Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
File:                     OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json)
Hash identifier:          0xNwuADOcW33FyN1F+RZOh9UjJw/pgkoPELjICPxpxY=
Subject key identifier:   CD:B6:47:35:1F:EC:4E:11:C5:68:41:87:EA:C7:9C:8C:F5:E0:77:42
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Certificate issuer:       /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
Manifest number:          019D
Signing time:             Mon 27 Jul 2026 06:03:00 +0000
Manifest this update:     Mon 27 Jul 2026 06:03:00 +0000
Manifest next update:     Mon 03 Aug 2026 06:03:00 +0000
Files and hashes:         1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: bwGiWHgpxlVnriHljLrVqJF9IFSxyGWouy317KHZ8XA=)
                          2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: luNzOp9WQ2A7sNDC/iK8zbbGEM1p3MEBvj7zZ4BWvgA=)
                          3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: 7slcloQAeT5wyJqAjye83Okm4uzNEuS1+WoZpKS16D8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl
                          rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
        Validity
            Not Before: Jul 27 06:03:00 2026 GMT
            Not After : Aug  3 06:03:00 2026 GMT
        Subject: CN=6a66f494-7ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:3f:33:a4:e0:4e:d3:09:27:60:89:b0:aa:
                    9d:21:ed:d6:81:98:5d:4b:a3:cc:7e:cb:2e:10:44:
                    d1:0c:87:c4:2e:2f:36:9b:53:e1:cc:5f:9e:e9:0c:
                    76:af:ef:01:b9:fb:d4:98:bf:7a:6d:b3:46:6f:05:
                    d1:77:f5:68:7a:6d:b2:e5:b9:5a:d7:f7:45:77:79:
                    f7:dc:e8:f3:d0:eb:74:08:8e:06:d9:52:39:43:e1:
                    7f:87:2e:f6:a6:f8:63:45:77:c9:bb:6f:57:83:3f:
                    41:a3:56:3d:be:7d:e0:93:7d:cf:dc:51:01:a5:34:
                    1d:44:b3:73:53:1a:f4:1f:fb:8d:67:f6:0f:6c:c0:
                    e4:e1:60:3f:0d:8f:57:07:37:52:a5:70:d2:4e:43:
                    ef:4e:a3:26:75:f8:84:e6:2a:e6:3a:58:9c:55:49:
                    67:c3:fa:f5:b6:04:c6:c3:36:d4:3a:b7:60:db:50:
                    9e:15:59:ed:68:9b:d5:c0:37:db:23:38:e6:0b:3a:
                    9a:73:e7:6b:cc:0b:99:a9:37:bb:2f:c9:e3:43:78:
                    7f:90:95:04:ea:41:4a:0d:e4:23:4e:58:75:1f:09:
                    54:c6:ab:bc:f7:a7:56:16:1b:1a:e7:45:37:fc:7a:
                    76:fa:d0:a3:66:25:21:a9:18:71:fb:3b:92:2d:b2:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:47:35:1F:EC:4E:11:C5:68:41:87:EA:C7:9C:8C:F5:E0:77:42
            X509v3 Authority Key Identifier:
                keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:08:87:5f:68:dc:09:24:46:77:47:b7:86:40:d7:8e:e5:
         5d:59:62:05:b2:75:32:f8:aa:16:3d:58:75:09:be:ef:04:a7:
         ff:a1:c5:73:64:c2:6c:31:34:fb:c0:bc:8d:bc:11:33:fa:2c:
         b9:a9:fd:db:26:e8:f8:a0:ee:9b:65:fe:38:84:af:80:ed:5a:
         5c:6e:9f:3b:0f:36:46:e2:57:eb:d4:7c:d8:a9:b2:a1:8f:21:
         0f:83:1f:50:8d:35:c2:24:1c:14:83:2e:27:b7:fe:52:24:9b:
         2b:ec:1a:27:4b:e9:01:ed:bd:fa:d8:8b:08:9e:b1:55:49:d9:
         fe:72:9c:e9:a0:cf:64:cc:da:4b:b9:6a:b6:61:78:e8:27:f1:
         38:77:cc:ad:a3:a7:b8:13:ce:3e:8e:4d:39:a8:42:83:05:8a:
         3a:98:46:4c:71:4a:81:44:94:8d:fe:26:e0:7d:3c:8c:16:32:
         88:64:cb:38:46:a0:3f:14:b2:53:8d:d0:ec:cc:be:d7:e6:be:
         e7:56:de:17:34:85:b9:49:a0:85:35:4d:3a:88:ff:80:58:57:
         ad:8e:48:bf:5a:28:22:28:39:bb:99:73:6a:ed:72:c9:b3:dc:
         bd:fb:05:97:68:42:d7:c0:8d:06:98:f9:13:35:a5:9e:09:07:
         a2:67:6f:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg3OUExMTAvBgNVBAUTKDM5OUE1RTE3RDlDQTQzQjZDMzNBQzMzMDIwNkRDQkRE
OTM1RTc4NzEwHhcNMjYwNzI3MDYwMzAwWhcNMjYwODAzMDYwMzAwWjAYMRYwFAYD
VQQDEw02YTY2ZjQ5NC03Y2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqEE/M6TgTtMJJ2CJsKqdIe3WgZhdS6PMfssuEETRDIfELi82m1PhzF+e6Qx2
r+8BufvUmL96bbNGbwXRd/Voem2y5bla1/dFd3n33Ojz0Ot0CI4G2VI5Q+F/hy72
pvhjRXfJu29Xgz9Bo1Y9vn3gk33P3FEBpTQdRLNzUxr0H/uNZ/YPbMDk4WA/DY9X
BzdSpXDSTkPvTqMmdfiE5irmOlicVUlnw/r1tgTGwzbUOrdg21CeFVntaJvVwDfb
IzjmCzqac+drzAuZqTe7L8njQ3h/kJUE6kFKDeQjTlh1HwlUxqu896dWFhsa50U3
/Hp2+tCjZiUhqRhx+zuSLbLZKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM22RzUf
7E4RxWhBh+rHnIz14HdCMB8GA1UdIwQYMBaAFDmaXhfZykO2wzrDMCBty92TXnhx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODc5QS9CNjcwMTczQzFD
OUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3YkRPc013SUczTDNaTmVl
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODc5QS9CNjcwMTczQzFDOUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3
YkRPc013SUczTDNaTmVlSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS20Ih19o3AkkRndHt4ZA147lXVliBbJ1MviqFj1YdQm+7wSn/6HFc2TCbDE0
+8C8jbwRM/osuan92ybo+KDum2X+OISvgO1aXG6fOw82RuJX69R82KmyoY8hD4Mf
UI01wiQcFIMuJ7f+UiSbK+waJ0vpAe29+tiLCJ6xVUnZ/nKc6aDPZMzaS7lqtmF4
6CfxOHfMraOnuBPOPo5NOahCgwWKOphGTHFKgUSUjf4m4H08jBYyiGTLOEagPxSy
U43Q7My+1+a+51beFzSFuUmghTVNOoj/gFhXrY5Iv1ooIig5u5lzau1yybPcvfsF
l2hC18CNBpj5EzWlngkHomdvdA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:45 2026 by rpki-client