Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
File:                     oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json)
Hash identifier:          jCp0n85mBCLSaC4UyyLAhNkoZzNgKZmwMQfGBqBnX0Y=
Subject key identifier:   57:89:76:52:80:A6:46:60:2B:A0:79:2B:2E:9B:D4:9D:0A:5F:4C:58
Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
Certificate issuer:       /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Certificate serial:       12BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
Manifest number:          129D
Signing time:             Tue 28 Jul 2026 17:10:32 +0000
Manifest this update:     Tue 28 Jul 2026 17:10:31 +0000
Manifest next update:     Tue 04 Aug 2026 17:10:31 +0000
Files and hashes:         1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: KPTDmhnftf5uVBrY7UXrJtRh39Z/VXRy261b6rzFMGU=)
                          2: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: UmgWUU8NA1nNiK28pvWu8eBpGFgthPvzpWq/tN/hgM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl
                          rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4796 (0x12bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
        Validity
            Not Before: Jul 28 17:10:31 2026 GMT
            Not After : Aug  4 17:10:31 2026 GMT
        Subject: CN=6a68e288-9f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:d1:a8:24:ac:60:af:f3:03:2e:fb:2d:f0:
                    a2:34:fa:68:3c:89:55:72:ba:d9:8b:92:57:9a:cb:
                    e1:95:c7:9f:77:97:44:12:2a:3a:10:e1:4c:0f:38:
                    f9:7a:ea:f1:60:26:1a:0c:79:d1:5a:df:34:83:a5:
                    4b:4c:fc:a7:f9:92:2a:cf:0e:40:48:ab:2b:d4:65:
                    2d:6b:65:85:0f:a8:10:5a:9f:fc:a8:ac:eb:f5:37:
                    b0:3d:b0:a1:c2:4c:64:39:81:c9:45:16:46:e2:e4:
                    95:52:cf:53:e1:ca:2f:5f:ea:92:57:67:22:36:6d:
                    2a:34:d3:71:c9:5b:8b:88:a5:67:c5:51:39:2c:1b:
                    b9:87:a6:6e:08:cd:93:3f:c1:b3:31:32:56:dd:16:
                    5f:f5:ed:f5:82:1f:73:94:7d:5d:c6:e5:f7:84:96:
                    90:aa:44:3f:6b:9d:a1:ca:92:ba:e2:15:86:61:1e:
                    50:c7:08:f0:e8:8f:79:1c:83:ac:b9:da:e5:99:af:
                    bd:e7:04:08:29:a2:30:dc:dd:59:02:7b:84:d6:41:
                    05:81:a0:74:01:57:04:b4:12:95:a3:14:e7:1d:13:
                    42:cf:87:4f:b2:9a:cc:1f:53:58:8b:17:2d:7a:14:
                    3f:a0:1a:6f:6a:50:9c:c8:2a:36:e8:18:28:e8:71:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:89:76:52:80:A6:46:60:2B:A0:79:2B:2E:9B:D4:9D:0A:5F:4C:58
            X509v3 Authority Key Identifier:
                keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d1:58:20:f8:79:e8:82:c6:67:54:27:86:ed:b0:34:e7:36:
         e7:e0:20:80:c7:c9:a6:6f:f7:44:76:3e:95:8e:d4:04:b0:00:
         e9:3f:63:6c:5d:4d:4b:2d:3f:8a:26:6f:cb:c2:86:61:c1:0e:
         34:35:01:89:54:12:55:2a:52:66:98:e2:a4:ff:2f:0a:9b:80:
         cd:04:21:b3:f4:cd:2e:68:99:15:02:43:ff:35:1f:c2:ac:f6:
         89:04:88:e1:7d:61:16:aa:16:19:b8:e9:26:a2:ea:5e:fa:bf:
         fe:31:7e:a3:ba:62:5c:de:b5:29:9f:fd:a3:d9:b8:74:6e:d4:
         a8:61:da:32:36:b2:69:81:de:42:72:41:53:d1:7c:a2:a0:44:
         88:08:48:8c:45:8a:15:e9:4f:45:1c:9d:3e:2a:fa:7f:a7:d8:
         6e:71:18:82:c1:df:fa:db:75:5f:6e:6c:60:a0:51:4c:10:99:
         60:9f:2e:8c:65:97:eb:54:bf:87:ac:a3:5f:a8:ff:d5:b9:02:
         f2:80:51:cf:a8:51:11:7a:28:77:df:67:f8:88:da:02:95:c9:
         3b:4d:f3:f3:54:26:a4:de:f3:0e:2c:6c:f2:4b:b6:ab:80:4b:
         2e:a0:45:fb:7c:96:b8:4c:81:a3:53:9c:bc:c7:62:0a:a6:bb:
         06:dd:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:38 2026 by rpki-client