12:47:3a:97:e9:f7:
         a3:52:d4:16:b2:a2:a7:0a:24:6e:d2:5b:5c:bb:49:5f:ee:b3:
         de:ce:5d:e3:30:8e:1f:95:1c:1c:38:4b:4e:89:8f:99:60:77:
         31:de:3e:2e:9f:08:61:09:77:e5:f1:e7:38:3a:5a:16:7e:c4:
         c4:82:08:c9:0b:f4:51:6f:33:cc:c5:37:ca:3a:c4:dd:b3:b4:
         50:0b:3d:45:b6:eb:fa:4e:03:40:dc:61:9a:02:e3:54:a1:7f:
         77:93:40:c1:54:cf:39:e9:96:48:98:aa:7b:57:ac:e4:99:85:
         57:05:fa:eb:16:53:57:d2:b2:2c:de:23:f5:bc:00:e8:fb:45:
         64:21:f8:7c:10:09:ff:e9:d2:7c:b6:10:7f:c7:33:78:8c:fa:
         3b:8e:13:94:9b:b5:20:14:cd:b3:9f:37:44:20:2d:12:00:0c:
         61:d5:c8:22:d3:54:6e:48:26:cc:87:dd:68:1e:cb:1a:2c:8f:
         ce:a0:38:5b:86:79:18:7b:82:db:dd:bc:fe:29:35:29:3a:41:
         6c:2e:62:63:d6:f8:c9:fe:58:f4:d3:2a:e8:ab:99:bb:a1:3c:
         42:37:2f:81:45:54:d6:e9:89:e8:67:b5:5c:86:3f:9e:7b:a8:
         37:75:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:40 2026 by rpki-client