Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
File:                     OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json)
Hash identifier:          NlBNkzppH2oJD3iBkNw7s4Q3NwKkZporaFqp/Ate+0Y=
Subject key identifier:   46:57:2D:C9:7E:25:57:E5:23:09:61:3A:E9:A0:CD:D0:FC:4B:11:4F
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Certificate issuer:       /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
Manifest number:          8E
Signing time:             Mon 27 Jul 2026 10:06:56 +0000
Manifest this update:     Mon 27 Jul 2026 10:06:55 +0000
Manifest next update:     Mon 03 Aug 2026 10:06:55 +0000
Files and hashes:         1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: ci1tjE+0MNSIzBFuJMcJnkNnOYjv3/RLb7Ec+YtPRT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
                          rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
        Validity
            Not Before: Jul 27 10:06:55 2026 GMT
            Not After : Aug  3 10:06:55 2026 GMT
        Subject: CN=6a672dc0-2009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:7c:b9:33:20:71:24:64:1e:7c:54:59:76:
                    b5:b0:d0:d6:38:81:e7:14:76:99:85:b6:c3:77:ec:
                    55:56:ea:76:12:0f:df:19:9b:91:98:f5:f5:6c:b7:
                    47:8d:a8:70:67:f7:05:00:dd:b0:65:f7:41:46:41:
                    2c:70:cf:3a:e4:d5:b5:d7:36:21:fb:2d:0c:db:79:
                    e6:b0:3f:0e:df:19:ba:e5:b8:76:fd:ed:a7:30:26:
                    44:2e:4d:f4:f3:55:84:64:d6:9b:3f:0b:50:11:c1:
                    eb:18:02:29:13:0f:1e:e3:16:9b:35:da:8d:a3:8a:
                    7c:ab:cc:81:7e:88:53:1c:a9:c9:7a:b3:c4:9e:83:
                    78:41:59:f0:c8:ca:ea:fd:76:6d:85:d8:ee:21:f0:
                    74:2b:35:90:b7:f8:71:39:51:f7:39:ba:a7:42:51:
                    c3:30:08:3a:8e:b1:89:8e:a7:63:0d:3d:29:22:23:
                    52:4c:94:5f:9f:30:47:a8:ba:d3:9b:69:54:df:2a:
                    e6:62:01:d2:69:93:8f:a0:ba:0e:09:3d:dd:45:f8:
                    a5:3e:0c:11:ab:84:d9:b2:6c:38:82:fa:dd:49:9c:
                    70:51:9a:56:64:9c:b1:80:10:99:22:a8:fc:de:a4:
                    e7:6f:a2:72:b5:0c:14:71:7b:2f:71:e8:8a:32:29:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:2D:C9:7E:25:57:E5:23:09:61:3A:E9:A0:CD:D0:FC:4B:11:4F
            X509v3 Authority Key Identifier:
                keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:83:d1:db:f5:2a:ed:50:87:ff:d3:d7:1e:55:3a:c9:23:51:
         c4:25:6f:c6:5c:c2:81:4b:72:ca:63:f2:b1:05:16:65:cd:fb:
         ad:02:0b:0c:4b:a8:01:da:f9:a6:4c:c5:11:10:ab:92:1a:6b:
         f5:d2:e8:8d:ee:92:3e:b4:93:1d:e5:cd:f9:60:ad:c8:f9:78:
         92:ce:eb:d4:2f:67:52:b4:8d:c2:78:72:33:8a:4c:9c:6b:2c:
         32:d3:04:dd:66:4d:a1:26:36:fd:1e:90:6c:99:76:78:01:0a:
         40:b2:0d:28:d4:63:3b:da:72:ef:a3:8d:3d:c5:7a:2e:14:a7:
         8c:02:18:eb:35:12:a6:28:a2:cb:e2:70:b0:fb:1a:30:4a:90:
         9c:d0:f6:ed:47:26:37:43:3c:43:6c:25:27:52:68:b6:e5:35:
         ff:f5:13:77:64:65:16:94:89:cb:b8:a8:42:4b:3f:f4:b8:a7:
         b8:47:c2:6d:f6:de:87:ee:4c:ac:a2:88:be:6e:48:b0:de:a0:
         e9:c0:44:f1:7e:1e:c6:55:be:ff:82:e0:87:4b:b1:56:5b:3d:
         75:69:22:c4:75:12:25:62:24:3e:02:99:69:63:ca:52:38:ad:
         c9:43:80:4a:76:d6:8c:85:a3:2b:2b:f5:2e:b6:8d:d5:11:1b:
         11:83:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:44:49 2026 by rpki-client