Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
File:                     OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft (raw, json)
Hash identifier:          BwZfzVWowvqddUZmT9DBGYG33L7kMCdToZl6S9ELg2w=
Subject key identifier:   37:50:E1:7D:DF:4E:B4:31:7C:0B:A3:49:13:01:EF:FE:DB:20:C8:40
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Certificate issuer:       /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
Manifest number:          010F
Signing time:             Mon 27 Jul 2026 08:10:55 +0000
Manifest this update:     Mon 27 Jul 2026 08:10:54 +0000
Manifest next update:     Mon 03 Aug 2026 08:10:54 +0000
Files and hashes:         1: OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl (hash: oWpfwj5z3wMOYZalUGdSx11QcY7aC+utFcNeQNvhH0k=)
                          2: 41C8C708244111F1AF80D04DBB833773.roa (hash: P0OVA8RnrCkxwGNC5Oj/FAk/vhkA7eOmVQFaY4OMLYg=)
                          3: D759EECE244011F1B0BBBC37BB833773.roa (hash: 4ZLnEVH62B/fFZNl3E3aTQ7rJ1PwOzf217E+4KcGPOw=)
                          4: 54DA33D2FB2E11EFB488A95EC4F9AE02.roa (hash: lVJ/wAuLoxmXnwU3EkGNm9UUsAUB6qqvPi8MZYUo1FY=)
                          5: 553798E2FB2E11EFB488A95EC4F9AE02.roa (hash: aNrWLrutR5ArzXGRsTtMLurkk5UM/Q77zEZqj2DNM6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
                          rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
        Validity
            Not Before: Jul 27 08:10:54 2026 GMT
            Not After : Aug  3 08:10:54 2026 GMT
        Subject: CN=6a67128f-0684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:1f:ae:da:e8:1d:96:2b:bf:e3:00:3f:61:
                    11:23:42:57:b6:c5:25:1c:fe:f2:d2:fe:d1:e4:6a:
                    14:3f:7e:38:0a:8b:7c:c4:dc:d3:35:6f:d6:ec:cd:
                    38:91:c6:cd:f1:7b:f9:d8:5b:0e:e2:72:4a:8a:a5:
                    ad:bf:21:70:40:86:d0:c6:27:5a:6f:88:b6:3b:a4:
                    99:8f:3d:5a:93:ef:a0:ce:c0:42:4f:66:50:fb:f2:
                    c6:5d:17:a0:d1:ef:84:95:ef:b1:b9:37:5d:1c:59:
                    06:fb:6d:a9:42:e3:61:f7:2f:8c:65:95:74:78:d5:
                    17:62:b7:44:a3:32:ad:9f:83:a1:a3:60:87:64:46:
                    c9:09:5a:35:85:e2:1a:09:d2:21:70:17:1b:81:73:
                    08:53:bf:60:cc:c8:0a:e9:54:c5:5b:c7:b5:16:03:
                    a6:8a:15:61:f4:0c:6e:22:d0:e4:64:14:a0:51:12:
                    bb:71:04:f2:e3:03:d8:2a:a5:b2:b6:31:7f:f3:03:
                    2d:9e:5c:a9:83:5b:7c:69:97:c2:ba:a3:12:89:1d:
                    87:af:93:7d:65:6a:7b:c5:95:4c:88:d3:3b:c1:6a:
                    2a:d7:ae:8d:99:d6:5e:4d:36:ed:b7:24:62:d6:ef:
                    eb:15:f3:2b:81:36:96:77:11:a1:a0:a1:ef:d2:92:
                    75:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:E1:7D:DF:4E:B4:31:7C:0B:A3:49:13:01:EF:FE:DB:20:C8:40
            X509v3 Authority Key Identifier:
                keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:85:93:44:7d:cd:a8:b5:2b:be:fb:d2:92:ed:25:0e:2f:
         df:6e:0a:2e:c4:69:7a:5c:71:ec:82:a5:c5:01:79:e1:ba:84:
         f4:3f:af:cc:53:01:b6:06:f1:a8:76:07:e1:01:eb:b0:26:ba:
         5d:cc:cd:51:22:25:db:ba:fc:30:09:85:18:0b:1c:38:75:cc:
         c9:d6:51:90:88:7f:3b:a2:97:7a:c1:20:39:4f:31:8b:4a:18:
         01:5f:38:60:d9:20:a0:8d:66:0d:3b:a4:14:d9:77:3e:97:24:
         e3:00:f2:b2:bc:de:5d:64:db:7c:d7:1b:da:a3:82:6d:9a:e5:
         ae:46:3b:1b:f9:4e:f3:ef:b3:b8:5d:b5:fe:ad:65:fc:b8:33:
         2b:ac:54:ba:53:28:e9:40:1f:60:b3:79:68:d4:d1:f9:ec:0b:
         23:9c:7c:4f:44:c7:68:4e:5c:a9:64:21:cf:9f:d3:de:2d:92:
         da:1f:08:a9:a4:24:a6:c8:17:63:21:9e:05:67:38:cb:32:6e:
         87:48:dd:05:52:03:ed:de:cf:15:61:9b:98:80:5f:01:56:88:
         4e:dc:02:ba:7e:52:c4:92:59:ca:68:a9:20:54:59:e0:70:ab:
         ff:b1:9a:30:aa:3d:81:3f:65:10:f3:94:ae:d7:02:56:bb:07:
         45:9f:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:31 2026 by rpki-client