Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
File:                     OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json)
Hash identifier:          qyrv8Z2RV3R6kjOkp00Pgukked0t6UR+QLgmvQBGC+0=
Subject key identifier:   3E:08:5C:5F:20:16:FE:8D:1C:02:DC:A3:49:BA:55:86:EE:4A:22:FD
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Certificate issuer:       /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial:       0D93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
Manifest number:          0D60
Signing time:             Tue 28 Jul 2026 18:13:45 +0000
Manifest this update:     Tue 28 Jul 2026 18:13:45 +0000
Manifest next update:     Tue 04 Aug 2026 18:13:45 +0000
Files and hashes:         1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: eOAU7K08bZN0jYmIn4544jzKsdozko6ZTaO1R1rq9Bs=)
                          2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: 742WnLRxRAdtV7KzoHDoGL/kuH4GkN1lYPhgQ1RkcrQ=)
                          3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: gsMKozdipIVu4yCNIKSgaJ/LpxKdahpbHV6vCqtL14U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
                          rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
        Validity
            Not Before: Jul 28 18:13:45 2026 GMT
            Not After : Aug  4 18:13:45 2026 GMT
        Subject: CN=6a68f159-c2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:1b:5c:7a:73:98:28:11:fd:fc:72:6d:f4:
                    67:89:3f:62:55:ee:61:ef:64:bf:6e:c6:6d:e4:77:
                    39:76:28:13:14:bd:ac:10:f6:9b:f4:f9:9c:7d:19:
                    2e:4b:72:2f:84:3a:d2:b4:c2:b9:04:89:81:c8:21:
                    d7:ba:11:8b:fa:19:a7:68:64:90:23:d2:b6:6d:f6:
                    fe:76:81:38:7f:73:e0:e4:4c:46:e2:8d:a9:39:a1:
                    44:b0:82:e2:76:e1:8f:ed:da:a4:7e:4c:09:31:c3:
                    93:b9:4c:e3:60:b6:c0:da:c9:46:5e:bd:89:a7:34:
                    00:54:c3:e5:35:3f:c7:88:59:a0:25:a4:51:b6:54:
                    41:84:47:95:8b:61:bb:50:0e:84:f0:73:fe:4d:b7:
                    ec:64:e4:d1:c7:92:bb:2f:c9:5d:e4:f6:e1:fd:5f:
                    e2:8f:91:3f:57:b9:e1:d6:f4:e4:bd:57:4a:59:3e:
                    5b:82:17:74:e0:5c:4b:89:26:7f:5b:7a:02:4d:57:
                    6b:d7:d4:56:af:a5:41:54:16:1f:47:14:3a:34:72:
                    77:4a:42:96:7a:a2:a5:23:70:50:9a:51:7c:b8:1f:
                    82:68:29:28:5f:bc:f5:68:16:f7:47:17:6b:d7:b1:
                    06:fc:be:68:8d:c7:79:0d:e9:8b:f6:3b:af:f3:f8:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:08:5C:5F:20:16:FE:8D:1C:02:DC:A3:49:BA:55:86:EE:4A:22:FD
            X509v3 Authority Key Identifier:
                keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:5a:47:40:2d:8a:50:2b:52:75:50:97:8f:e4:8e:73:f3:
         b4:95:14:97:48:1b:4e:2f:db:da:c0:a9:1b:70:ab:b2:85:77:
         68:36:48:1c:d8:c2:1b:9f:fc:b4:e1:46:d7:63:fb:1b:94:a7:
         39:c9:05:11:ee:73:3d:87:f9:30:e3:f2:4b:bb:2d:2d:dc:e5:
         5b:bf:78:9b:92:bc:3b:ce:4b:c3:e8:88:0c:64:f3:6a:64:d0:
         ff:3a:cb:46:fd:14:2c:9b:a9:19:1a:8f:5a:8d:93:7b:c4:33:
         b3:52:cb:4d:7a:ac:10:36:26:74:b1:55:df:a0:46:b3:48:f4:
         ee:3c:f1:2a:09:d3:63:2d:88:e6:8a:13:91:33:ec:07:ac:8d:
         05:c7:42:bf:d2:56:dc:d0:1c:21:f9:44:b3:ac:2f:a8:4a:aa:
         83:89:87:25:eb:de:7a:70:19:69:21:48:4c:01:2e:e1:f1:fd:
         55:49:7a:c1:22:75:80:b2:b7:58:45:13:af:d7:04:59:8d:dd:
         a9:d1:42:ff:fd:a6:a2:0f:d5:fb:6f:53:5a:6a:a0:15:a3:24:
         f5:52:f9:b4:ae:b4:15:56:93:6c:ba:ff:9d:57:be:73:1a:ad:
         b2:b7:79:14:5d:e4:9a:99:db:ba:39:95:cf:f3:9d:c1:03:1d:
         e4:2a:cf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:59 2026 by rpki-client