Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912776C/FF267F04192211F1BB8230AD2A3D8C67/nOj26uvAFeASEXy18wJvt-bsrCQ.mft
File:                     nOj26uvAFeASEXy18wJvt-bsrCQ.mft (raw, json)
Hash identifier:          UWvv92jheAiolXN4GJygyFg0n7y6hxeN/Q+2+aeHR8Y=
Subject key identifier:   1E:46:52:87:79:65:42:07:32:BF:5C:82:E5:2A:F5:22:B7:B3:33:50
Authority key identifier: 9C:E8:F6:EA:EB:C0:15:E0:12:11:7C:B5:F3:02:6F:B7:E6:EC:AC:24
Certificate issuer:       /CN=A912776C/serialNumber=9CE8F6EAEBC015E012117CB5F3026FB7E6ECAC24
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOj26uvAFeASEXy18wJvt-bsrCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912776C/FF267F04192211F1BB8230AD2A3D8C67/nOj26uvAFeASEXy18wJvt-bsrCQ.mft
Manifest number:          4C
Signing time:             Mon 27 Jul 2026 10:41:03 +0000
Manifest this update:     Mon 27 Jul 2026 10:41:03 +0000
Manifest next update:     Mon 03 Aug 2026 10:41:03 +0000
Files and hashes:         1: nOj26uvAFeASEXy18wJvt-bsrCQ.crl (hash: liGmFoMFqbnz4zg2I5dX35yQOt3KcED08gY/X0iYLBE=)
                          2: 7C4E54F6192411F1B11FE4EA2B3D8C67.roa (hash: SVUMzQD2J7Ds3/fdbWCMMRzzcRYDu21whFGaoeL+UyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912776C/FF267F04192211F1BB8230AD2A3D8C67/nOj26uvAFeASEXy18wJvt-bsrCQ.crl
                          rsync://rpki.apnic.net/member_repository/A912776C/FF267F04192211F1BB8230AD2A3D8C67/nOj26uvAFeASEXy18wJvt-bsrCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOj26uvAFeASEXy18wJvt-bsrCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912776C, serialNumber=9CE8F6EAEBC015E012117CB5F3026FB7E6ECAC24
        Validity
            Not Before: Jul 27 10:41:03 2026 GMT
            Not After : Aug  3 10:41:03 2026 GMT
        Subject: CN=6a6735bf-8d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:ba:80:26:0e:52:b9:d3:de:ee:fc:34:e3:
                    30:51:26:d9:65:8b:6b:75:8b:a6:69:53:e1:5f:b6:
                    57:aa:74:b7:33:38:8b:77:66:d4:93:36:27:12:26:
                    c0:39:c4:23:44:5e:41:b5:39:b0:c7:4d:49:d1:d4:
                    7a:39:14:09:e1:16:af:6e:9c:07:76:a9:f4:5d:5f:
                    4b:98:6d:15:c1:8d:45:aa:ab:ed:9d:f3:be:0a:0e:
                    50:c4:43:35:07:ba:c8:7d:d1:19:6e:09:00:27:23:
                    a9:ed:05:d4:34:3e:ed:02:bf:5e:c6:db:b2:7f:d7:
                    62:87:e6:43:97:70:cc:f4:2b:29:6f:61:f8:49:b3:
                    4c:04:df:16:d9:97:8b:42:90:89:2e:b8:98:56:37:
                    57:7d:0d:4b:0a:4a:c3:58:99:3a:1d:8c:71:3d:c4:
                    77:47:a5:59:c1:41:f0:d0:0c:97:97:a0:ad:f4:38:
                    0a:ec:8a:84:d9:4d:4a:c2:a7:4c:37:ea:5a:f6:05:
                    43:9d:e4:dd:98:be:f0:f8:d3:64:33:7f:42:59:b3:
                    af:6d:18:25:7f:bd:c2:61:e9:34:66:eb:86:5f:44:
                    83:58:41:b1:e1:8e:b1:ed:e0:06:e2:57:14:83:ca:
                    6b:d5:fd:db:45:9f:71:4e:e0:a8:ad:3d:e7:14:a2:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:46:52:87:79:65:42:07:32:BF:5C:82:E5:2A:F5:22:B7:B3:33:50
            X509v3 Authority Key Identifier:
                keyid:9C:E8:F6:EA:EB:C0:15:E0:12:11:7C:B5:F3:02:6F:B7:E6:EC:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912776C/FF267F04192211F1BB8230AD2A3D8C67/nOj26uvAFeASEXy18wJvt-bsrCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOj26uvAFeASEXy18wJvt-bsrCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912776C/FF267F04192211F1BB8230AD2A3D8C67/nOj26uvAFeASEXy18wJvt-bsrCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e6:f1:e6:3f:55:ed:67:ef:26:86:20:8e:c3:e3:05:67:5f:
         2c:ea:43:0f:cd:d8:b6:41:33:e1:d2:03:04:45:a1:06:9d:48:
         85:65:9d:b3:d6:72:b0:cc:92:45:96:f1:4a:d9:23:ef:8e:6d:
         52:e7:6e:7d:4d:9f:e0:e5:09:c7:39:e4:97:9b:6b:9b:c0:c3:
         fd:42:59:e5:5d:a4:c0:6e:ce:ec:91:35:90:1c:bf:c9:fe:30:
         99:8a:52:08:83:b4:2c:2b:3d:ee:21:bd:8d:6c:d0:92:99:00:
         d9:89:cf:97:2c:cc:b9:0d:5f:70:aa:c5:0f:d1:14:8a:c5:f4:
         9a:28:4d:82:8a:ab:04:fd:e2:e4:66:a2:98:38:6c:89:be:f6:
         86:6d:a2:bd:67:9d:f8:7c:62:16:0e:00:27:be:47:1e:2b:94:
         dd:55:eb:e5:3e:f4:fd:f2:f2:d0:3f:d3:d7:8d:50:8f:29:d2:
         bb:9d:f4:dd:1c:01:79:2d:0f:0b:c5:55:fb:39:05:58:cb:c2:
         ac:b4:f5:97:a3:ca:2b:0b:da:27:0c:df:c9:d9:a6:29:e8:fd:
         45:fd:00:2a:f7:5b:c9:d9:21:3a:65:e8:76:3b:57:0c:05:4f:
         1e:cc:db:85:c0:6d:fa:20:18:b7:8f:65:4e:27:ca:f2:49:45:
         0d:a0:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:04 2026 by rpki-client