Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft
File:                     ofrVQukeAX0lfVGxT_XDW4lCnvU.mft (raw, json)
Hash identifier:          fAbahcl6gkl6wjXDQ/GgYYuiMmtFolGJg1kZPeDE6sM=
Subject key identifier:   98:8E:76:6F:75:56:7B:E7:DF:2C:E7:51:4F:A0:05:A3:03:04:87:03
Authority key identifier: A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5
Certificate issuer:       /CN=A918377D/serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft
Manifest number:          01D9
Signing time:             Mon 27 Jul 2026 05:11:44 +0000
Manifest this update:     Mon 27 Jul 2026 05:11:43 +0000
Manifest next update:     Mon 03 Aug 2026 05:11:43 +0000
Files and hashes:         1: ofrVQukeAX0lfVGxT_XDW4lCnvU.crl (hash: z2sb3mVluccCoxv1hRl7XQpiYX0eqxrqHKd1GA203ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl
                          rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918377D, serialNumber=A1FAD542E91E017D257D51B14FF5C35B89429EF5
        Validity
            Not Before: Jul 27 05:11:43 2026 GMT
            Not After : Aug  3 05:11:43 2026 GMT
        Subject: CN=6a66e890-a240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:dc:14:ba:58:8d:53:7a:21:7a:20:f7:07:
                    52:40:81:cc:1d:fa:82:2a:55:44:a3:6f:05:a2:a1:
                    36:7c:c8:17:53:1b:c0:af:6f:d7:51:52:79:a1:c6:
                    74:55:9f:1c:78:c0:96:f7:6b:10:51:63:df:d2:f1:
                    74:d5:da:95:78:39:3e:d7:2d:ec:3b:10:26:70:da:
                    8c:d9:29:a3:2e:bd:d3:a9:8e:0f:00:7e:47:28:e2:
                    52:c6:bc:6f:1d:78:6c:ff:ad:f8:73:b5:d4:2a:29:
                    5d:55:af:20:18:dc:1c:62:67:97:56:19:16:5e:bb:
                    2e:2f:8e:41:31:fb:30:a9:5e:41:2f:09:6f:b4:2e:
                    f4:73:31:bd:95:dd:de:66:8b:f5:87:7c:01:c6:e7:
                    c1:58:bc:19:46:3e:9e:4e:1c:98:16:f3:f9:49:97:
                    04:f6:a2:73:15:16:33:ee:b6:71:e4:58:86:d0:5d:
                    4a:f4:b8:97:43:5e:b4:f1:d3:11:4f:e9:d1:13:0f:
                    12:d2:55:31:d3:fa:42:e1:52:96:c3:23:5a:68:b6:
                    ff:ee:4c:79:da:7a:3a:97:6c:78:2f:f8:ae:4a:54:
                    13:64:ad:c9:72:c2:13:70:82:4a:6a:29:ab:bc:95:
                    9c:bc:4e:88:6f:e6:c4:70:3e:5e:52:a3:7b:a2:fa:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8E:76:6F:75:56:7B:E7:DF:2C:E7:51:4F:A0:05:A3:03:04:87:03
            X509v3 Authority Key Identifier:
                keyid:A1:FA:D5:42:E9:1E:01:7D:25:7D:51:B1:4F:F5:C3:5B:89:42:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ofrVQukeAX0lfVGxT_XDW4lCnvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/ofrVQukeAX0lfVGxT_XDW4lCnvU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:42:d5:38:9b:77:ee:7f:04:fa:9b:7d:19:c6:ba:5b:87:c5:
         b3:ce:4b:9f:90:21:41:bd:d3:0d:02:bd:4a:e1:16:7a:8c:eb:
         e1:dd:63:fa:a7:9f:b6:3c:4b:2c:a1:ae:bc:b0:c2:82:47:a4:
         ac:fb:5f:6e:16:c1:63:8c:98:63:c2:ad:56:61:37:64:00:84:
         72:36:d6:7f:c4:65:a3:07:91:0c:b6:92:cd:78:f7:79:6d:b7:
         66:79:04:d0:a0:54:07:76:8b:b6:52:26:30:92:34:b0:40:61:
         c3:5e:73:30:65:81:4f:20:c3:b7:0f:58:6b:09:35:df:93:9a:
         a1:52:4f:f9:45:a3:57:c5:2c:7f:0d:27:c5:7e:91:38:71:7a:
         7d:7c:66:ee:55:58:bb:71:0d:52:b9:8b:f2:e1:40:f8:3e:7a:
         04:2e:fb:07:7b:b2:ce:91:d1:34:e1:1c:6b:65:f1:f3:47:cb:
         8c:e3:55:ce:40:89:95:39:d6:cf:a7:12:b6:90:d8:2d:52:a3:
         e2:3e:33:9c:81:78:27:6e:28:b9:eb:51:4b:38:82:77:a4:1c:
         64:d2:b2:17:4d:73:08:ba:b0:4c:1b:40:5d:84:af:4c:6d:f1:
         8e:70:0f:16:84:6c:d2:02:16:c5:49:df:d1:40:03:48:73:f2:
         9d:3f:e1:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM3N0QxMTAvBgNVBAUTKEExRkFENTQyRTkxRTAxN0QyNTdENTFCMTRGRjVDMzVC
ODk0MjlFRjUwHhcNMjYwNzI3MDUxMTQzWhcNMjYwODAzMDUxMTQzWjAYMRYwFAYD
VQQDEw02YTY2ZTg5MC1hMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvd/cFLpYjVN6IXog9wdSQIHMHfqCKlVEo28FoqE2fMgXUxvAr2/XUVJ5ocZ0
VZ8ceMCW92sQUWPf0vF01dqVeDk+1y3sOxAmcNqM2SmjLr3TqY4PAH5HKOJSxrxv
HXhs/634c7XUKildVa8gGNwcYmeXVhkWXrsuL45BMfswqV5BLwlvtC70czG9ld3e
Zov1h3wBxufBWLwZRj6eThyYFvP5SZcE9qJzFRYz7rZx5FiG0F1K9LiXQ1608dMR
T+nREw8S0lUx0/pC4VKWwyNaaLb/7kx52no6l2x4L/iuSlQTZK3JcsITcIJKaimr
vJWcvE6Ib+bEcD5eUqN7ovo4PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiOdm91
Vnvn3yznUU+gBaMDBIcDMB8GA1UdIwQYMBaAFKH61ULpHgF9JX1RsU/1w1uJQp71
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc3RC85RjdDODE1MkI0
QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFYMGxmVkd4VF9YRFc0bENu
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29mclZRdWtlQVgwbGZWR3hUX1hEVzRsQ252VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzc3RC85RjdDODE1MkI0QjExMUVFQjBBREUzNTJDNEY5QUUwMi9vZnJWUXVrZUFY
MGxmVkd4VF9YRFc0bENudlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEkLVOJt37n8E+pt9Gca6W4fFs85Ln5AhQb3TDQK9SuEWeozr4d1j+qeftjxL
LKGuvLDCgkekrPtfbhbBY4yYY8KtVmE3ZACEcjbWf8RloweRDLaSzXj3eW23ZnkE
0KBUB3aLtlImMJI0sEBhw15zMGWBTyDDtw9Yawk135OaoVJP+UWjV8Usfw0nxX6R
OHF6fXxm7lVYu3ENUrmL8uFA+D56BC77B3uyzpHRNOEca2Xx80fLjONVzkCJlTnW
z6cStpDYLVKj4j4znIF4J24ouetRSziCd6QcZNKyF01zCLqwTBtAXYSvTG3xjnAP
FoRs0gIWxUnf0UADSHPynT/hNQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:40:32 2026 by rpki-client