Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
File:                     oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft (raw, json)
Hash identifier:          MHPgrKNQ/BJOGMX2hvur9zTFKD3GjkByQQFsSw5au7E=
Subject key identifier:   BF:FC:46:0A:17:05:C7:9C:D9:9C:35:D7:03:59:F2:59:84:7D:31:CE
Authority key identifier: A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36
Certificate issuer:       /CN=A91965C6/serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
Manifest number:          4C
Signing time:             Mon 27 Jul 2026 10:39:40 +0000
Manifest this update:     Mon 27 Jul 2026 10:39:39 +0000
Manifest next update:     Mon 03 Aug 2026 10:39:39 +0000
Files and hashes:         1: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl (hash: JEbSkrCBSR9T1J/iJFJevtYJzmuCv56WY7sScEPV5eQ=)
                          2: D4496826179411F19180A41B2E3D8C67.roa (hash: GgDsG3hy1PBcF5IbzyAuO44d4hcQihWGIRpm85tQHW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl
                          rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91965C6, serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
        Validity
            Not Before: Jul 27 10:39:39 2026 GMT
            Not After : Aug  3 10:39:39 2026 GMT
        Subject: CN=6a67356c-6029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:70:d3:ff:4f:f0:79:c7:23:af:41:8f:ca:
                    75:9e:8d:bc:64:62:3a:2c:c1:04:19:60:6a:0f:d9:
                    1e:d4:f0:a4:44:f6:52:3f:8e:1f:58:2c:5c:40:1d:
                    3a:ea:b5:1d:d3:df:2c:35:ce:08:01:ec:a5:c4:4d:
                    b8:92:05:4d:82:e1:62:1b:b8:e5:e1:ce:28:ab:c2:
                    2a:71:bc:59:98:28:6e:b6:73:35:20:d9:24:8c:a7:
                    79:5f:46:1b:52:6c:bf:90:da:1f:83:c5:46:02:c9:
                    fa:bf:c6:4d:b5:2b:62:2f:6f:28:49:16:e8:d4:68:
                    35:4b:f8:93:0c:dd:ba:5b:58:a0:73:dc:2d:c2:e2:
                    4c:f1:c2:76:97:06:b9:cd:e0:f9:cc:7e:e9:8c:13:
                    98:8b:d0:5d:14:ba:4f:38:2b:b9:0e:5d:ec:f4:09:
                    c9:b0:2d:d3:67:2c:e4:97:62:40:68:dd:a8:e4:0b:
                    74:c0:48:eb:15:45:4c:a9:30:03:ca:dc:0d:3d:88:
                    5e:ac:21:6b:da:23:01:22:b5:ff:45:20:60:32:ea:
                    c3:7f:9a:21:62:6d:2d:60:ba:94:78:7f:63:33:e9:
                    63:e2:1c:fc:66:8d:02:36:63:9d:f0:aa:44:b1:23:
                    ec:8c:0a:7c:fd:ea:00:95:e4:9a:0a:2d:10:1b:35:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FC:46:0A:17:05:C7:9C:D9:9C:35:D7:03:59:F2:59:84:7D:31:CE
            X509v3 Authority Key Identifier:
                keyid:A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:f7:51:cc:ff:54:a4:cb:96:f6:ec:f9:18:02:f8:14:a8:46:
         4d:d3:68:73:92:5f:3c:d0:51:62:26:88:51:c4:36:d7:41:d3:
         2d:21:cd:62:93:a9:08:ed:f5:3b:9c:bf:e2:9c:89:6f:78:ad:
         12:62:03:e5:56:3d:18:04:91:dc:a0:c3:33:9d:9b:64:95:9e:
         63:14:31:00:26:de:54:e3:24:d9:03:eb:a9:61:b2:e0:cd:4f:
         50:6e:97:d9:49:5e:03:6b:3c:55:90:c5:a3:51:d6:7e:6d:19:
         ea:4c:e9:b4:77:0c:ba:fe:43:75:a3:7d:f9:ad:56:ea:a1:8b:
         fd:13:a1:b3:8c:cb:4a:85:24:05:53:88:24:7e:88:39:04:e7:
         d8:09:6a:10:1c:c1:cc:a6:71:21:e0:1f:18:2e:5e:e9:f7:d0:
         02:5d:54:2e:2f:d7:80:22:43:cf:45:40:d0:9b:6d:8d:c7:b9:
         73:0f:4b:08:00:45:9e:83:7a:0f:a9:bd:68:4a:9f:f2:68:c4:
         da:f4:4e:df:b4:11:09:dd:63:6e:92:f2:1f:e9:62:2f:4f:4b:
         53:5e:91:4c:f2:ca:54:9e:32:53:d5:f2:83:dd:45:2e:b7:d8:
         7c:56:f2:59:66:86:5d:0b:62:97:36:3f:fb:56:ee:2d:f0:3d:
         9a:08:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:32 2026 by rpki-client