Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
File:                     oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json)
Hash identifier:          bHux35wI5hRqqDHHNmUcWuo8Rsc9CGAVcc+uw1lyUJc=
Subject key identifier:   4B:5E:0F:3C:DD:FB:FE:70:98:96:AA:01:C7:17:50:8F:67:00:0A:F3
Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1
Certificate issuer:       /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
Certificate serial:       0382
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
Manifest number:          0371
Signing time:             Wed 29 Jul 2026 01:39:15 +0000
Manifest this update:     Wed 29 Jul 2026 01:39:14 +0000
Manifest next update:     Wed 05 Aug 2026 01:39:14 +0000
Files and hashes:         1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: lKLUkaCMP5f67RVSpgz20kNrJ67FUIziUe9w6nVn3T8=)
                          2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: AL1NzX9lNGPHM09HP1wQ+++0IfWrYhSei2NeZGdZGpw=)
                          3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: aCy5PMuDzpryQuVwSt0E5y4Po7ZiB/Ss+uP5KTFzKkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl
                          rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1
        Validity
            Not Before: Jul 29 01:39:14 2026 GMT
            Not After : Aug  5 01:39:14 2026 GMT
        Subject: CN=6a6959c3-7b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bb:ed:fa:3c:18:42:9c:e6:49:f7:8c:af:84:
                    9c:bd:43:9c:49:41:b8:f9:fe:3b:6e:68:9c:19:31:
                    17:8f:34:64:01:24:10:e0:3e:85:0c:09:40:80:95:
                    a3:19:72:a0:11:d5:49:1b:c9:a6:74:26:11:0f:0b:
                    10:4f:73:0b:d2:e4:f7:79:bd:c2:25:6d:ee:7f:08:
                    25:b1:18:ff:77:72:1e:bf:aa:22:8a:a8:82:3e:9e:
                    b8:8b:3b:81:2c:1c:ae:2d:71:47:41:ea:c8:d5:08:
                    03:90:02:8b:45:c6:71:a8:38:4e:95:ac:00:85:11:
                    18:79:03:1a:01:8e:08:dd:46:8a:a4:f6:f4:0f:37:
                    93:1d:c6:47:7b:a1:89:ab:50:7c:f8:fa:6e:0d:7e:
                    5b:6f:24:6d:a8:ec:44:0f:7f:9f:69:92:55:b2:2a:
                    24:8e:86:12:97:d3:30:a5:b7:4a:3e:3e:13:10:f7:
                    c8:4c:36:c4:2a:78:de:00:f5:12:14:90:42:4c:b8:
                    3f:b6:53:97:5d:d8:d3:c3:58:9f:73:59:3e:55:fb:
                    f8:8f:0b:28:f8:4f:e7:c0:54:41:3a:7f:c4:ee:27:
                    bc:b3:10:aa:fa:1f:19:d3:e0:f4:8f:36:50:45:95:
                    57:88:41:e4:c7:e7:f7:3b:b0:8e:e6:e2:83:2c:bc:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5E:0F:3C:DD:FB:FE:70:98:96:AA:01:C7:17:50:8F:67:00:0A:F3
            X509v3 Authority Key Identifier:
                keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:86:b0:5d:fa:c2:68:f9:fd:4e:39:c7:0d:51:ab:6f:1b:11:
         11:f7:72:de:a9:85:56:45:cf:46:4c:65:ef:f7:ef:73:77:07:
         5e:78:ba:f0:17:af:c6:a3:bc:e8:28:f5:54:0e:6e:cb:65:c6:
         48:cc:d7:12:8e:71:9d:78:ee:3c:77:34:1e:33:ab:34:b9:de:
         66:b9:22:c7:48:81:f9:73:53:c9:f0:e7:dd:40:cd:47:58:d0:
         64:88:45:47:ec:af:f0:87:63:2f:88:d4:7e:59:e2:3d:29:5b:
         de:9a:fe:2d:8f:2b:fc:8f:e0:88:88:cc:b8:73:52:89:65:29:
         be:1a:20:79:79:0b:6e:bb:fa:c6:06:aa:4c:ef:e3:6f:0b:79:
         8d:45:ab:43:bd:1b:32:fa:a0:a7:da:42:85:65:16:06:3c:46:
         5e:d1:d3:4e:16:16:87:fe:58:1d:26:01:e7:15:c8:63:03:92:
         46:54:37:7b:89:fc:3e:9c:15:1d:d1:51:1b:ab:05:53:d0:0a:
         b8:cf:98:eb:cf:2b:cd:b3:9b:e1:47:cd:06:b5:40:9e:d9:4b:
         fd:90:d2:18:0a:19:b5:01:77:f3:4e:86:2d:e6:74:45:10:8e:
         a6:6a:50:73:d2:9b:35:52:d0:12:c1:40:58:21:e8:b5:35:fa:
         f3:5d:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:38:36 2026 by rpki-client