Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
File:                     OAHjYU99QEcCrkIssnnlHcnRTKI.mft (raw, json)
Hash identifier:          t3LZdd2NFMxBdI43mIYvoFbuSZzsHJ9x9W+c69OHPkM=
Subject key identifier:   D3:36:96:15:8D:AB:B5:D6:E3:16:14:E1:3A:24:5D:D9:DB:2E:BE:FA
Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
Certificate issuer:       /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Certificate serial:       08EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
Manifest number:          08E6
Signing time:             Tue 28 Jul 2026 20:45:44 +0000
Manifest this update:     Tue 28 Jul 2026 20:45:44 +0000
Manifest next update:     Tue 04 Aug 2026 20:45:44 +0000
Files and hashes:         1: OAHjYU99QEcCrkIssnnlHcnRTKI.crl (hash: FGrFvy74cuMzYbrUCv+cyAwhmbizj/lin7nZDTtGf+U=)
                          2: 4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (hash: 4i5AOZWsffBcYvR2KypBRmQ6TWACokAcBSGDEbGPTU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
                          rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
        Validity
            Not Before: Jul 28 20:45:44 2026 GMT
            Not After : Aug  4 20:45:44 2026 GMT
        Subject: CN=6a6914f8-38e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:18:57:bc:e0:b7:8c:fe:87:10:8b:d6:68:
                    3e:be:2a:77:dc:00:3c:4d:b9:10:4c:ed:34:b8:e4:
                    8f:e4:eb:ce:06:7b:86:0f:ff:f2:c1:43:12:2a:84:
                    62:71:b9:39:c4:de:5b:88:d6:3b:fd:51:58:ae:19:
                    30:e0:80:6a:66:5d:92:af:01:30:ee:ba:94:ad:5a:
                    6c:ab:e3:a6:a0:ab:a2:a5:72:c8:e3:fb:d1:90:70:
                    ad:2d:a0:8e:be:7d:9d:b6:3a:b3:9e:e1:1d:8f:a7:
                    fb:d0:2c:d6:89:f8:7f:77:a6:79:b0:b1:d6:06:ce:
                    2b:1b:2a:88:33:64:35:c7:26:b7:01:b2:45:64:ba:
                    63:f6:83:c7:4e:3c:60:61:61:15:19:80:09:5a:33:
                    53:83:64:0a:41:ab:80:dc:54:9d:f0:df:b4:14:de:
                    f1:7f:b8:a2:74:13:8b:db:00:c9:cc:d5:c6:a2:bf:
                    14:66:31:4c:0f:83:b5:81:fb:5e:58:b2:a1:d2:f8:
                    b2:bf:65:df:24:fb:f9:08:4d:02:8a:52:a3:22:cd:
                    37:03:99:cb:c4:1c:e2:bb:bd:03:d6:25:3a:2a:56:
                    58:41:3a:ec:c8:3f:bf:f0:ed:01:bc:3a:bc:67:91:
                    43:17:4f:76:23:b2:2d:24:57:1f:ea:be:4e:98:ae:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:36:96:15:8D:AB:B5:D6:E3:16:14:E1:3A:24:5D:D9:DB:2E:BE:FA
            X509v3 Authority Key Identifier:
                keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b6:e4:dc:70:1d:7a:36:7f:8c:02:dc:09:de:9f:cb:64:4e:
         84:f7:0a:38:78:47:17:77:29:1b:66:08:2b:8c:76:4f:c1:43:
         7e:ab:f5:39:3f:4b:75:4d:9d:12:58:26:5c:77:a6:fb:f4:1d:
         ab:f1:84:24:3a:15:10:a4:a8:3b:61:d5:8e:b7:01:0b:51:c0:
         fc:b0:c6:5e:a3:b0:b9:d1:7c:d8:8f:f7:82:1b:dd:71:35:cb:
         7c:87:ac:94:1b:64:5b:14:fd:16:ec:8d:d6:54:71:c6:a4:a9:
         89:fb:b5:d9:2c:d9:32:77:4e:3d:72:0e:4e:0c:10:2a:68:0f:
         a1:b8:02:48:ae:10:23:9e:ef:4d:cf:27:96:34:bb:a7:da:89:
         a0:bd:3c:bf:93:4b:96:3e:fd:69:e7:17:12:d3:b6:6e:17:d7:
         85:7e:da:27:cf:55:3c:ac:83:28:92:7a:48:27:71:15:fa:08:
         58:e4:e5:a0:b3:6a:60:de:e6:85:87:3e:82:35:14:f7:59:34:
         54:24:5e:de:3a:6e:27:40:24:e2:33:b3:ac:0f:3f:35:4b:67:
         b4:33:8f:ef:e7:26:e1:bb:70:b5:ad:91:93:90:91:83:88:d8:
         b0:c9:95:34:84:9c:f5:f7:62:93:5c:bf:91:a5:0b:4e:36:3f:
         47:b1:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 21:56:39 2026 by rpki-client