Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft
File:                     oC-hN36Jc9g06JmSEuwsVwlg380.mft (raw, json)
Hash identifier:          PKKTnvrv2kp7vI20vEJUyOMOJgLh7fbCLSxAi0zPdnU=
Subject key identifier:   39:E6:85:31:B9:D4:F1:3F:C0:DE:CD:63:60:5F:EE:37:6D:F0:E3:9A
Authority key identifier: A0:2F:A1:37:7E:89:73:D8:34:E8:99:92:12:EC:2C:57:09:60:DF:CD
Certificate issuer:       /CN=A912AF78/serialNumber=A02FA1377E8973D834E8999212EC2C570960DFCD
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft
Manifest number:          17
Signing time:             Mon 27 Jul 2026 11:23:48 +0000
Manifest this update:     Mon 27 Jul 2026 11:23:48 +0000
Manifest next update:     Mon 03 Aug 2026 11:23:48 +0000
Files and hashes:         1: oC-hN36Jc9g06JmSEuwsVwlg380.crl (hash: MNv1lKv82A06KY66jYaGz9tfV0j0eAfzEgs5FJoBGpQ=)
                          2: 92F6F8D0866A11F19ACF0A6359A30FBC.roa (hash: OxQYq5Pl6LLzBR7Hlyn/TUzcpXJUxM8IGIxor8rYXrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.crl
                          rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF78, serialNumber=A02FA1377E8973D834E8999212EC2C570960DFCD
        Validity
            Not Before: Jul 27 11:23:48 2026 GMT
            Not After : Aug  3 11:23:48 2026 GMT
        Subject: CN=6a673fc4-87b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:fd:92:d9:55:21:d8:3d:12:91:49:ea:2a:
                    73:a2:de:0b:66:6d:1f:05:34:5d:f5:92:61:72:47:
                    b0:2d:58:e1:8f:13:d9:3f:62:76:23:3c:d4:62:b2:
                    3b:29:e7:3c:78:95:9a:1a:f2:ee:c2:10:4d:03:9a:
                    99:d2:17:2a:58:09:5f:59:75:50:2c:ec:d9:e3:61:
                    f6:72:6a:cd:cd:ae:5e:0c:37:3e:d1:56:74:d2:ab:
                    b3:06:04:ad:49:2a:10:84:1b:81:c3:81:4a:1b:f7:
                    58:54:2d:74:fd:bd:e7:eb:3e:23:e6:e8:f5:ac:f0:
                    6e:58:4c:16:e6:cb:ab:fb:38:4c:0a:3d:e2:11:23:
                    d0:de:d2:de:14:96:86:b0:fa:0a:6b:f6:6c:d9:0e:
                    de:0f:87:6a:b3:a5:38:5a:9f:95:e6:7c:98:dd:e9:
                    ef:09:9f:ce:76:5a:c9:d5:d5:b4:94:ff:fe:b2:4e:
                    70:b3:41:ea:a2:a4:92:29:50:d2:19:7c:d2:72:e2:
                    64:2b:09:fb:ed:d9:b5:56:49:08:9a:02:8b:3f:f0:
                    e7:24:46:a5:c3:82:c3:6b:e2:05:e1:2a:b5:c1:4c:
                    5d:c9:76:c5:da:e1:82:de:53:df:bb:14:e2:f7:d2:
                    e6:60:c8:7a:ee:88:ef:81:dd:29:bb:ce:98:e3:93:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E6:85:31:B9:D4:F1:3F:C0:DE:CD:63:60:5F:EE:37:6D:F0:E3:9A
            X509v3 Authority Key Identifier:
                keyid:A0:2F:A1:37:7E:89:73:D8:34:E8:99:92:12:EC:2C:57:09:60:DF:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:35:33:a6:20:26:e4:9a:07:b8:d1:5a:f8:f3:2a:89:57:a9:
         09:dc:db:54:56:db:0b:fc:83:81:6b:7b:b4:fd:33:68:aa:84:
         c0:84:43:11:93:68:82:d1:0b:94:64:bc:92:bb:41:1a:c8:c0:
         97:e3:53:58:c1:f8:00:d9:4b:fc:c7:40:54:46:37:86:23:8f:
         c6:62:3f:94:47:8e:2c:cf:56:9c:8d:43:ea:b2:bc:21:69:b9:
         01:73:e0:38:08:47:05:24:83:8d:bb:ae:73:ea:e8:82:8a:c6:
         57:a3:e2:64:41:4a:de:0a:1b:0a:fc:7a:ea:f6:b3:27:cb:31:
         4b:32:89:82:e4:d4:88:85:76:fa:ed:bb:ad:cd:ae:d9:89:34:
         4e:b0:19:a0:00:ff:b1:1c:d7:f2:12:74:65:56:46:4a:12:46:
         f9:f2:9c:f3:32:df:f4:62:4f:62:62:89:de:5e:d0:e8:66:08:
         2c:ea:e8:79:5e:7a:0d:77:4a:c8:c0:15:06:f0:05:d7:44:41:
         2e:7e:35:20:eb:ea:66:fc:4a:a5:2a:e9:9f:3b:00:bf:03:21:
         f6:de:5f:4c:80:ba:39:f4:3b:1f:5b:43:2a:cb:02:99:99:6d:
         9f:74:74:83:a9:fe:18:5e:b1:65:50:c0:cc:3f:85:7f:93:b6:
         54:2a:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:46:23 2026 by rpki-client