Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
File:                     OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json)
Hash identifier:          ix4MdASIhT78h/9mDTeJH1JNoR8mtZQc0q7Qg52inkg=
Subject key identifier:   93:52:D6:C5:3E:A1:16:33:2F:1B:C9:5E:DC:DE:23:E0:7A:8C:1B:1E
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Certificate issuer:       /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
Manifest number:          01F3
Signing time:             Wed 29 Jul 2026 04:29:15 +0000
Manifest this update:     Wed 29 Jul 2026 04:29:14 +0000
Manifest next update:     Wed 05 Aug 2026 04:29:14 +0000
Files and hashes:         1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: RmSjYVcuzEkTofuLJnXZi4adGopN0sbFSbQQJkUaGis=)
                          2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: 8EuCC6GeDURLjyKUH1rweshuZkTUvieZrlzCd35Hwu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
                          rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 04:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
        Validity
            Not Before: Jul 29 04:29:14 2026 GMT
            Not After : Aug  5 04:29:14 2026 GMT
        Subject: CN=6a69819b-538a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:a9:0f:19:58:8e:79:8a:61:07:cf:19:98:
                    84:c9:29:28:a2:71:a7:ad:a5:2c:ae:7c:d7:14:72:
                    85:24:4b:b6:0b:c8:27:65:1b:76:49:69:2d:c8:cd:
                    33:ad:88:c7:d8:a6:dd:5e:f3:54:5c:65:e1:da:70:
                    54:0f:fa:d1:06:c1:cd:d7:3d:54:d3:8d:40:ff:02:
                    81:91:90:65:2b:47:e5:4a:51:85:01:0c:fe:cf:fa:
                    5e:8a:ad:23:54:77:56:00:41:02:d1:86:72:8a:df:
                    85:62:ce:0f:13:1d:57:e3:b1:bb:46:0b:d6:5f:4d:
                    85:8f:38:e7:57:94:54:b8:4f:cb:7c:ab:ac:d8:52:
                    46:be:59:e6:7c:00:b2:3e:9a:8a:53:ab:a5:84:cd:
                    0e:73:33:d9:20:6f:22:fe:a9:b4:11:b6:bf:12:27:
                    f3:6e:c9:bb:65:1a:9b:ab:05:fa:a1:c1:62:e4:a2:
                    ba:da:7e:43:43:d2:f0:98:f1:4a:91:df:94:1a:c7:
                    bd:7b:ae:d5:4b:30:16:91:aa:e9:ed:12:99:6e:af:
                    91:81:10:92:ff:bb:e8:6c:ca:f9:b4:8d:30:26:a6:
                    4c:b8:f1:b5:1f:be:c7:e0:39:06:f9:fe:07:25:8b:
                    17:b2:c5:55:9b:f0:68:61:04:c2:68:f8:97:1c:1a:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:52:D6:C5:3E:A1:16:33:2F:1B:C9:5E:DC:DE:23:E0:7A:8C:1B:1E
            X509v3 Authority Key Identifier:
                keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e0:fb:6f:56:99:f2:61:2b:58:b1:b0:80:0c:f2:33:b8:25:
         2e:93:6e:de:db:f1:3c:4d:da:55:08:69:0f:28:ab:ae:51:05:
         82:17:5e:40:f2:6b:a7:ca:6a:89:1c:4c:44:e3:c7:bb:4a:6d:
         8b:58:53:e4:b0:e4:08:6f:83:46:bf:46:52:6c:cd:9d:0c:62:
         99:f2:b3:dd:95:5b:6e:d3:79:18:60:79:ba:0b:ef:c2:a5:cc:
         f0:df:0f:63:a9:35:94:6d:56:5e:c9:56:5c:50:32:e2:4e:4d:
         46:6c:b9:b4:87:94:95:38:e9:29:92:87:75:54:c5:66:f9:1f:
         e0:7a:fb:cc:fe:bb:0d:43:07:ca:ad:9b:34:4d:4c:3c:e5:8a:
         1c:41:67:67:94:fc:f8:f8:92:0b:e2:d3:78:ae:7f:28:01:ac:
         b7:96:5f:7a:b2:d4:e5:24:8a:69:97:b5:88:ab:98:a3:34:72:
         48:dd:a6:bf:19:f8:35:58:4f:49:4a:d0:86:14:1a:59:c7:4b:
         87:b8:db:f4:25:e1:40:37:9a:8c:ad:81:d0:27:fc:c6:44:5e:
         da:0f:78:48:a2:6c:90:29:88:de:0d:26:62:36:c1:fd:7a:e2:
         cf:d0:3b:43:e8:54:1f:26:0a:0b:55:2b:61:45:6d:7b:a9:4f:
         89:68:2e:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMzQjcxMTAvBgNVBAUTKDM5ODM3Q0I0QkVDQUY2QTYyNkM5MTZBRTk2MDI0MUI2
MDlFNkIyMEEwHhcNMjYwNzI5MDQyOTE0WhcNMjYwODA1MDQyOTE0WjAYMRYwFAYD
VQQDEw02YTY5ODE5Yi01MzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt2ypDxlYjnmKYQfPGZiEySkoonGnraUsrnzXFHKFJEu2C8gnZRt2SWktyM0z
rYjH2KbdXvNUXGXh2nBUD/rRBsHN1z1U041A/wKBkZBlK0flSlGFAQz+z/peiq0j
VHdWAEEC0YZyit+FYs4PEx1X47G7RgvWX02FjzjnV5RUuE/LfKus2FJGvlnmfACy
PpqKU6ulhM0OczPZIG8i/qm0Eba/Eifzbsm7ZRqbqwX6ocFi5KK62n5DQ9LwmPFK
kd+UGse9e67VSzAWkarp7RKZbq+RgRCS/7vobMr5tI0wJqZMuPG1H77H4DkG+f4H
JYsXssVVm/BoYQTCaPiXHBoZOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNS1sU+
oRYzLxvJXtzeI+B6jBseMB8GA1UdIwQYMBaAFDmDfLS+yvamJskWrpYCQbYJ5rIK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xNTlBNEFEMDkz
MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3SzlxWW15UmF1bGdKQnRnbm1z
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09ZTjh0TDdLOXFZbXlSYXVsZ0pCdGdubXNnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzNCNy8xNTlBNEFEMDkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9PWU44dEw3Szlx
WW15UmF1bGdKQnRnbm1zZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWeD7b1aZ8mErWLGwgAzyM7glLpNu3tvxPE3aVQhpDyirrlEFghdeQPJrp8pq
iRxMROPHu0pti1hT5LDkCG+DRr9GUmzNnQximfKz3ZVbbtN5GGB5ugvvwqXM8N8P
Y6k1lG1WXslWXFAy4k5NRmy5tIeUlTjpKZKHdVTFZvkf4Hr7zP67DUMHyq2bNE1M
POWKHEFnZ5T8+PiSC+LTeK5/KAGst5ZferLU5SSKaZe1iKuYozRySN2mvxn4NVhP
SUrQhhQaWcdLh7jb9CXhQDeajK2B0Cf8xkRe2g94SKJskCmI3g0mYjbB/Xriz9A7
Q+hUHyYKC1UrYUVte6lPiWguVQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:59:11 2026 by rpki-client