Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
File:                     ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft (raw, json)
Hash identifier:          c1HAQ/x4bOUdU0Sdo2o0oZoX++JBH/wBwUZrNmj/+/o=
Subject key identifier:   18:70:79:F9:76:0F:D3:86:05:F8:B6:19:69:C1:82:74:50:32:E1:16
Authority key identifier: 39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93
Certificate issuer:       /CN=A914CCC5/serialNumber=3911E1EFB02B036F835BF658E136601A67421693
Certificate serial:       083F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
Manifest number:          0834
Signing time:             Sun 26 Jul 2026 21:44:01 +0000
Manifest this update:     Sun 26 Jul 2026 21:44:00 +0000
Manifest next update:     Sun 02 Aug 2026 21:44:00 +0000
Files and hashes:         1: ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl (hash: WGXV91FBBAgtWSXt2Fso4gdFxPRSpjhyPCOQKUVM+XU=)
                          2: 94CB63BC241E11EB985FC048C4F9AE02.roa (hash: xBMELOpqJ4lnqq47hcS7bDXF3hPxxlzBtOSvLVgcPrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl
                          rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CCC5, serialNumber=3911E1EFB02B036F835BF658E136601A67421693
        Validity
            Not Before: Jul 26 21:44:00 2026 GMT
            Not After : Aug  2 21:44:00 2026 GMT
        Subject: CN=6a667fa1-544c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:e9:50:37:a6:fc:1f:d2:16:08:07:cb:9a:
                    ac:3c:7b:b4:67:4a:ee:7d:e1:7a:b0:7b:4f:72:48:
                    54:07:33:c2:de:c5:4c:73:38:34:14:ac:aa:bd:df:
                    fd:00:eb:5e:08:95:d0:52:c8:aa:6a:ef:6f:38:a8:
                    cb:05:a1:60:fa:f8:5a:da:90:59:6e:84:98:65:57:
                    53:0f:01:d6:a9:04:19:6f:bd:e5:80:3a:28:26:3c:
                    6a:28:1f:c6:bf:7c:c9:a4:d0:42:c8:de:45:84:b8:
                    a9:4a:15:d2:6f:a0:1f:b9:e1:4f:4f:33:c1:6b:6b:
                    05:7b:6c:a9:50:5d:7b:5f:63:ac:51:5b:6a:25:10:
                    a7:38:9e:9d:e2:40:18:d5:82:19:d3:a9:34:98:24:
                    72:e1:35:84:bc:82:a2:88:f7:04:4b:9f:96:1a:70:
                    c3:0c:91:d3:03:1f:5c:a9:a5:74:b2:8f:1e:07:4a:
                    84:0d:4a:d9:a8:5b:4c:39:78:20:69:8a:f2:86:06:
                    24:48:6e:7b:41:fd:d1:5b:52:4d:a7:7d:e0:60:e8:
                    4a:fa:f6:e5:ad:0e:68:f6:bf:22:0e:d8:39:78:64:
                    30:d2:5d:2a:28:54:de:37:a5:cf:d8:92:e4:f3:7a:
                    d2:af:9d:8f:dc:b2:8d:b3:66:76:0c:a6:45:fa:9a:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:70:79:F9:76:0F:D3:86:05:F8:B6:19:69:C1:82:74:50:32:E1:16
            X509v3 Authority Key Identifier:
                keyid:39:11:E1:EF:B0:2B:03:6F:83:5B:F6:58:E1:36:60:1A:67:42:16:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORHh77ArA2-DW_ZY4TZgGmdCFpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCC5/43B5EFD0241C11EBAB32D543C4F9AE02/ORHh77ArA2-DW_ZY4TZgGmdCFpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5b:10:47:26:b6:54:60:f5:ae:0d:00:f0:fd:76:45:98:8e:
         87:d5:4d:74:da:14:b0:5a:9c:13:da:4c:bd:c6:ff:5f:e4:38:
         11:c3:78:cf:ca:c4:40:00:30:07:c3:f9:5d:4f:5b:ec:c9:eb:
         6d:2a:c9:86:6f:03:03:cf:9b:bc:fd:5f:f5:98:8d:d4:fd:da:
         89:1d:c5:90:50:41:50:db:f7:95:b5:7c:4a:3b:e0:06:2b:16:
         28:69:58:c8:8a:db:b5:71:45:c8:cd:1b:0b:27:c4:c4:ac:78:
         18:f7:a0:05:8e:c2:ba:a4:4e:f8:d2:37:08:9c:24:2b:06:25:
         a7:ac:85:cc:5b:45:ca:ce:47:f2:d3:76:37:17:27:9c:b5:92:
         a1:54:2c:f7:7c:1d:98:07:7a:ea:1a:d9:c9:87:74:a5:cb:6b:
         1c:41:75:85:5c:3a:fd:c4:b7:b1:e3:e1:64:0a:c9:92:b7:4a:
         ab:40:50:2c:1d:a6:02:cf:d8:ef:76:47:b2:b3:a9:b3:f2:90:
         2d:8a:fe:ac:35:34:ab:e2:6e:4f:1a:49:7d:65:a4:35:37:be:
         33:8d:54:09:fd:85:59:fe:ab:17:fb:cd:12:fc:20:03:fa:10:
         79:05:e4:31:3b:50:ff:24:64:4e:2c:fa:3d:f2:61:32:fb:e6:
         31:d5:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:02 2026 by rpki-client