Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
File:                     OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json)
Hash identifier:          d0BGkkqNsUZLNnHpOhGxhMKo1E2A5X1u+QK2Fb5UgWw=
Subject key identifier:   C4:A3:08:98:0C:62:F2:D4:71:04:64:89:3D:42:A9:21:DA:7E:D5:74
Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
Certificate issuer:       /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
Manifest number:          01A4
Signing time:             Mon 27 Jul 2026 05:53:33 +0000
Manifest this update:     Mon 27 Jul 2026 05:53:33 +0000
Manifest next update:     Mon 03 Aug 2026 05:53:33 +0000
Files and hashes:         1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: TUqzNR/2UKvmRL9DMAvRP8e5J/UclxGbshM1dkFRllQ=)
                          2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: SI7mhqO9YrvFB2/bZ7mj3acc/KGSgDSJ8dlCBs4REbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
                          rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
        Validity
            Not Before: Jul 27 05:53:33 2026 GMT
            Not After : Aug  3 05:53:33 2026 GMT
        Subject: CN=6a66f25d-5369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:14:fe:d8:4e:a0:de:25:46:c0:fe:e0:28:
                    cd:f9:dc:d1:2a:e3:57:28:2e:bf:4c:84:8b:4f:66:
                    a1:ec:75:17:4b:21:c9:ce:5a:c4:fa:1d:52:77:1d:
                    72:1b:c7:ed:f9:c9:bf:fc:5d:17:12:fb:4d:d2:95:
                    e9:d2:e0:2e:dd:ad:77:4c:36:6b:e4:2b:b4:eb:97:
                    7b:42:69:68:1a:1f:00:31:7e:46:56:69:9b:48:99:
                    d7:cc:ad:eb:84:31:4e:48:3a:d8:b1:83:47:11:97:
                    f1:af:94:c1:42:a4:96:9d:0d:0b:8d:9d:55:f4:09:
                    52:8e:a1:a6:b3:29:b5:4c:c4:39:1b:97:5d:18:3e:
                    67:3f:35:74:80:ef:3c:6b:ea:ef:39:60:f8:c6:bb:
                    cc:f6:51:76:a0:f7:47:a7:3f:31:d9:df:3f:dc:a9:
                    ba:00:e6:89:9e:ed:8e:3f:00:78:62:26:87:e7:9b:
                    4e:3c:25:09:31:5c:46:20:79:7b:51:9b:b5:99:59:
                    64:52:8a:8c:3f:ce:5b:66:d5:23:9c:1d:06:c7:b0:
                    ea:cf:b3:97:a4:9c:93:a6:f4:1f:cb:59:1e:d9:67:
                    10:34:19:ca:19:0a:c1:e6:e8:2a:00:99:69:0f:e4:
                    cb:13:57:1a:d7:1e:b0:fe:30:a9:67:c4:eb:e8:50:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A3:08:98:0C:62:F2:D4:71:04:64:89:3D:42:A9:21:DA:7E:D5:74
            X509v3 Authority Key Identifier:
                keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:57:a6:ec:9c:74:f3:8c:a6:0d:ae:c0:9d:a3:04:ee:27:
         7f:b1:16:e9:ef:03:15:f8:e7:95:09:fc:2c:00:71:17:cf:e5:
         7c:3a:8d:be:83:f8:24:6a:6c:30:23:be:5a:2e:ef:9e:64:22:
         cb:37:72:89:b2:d0:15:a3:d3:a6:28:86:94:7b:65:01:47:5d:
         67:a5:bd:da:29:fd:29:81:87:5e:e1:e5:0a:6f:42:12:c4:11:
         1b:3f:88:7d:3b:6b:1c:66:1f:13:6b:ce:c1:f0:ae:18:7b:1f:
         4c:73:b8:a3:bd:20:e1:d3:28:cf:9d:10:1d:3d:cd:23:8d:b6:
         78:0f:a3:9b:9f:32:2c:4c:d3:71:f9:fb:86:54:21:9f:be:1d:
         8a:77:03:31:e2:05:d4:8d:e1:d5:e9:cf:7f:df:d3:91:56:b5:
         de:2a:ba:a5:0b:98:b2:9b:89:66:7c:26:c5:95:d5:69:df:15:
         10:2f:50:90:ab:1d:60:32:b8:7d:58:f6:d4:ac:45:c1:53:96:
         4a:ee:4e:9a:b0:ed:1b:dc:49:ff:5b:43:c3:d2:71:6f:da:5f:
         4d:47:3d:99:7a:eb:79:f6:70:b9:e6:69:f5:de:48:ee:ac:94:
         24:82:66:01:68:e1:13:bb:60:71:f3:8a:0a:b4:86:2e:f3:80:
         91:31:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:29 2026 by rpki-client