Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
File:                     khO1BHpA8jx8YASA5tqnoc9_oug.mft (raw, json)
Hash identifier:          q8l+SGNbJOA7ImlZT670//eQNCSBAbJlwuLFJbE/WQI=
Subject key identifier:   9C:87:1C:50:EE:AD:DD:A8:3F:32:AF:10:F6:88:9B:20:1A:FA:81:A7
Authority key identifier: 92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8
Certificate issuer:       /CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
Manifest number:          021B
Signing time:             Mon 27 Jul 2026 04:22:45 +0000
Manifest this update:     Mon 27 Jul 2026 04:22:45 +0000
Manifest next update:     Mon 03 Aug 2026 04:22:45 +0000
Files and hashes:         1: khO1BHpA8jx8YASA5tqnoc9_oug.crl (hash: EHk5xmSNZ/DILd7Los6YaohpjKFay5AMIfx1HOusivo=)
                          2: 4E18682450A911EEA39AAE41C4F9AE02.roa (hash: 1TmegfXL7CHMVE3+A+CZbSuJIC3tkud4zJDxKyv9h1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl
                          rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91435F3, serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
        Validity
            Not Before: Jul 27 04:22:45 2026 GMT
            Not After : Aug  3 04:22:45 2026 GMT
        Subject: CN=6a66dd15-458e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:2e:ce:52:13:bc:98:bb:71:49:03:06:cd:
                    eb:59:ce:2c:63:4a:80:76:59:fe:0a:85:51:cb:f6:
                    56:d1:b8:69:0e:b1:b5:a6:e8:fc:06:f5:d9:98:51:
                    4a:9e:88:cd:4c:40:1e:68:14:4e:20:3c:c7:66:31:
                    03:d9:2d:57:95:70:6c:8e:0b:6e:70:ac:3a:01:31:
                    b7:39:8f:28:d0:7c:99:51:f7:15:5b:7a:5b:f0:c3:
                    f6:fc:86:14:8e:31:13:c8:2a:4d:56:37:4a:83:fb:
                    69:88:bb:6f:b7:23:bd:f5:2e:6c:51:b4:c0:b7:af:
                    76:42:0e:1f:f6:6b:bf:78:b5:e2:db:d7:e2:2e:2c:
                    7a:5e:6f:1b:b2:06:14:0f:03:a7:72:10:4a:5d:b3:
                    10:8c:33:ef:fb:d5:f6:09:f3:7d:35:94:b3:16:fa:
                    6c:c5:e5:41:e7:be:3c:b2:fd:d4:b6:cb:7f:49:a1:
                    fc:84:bc:d5:3b:42:02:5c:1f:55:7d:eb:f5:d2:d1:
                    f4:ab:f1:65:2e:21:6b:37:6d:b6:2f:b8:fd:20:08:
                    8e:4f:27:14:3f:fe:4c:b3:ae:e8:a9:7a:3e:d2:4c:
                    b1:7f:9d:2b:f6:0f:ee:18:3b:a1:13:16:6e:84:5a:
                    d6:a1:a3:9f:de:8f:76:87:c7:79:f8:dc:0f:4d:ea:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:87:1C:50:EE:AD:DD:A8:3F:32:AF:10:F6:88:9B:20:1A:FA:81:A7
            X509v3 Authority Key Identifier:
                keyid:92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:13:e8:12:07:a3:92:2e:ae:ec:56:39:d9:b9:9d:1f:9c:c9:
         62:d0:5f:21:a0:bd:39:f8:15:b2:b2:5b:0d:da:56:3c:1a:f3:
         06:6d:e6:49:bd:79:56:e1:dd:68:87:81:2d:da:45:a2:15:59:
         70:7e:3f:5e:c6:ba:78:2c:0a:39:7b:7f:0f:4f:27:f1:37:7e:
         12:63:3c:05:25:f1:6b:f5:5c:7b:6e:62:1e:2b:8f:f6:1a:9e:
         dc:3b:ae:41:d0:7b:bd:0a:40:fa:be:26:9b:a5:5d:c8:61:5e:
         04:26:b0:2b:74:1f:57:bb:b2:d2:fc:29:e7:f8:64:75:e3:a1:
         3c:ae:de:34:af:e3:b7:ca:10:07:05:e5:f5:6b:fb:8a:af:6e:
         4c:21:60:09:d9:c6:fb:35:2b:92:d0:80:92:de:8d:70:d7:fb:
         4d:e2:8b:68:3d:b9:52:12:ba:42:95:cf:36:f7:4e:1d:9a:38:
         80:54:13:a6:75:24:0c:a9:17:5d:f7:d4:47:06:2e:4f:61:45:
         0c:c7:0e:b4:7b:46:c1:03:18:5c:c5:a7:0b:39:3a:a2:7d:b9:
         54:47:52:7d:15:2f:a2:1e:c3:5e:e5:8c:9d:61:4c:64:05:23:
         c2:01:13:e1:f7:56:b1:8e:71:1d:de:9e:86:f1:1f:21:6a:55:
         96:70:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:56:54 2026 by rpki-client