Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft
File:                     1OMXbLn0iT50xOgF-n-12QpKewo.mft (raw, json)
Hash identifier:          xYMLfBC7DfkuY2hzWdkqmJYQpxOu/+WsfrZFm5TK0YE=
Subject key identifier:   6F:20:53:3E:98:15:8C:83:58:25:7E:59:B9:98:09:77:C5:0A:72:66
Authority key identifier: D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A
Certificate issuer:       /CN=A9154AFB/serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A
Certificate serial:       1821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft
Manifest number:          180A
Signing time:             Tue 28 Jul 2026 16:37:48 +0000
Manifest this update:     Tue 28 Jul 2026 16:37:47 +0000
Manifest next update:     Tue 04 Aug 2026 16:37:47 +0000
Files and hashes:         1: 1OMXbLn0iT50xOgF-n-12QpKewo.crl (hash: tlpKR3CmulfMif5QQCq+Pymz6gmB1+UwpsQLTXNtn/4=)
                          2: 81368CD6594B11EE924DCC64C4F9AE02.roa (hash: n9Ra6ZUeLorL3l67bNk1doH1FFp1jz1cR04L4Fo/Y0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl
                          rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6177 (0x1821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154AFB, serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A
        Validity
            Not Before: Jul 28 16:37:47 2026 GMT
            Not After : Aug  4 16:37:47 2026 GMT
        Subject: CN=6a68dadc-16c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:26:e3:89:30:e9:90:0b:cd:3f:72:bd:dc:
                    c0:e0:c5:bf:d9:0d:28:b1:87:1d:b8:75:bd:5c:0c:
                    70:76:b0:01:1c:db:dc:75:b2:1c:5a:2d:fb:5c:b2:
                    df:71:c2:59:83:7d:cf:24:19:83:83:f9:02:d3:0f:
                    61:34:81:6e:f5:24:90:ee:90:16:8a:98:06:72:28:
                    f1:b8:50:ec:83:52:d8:5e:a0:6b:e4:f1:2b:1e:cc:
                    70:ee:4c:c4:b3:c6:cd:c8:60:1c:c4:ec:18:ee:29:
                    0f:0a:2b:69:47:7c:1b:82:09:73:d3:9c:1d:86:28:
                    66:53:e0:2d:ac:fa:e1:e4:74:bf:19:98:cd:67:1d:
                    a6:49:41:bb:f0:46:05:e7:16:8b:0a:54:32:4f:4b:
                    d9:a5:23:6c:65:1e:c7:1a:90:cf:35:c4:6f:4f:ce:
                    0c:9f:c2:19:9c:a2:b8:96:b1:cf:b7:f0:32:b3:a2:
                    58:9a:0d:dd:01:52:d0:89:ab:3f:42:72:cd:b5:89:
                    de:68:0a:f5:15:a7:22:ee:ad:63:35:f9:34:fa:5f:
                    28:6d:77:ec:b6:29:4d:07:dd:1b:81:50:41:c3:b7:
                    5c:f4:7a:54:e1:3e:dc:69:65:2f:0b:d3:d8:fe:3f:
                    e5:c0:90:9f:d3:ca:88:67:50:85:02:93:4a:65:f0:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:20:53:3E:98:15:8C:83:58:25:7E:59:B9:98:09:77:C5:0A:72:66
            X509v3 Authority Key Identifier:
                keyid:D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e2:66:ed:59:67:8a:53:72:6b:2b:fb:ba:12:1c:b2:84:33:
         76:18:a7:60:c1:13:ec:9f:2b:67:6d:0b:dd:40:ed:86:0a:1b:
         58:55:98:3b:01:bb:57:7a:4d:f3:38:11:66:ce:e2:66:29:0a:
         cf:45:2a:08:bd:0f:c1:c8:f4:46:21:a1:41:a1:f2:06:3c:a0:
         20:7b:c0:03:64:2a:5e:42:9f:24:f0:c3:42:25:f0:31:79:1b:
         71:35:f3:d8:c3:19:41:3d:df:a1:4a:c7:82:d8:88:33:16:74:
         0b:b6:de:a3:a5:8e:ae:50:2d:58:2f:46:d3:95:7f:cf:b6:1a:
         d3:ff:ba:ad:e2:6e:e7:9a:1a:8c:a4:78:43:ea:54:79:e1:1e:
         48:54:45:f3:84:85:8a:c5:78:95:ac:8d:92:cf:bc:a3:69:86:
         88:6c:78:b7:ab:3d:bc:5f:b9:03:81:eb:5e:ba:4f:71:6c:13:
         80:d6:d9:31:64:92:a1:46:fa:ab:4a:ca:7a:74:05:2f:fd:1b:
         68:79:0a:05:ca:a3:e1:69:b5:4c:f2:68:63:7b:e3:fe:47:d8:
         96:72:bd:fb:dc:f7:0d:fd:8f:33:5a:a6:71:e9:5f:08:97:d6:
         67:ab:7b:22:36:f1:f0:b7:9c:4d:3b:33:fd:48:ed:e7:e3:67:
         93:8b:ef:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:06 2026 by rpki-client