Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File:                     Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier:          KvQPL4HHSZL2FCCR2CwDWG7MfMtVcZAGA7Dh6TQxYtc=
Subject key identifier:   61:97:D8:B3:B1:F6:26:86:B7:3D:30:AF:1E:A1:D7:AB:D9:3D:A1:5B
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer:       /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial:       03E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number:          03DA
Signing time:             Mon 27 Jul 2026 01:17:31 +0000
Manifest this update:     Mon 27 Jul 2026 01:17:31 +0000
Manifest next update:     Mon 03 Aug 2026 01:17:31 +0000
Files and hashes:         1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: xqqrwhgfMYiiLDUDq+N9sJQjVMJ0lECqx+Um52F2Fw0=)
                          2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: zU41dHVA7lg5HqNGf7meOX/A+lf9KSiIpMkJ1tgmeCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
        Validity
            Not Before: Jul 27 01:17:31 2026 GMT
            Not After : Aug  3 01:17:31 2026 GMT
        Subject: CN=6a66b1ab-f3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:42:c0:96:5c:39:77:b1:fe:4d:ca:f9:ae:
                    13:e9:93:71:ec:fd:3f:71:ba:97:67:9c:ad:7f:0e:
                    9d:95:30:ea:dd:b5:38:ee:d1:d8:a4:4f:c4:71:80:
                    c0:99:cc:43:06:27:0e:ed:af:e5:c6:ce:8f:d9:e5:
                    a3:e0:50:26:8c:2d:71:a4:7e:aa:47:fa:74:91:3c:
                    ca:66:07:9d:69:1b:b6:63:5f:d6:b7:ec:2a:a1:42:
                    7b:b5:a4:4d:6d:ee:30:cc:73:ca:78:73:be:31:7c:
                    89:08:a8:1b:90:f2:b6:9e:98:a7:6d:d1:d1:66:93:
                    0f:ee:a0:7f:df:e3:27:9c:63:59:07:c2:7f:af:91:
                    5a:82:32:3f:dc:bf:cc:66:a0:03:44:68:0d:fc:a1:
                    5a:39:d5:bd:7c:de:e4:f1:2b:a9:57:71:3e:b7:42:
                    a6:c8:dd:44:a8:05:f6:7b:da:3a:a1:51:5f:8c:e7:
                    50:fb:78:5b:12:03:7e:c0:87:eb:60:d9:f1:a3:01:
                    e3:78:c8:1e:b0:fe:91:ed:45:d2:d7:4e:80:54:3a:
                    47:a2:96:cc:27:aa:a5:59:e1:85:af:83:60:4d:34:
                    69:c2:3a:68:e7:43:af:25:60:28:27:63:fd:5a:66:
                    c4:ad:73:bd:10:f0:ae:ef:22:fc:a6:ad:f8:00:91:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:97:D8:B3:B1:F6:26:86:B7:3D:30:AF:1E:A1:D7:AB:D9:3D:A1:5B
            X509v3 Authority Key Identifier:
                keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:52:79:de:49:71:3c:5c:79:e5:9e:8e:0e:68:0e:0b:40:99:
         e9:f4:75:b4:46:3c:d0:b1:7a:04:4d:2d:c6:ee:2d:bd:7d:e8:
         d6:1a:e9:d4:b3:4e:b8:ef:c5:5c:1e:e1:f9:a4:44:80:b4:cd:
         66:2e:06:e0:8f:23:16:cf:b9:36:48:ed:08:d9:5b:f3:7f:7d:
         b6:11:70:eb:5f:fd:65:20:54:c2:95:a7:31:a4:2d:10:c6:23:
         e1:0a:7c:25:02:ed:70:96:bc:c7:78:ff:c6:a4:da:ee:de:d8:
         bf:4f:c6:df:b7:ee:32:af:70:59:c6:db:cc:91:6c:ee:a0:87:
         46:c8:d9:f5:5c:04:cd:02:9f:a6:e7:70:e0:5f:58:39:fa:22:
         3b:21:7b:df:0e:06:ad:d8:15:85:45:bc:92:8c:a7:04:c9:31:
         ce:5d:c4:3b:65:f6:c3:1c:b0:c9:c7:ce:30:11:d9:01:ed:f3:
         f4:80:d2:3a:53:66:93:7a:76:25:4f:cb:e9:7d:83:4c:60:4d:
         80:1d:c6:c8:9e:af:47:50:62:e9:e7:34:66:35:12:b9:5c:cb:
         1f:b3:95:7f:ad:79:0d:d7:e0:0c:ce:8f:65:de:40:3c:74:be:
         22:62:21:c2:a3:86:cb:c3:3c:ed:65:7b:36:32:c0:28:ba:1e:
         c0:d1:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:50:20 2026 by rpki-client