Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
File:                     oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json)
Hash identifier:          gQUcYj4FGEz/qKiAeuHoGnc3jOMwhq6YdeyULriVx4E=
Subject key identifier:   FD:8F:18:2B:1C:7E:01:5E:1E:34:F5:B5:D3:25:32:BC:D4:79:85:32
Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
Certificate issuer:       /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
Manifest number:          8B
Signing time:             Mon 27 Jul 2026 09:44:04 +0000
Manifest this update:     Mon 27 Jul 2026 09:44:04 +0000
Manifest next update:     Mon 03 Aug 2026 09:44:04 +0000
Files and hashes:         1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: 9U1UYmD0TwybubozNTYtXt/d2m2yLDjaQiYgzh+LDtA=)
                          2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: aZcuk92cPHBLPT7kL0kkLxHikI+2JffenZZL+WJEXRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
                          rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
        Validity
            Not Before: Jul 27 09:44:04 2026 GMT
            Not After : Aug  3 09:44:04 2026 GMT
        Subject: CN=6a672864-df48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:22:62:da:27:2c:1f:eb:e5:90:23:89:84:
                    6b:82:d8:9a:5b:a3:89:4e:06:58:e5:0c:02:ef:95:
                    56:30:d6:01:70:2a:29:23:17:dd:48:74:41:99:c1:
                    40:81:44:26:ea:65:e1:58:bb:d2:0c:4e:7f:6d:4c:
                    f5:3c:af:17:e5:4b:d9:04:3a:fe:f1:90:ad:d9:a8:
                    1a:d2:4c:56:e7:f5:99:bd:5e:15:a6:f3:fb:52:65:
                    48:93:03:f6:22:45:5c:24:e5:ae:89:07:d2:2a:67:
                    e2:f5:7a:d2:7e:94:af:b3:79:ae:c5:46:20:2b:c6:
                    c5:90:c8:92:b1:f9:23:fb:f6:dc:8e:1b:d4:f1:dd:
                    de:84:46:82:c3:0b:52:3d:2b:9d:6e:dd:2a:c9:9f:
                    f2:65:a5:d7:2d:77:49:2d:38:69:29:ab:30:45:ca:
                    9e:28:a5:0e:73:86:85:ea:9e:90:3f:cc:b1:9d:df:
                    f5:af:e6:4a:74:52:84:7f:ff:19:12:70:1f:c6:47:
                    49:f8:46:bb:31:18:98:24:4a:2d:8e:e8:fd:0a:9b:
                    b5:10:ca:76:6e:19:86:4a:e0:bc:dc:2e:79:c8:b0:
                    08:72:a4:eb:81:71:26:9a:29:9d:17:80:a6:14:62:
                    81:4f:1a:a4:9e:df:3a:e6:91:ec:13:eb:ac:ac:d3:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8F:18:2B:1C:7E:01:5E:1E:34:F5:B5:D3:25:32:BC:D4:79:85:32
            X509v3 Authority Key Identifier:
                keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:51:c0:8a:af:c2:6e:02:68:f6:eb:48:cc:54:86:fb:22:04:
         c2:dd:06:bc:34:f0:fb:36:7b:f0:bc:d6:2d:6b:7b:56:58:1f:
         8a:02:af:ba:5d:e0:88:f4:56:7b:dd:12:d6:f2:6c:68:8f:bb:
         39:a2:8b:9b:c4:99:e3:a2:ef:d0:ef:ab:ec:20:81:57:fb:14:
         47:ab:9a:8f:b1:66:92:86:6d:2f:3b:04:c0:a4:3e:31:82:db:
         62:11:d4:91:45:9f:07:73:a0:7d:8e:27:74:b1:2d:f5:33:43:
         e0:ce:dc:ef:fe:02:3a:a1:b9:a3:7c:89:ad:a0:35:4d:eb:db:
         38:fc:07:48:3f:fb:98:53:c3:39:d7:de:84:e6:90:0a:fb:6b:
         eb:d8:82:d7:5b:a1:4d:c7:ba:2a:a1:a6:12:b2:35:97:30:d4:
         ee:ac:68:4c:17:7e:c2:83:4e:f8:15:c7:0c:47:b9:3a:41:3f:
         de:ed:38:cb:26:02:99:5c:b5:99:28:e4:6d:18:e2:c9:6c:c2:
         ba:8f:ab:aa:44:7f:76:97:9b:7e:78:69:b7:ae:63:4c:3e:cb:
         08:f6:69:d7:f5:1f:f9:2d:ba:a0:b5:f5:b9:ae:fd:c9:ed:af:
         6b:2b:ab:20:90:d9:a3:d9:e3:cd:e0:ad:3d:3b:91:00:fb:6e:
         65:ad:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:56:31 2026 by rpki-client