Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
File:                     _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json)
Hash identifier:          FyYnA5Qc4JlDcRiBXo0yWJgmw3wfxO1D1BhwZHm5ELY=
Subject key identifier:   AC:AD:15:2E:4E:BE:E8:1E:E2:8D:B0:C7:2F:7E:80:88:E9:F1:CA:46
Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE
Certificate issuer:       /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
Certificate serial:       091D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
Manifest number:          08FE
Signing time:             Tue 28 Jul 2026 20:41:15 +0000
Manifest this update:     Tue 28 Jul 2026 20:41:15 +0000
Manifest next update:     Tue 04 Aug 2026 20:41:15 +0000
Files and hashes:         1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: mO8BhU10/c81j6Gu0KBUOxGZdZ1jdQ71V5PmQrAfv60=)
                          2: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: +lxeSugWEuY86E4w4UGBy7QvT+6uw0dBO3CLwKjhb3k=)
                          3: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: d8G/TfpNpL6HX37ocKvM5TsVlVjVR76JD7mZYT1iKdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl
                          rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
        Validity
            Not Before: Jul 28 20:41:15 2026 GMT
            Not After : Aug  4 20:41:15 2026 GMT
        Subject: CN=6a6913eb-2e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:0d:85:7f:67:02:2e:21:20:62:bd:f4:bb:
                    0d:aa:f7:17:d3:7b:9b:cf:34:0f:07:bb:e0:ca:f1:
                    5d:ea:e0:b1:00:2c:ab:bc:49:21:c6:2d:a3:69:c1:
                    fe:73:91:9c:4c:a5:a4:fd:b1:5b:15:d5:17:69:31:
                    00:c3:f0:0b:14:22:b3:24:0c:4d:af:8f:42:fa:25:
                    ca:88:6e:0c:bf:19:03:01:f8:67:3b:eb:09:fc:30:
                    ea:1c:5a:1b:c9:0c:6b:0e:ff:2f:ec:6d:01:ce:bf:
                    6d:8c:06:57:3e:3b:86:ac:12:0b:f0:00:f2:80:96:
                    85:66:1a:94:f2:c6:ed:e9:b5:d4:74:fc:ab:03:80:
                    31:a1:bf:26:cc:69:01:e1:40:ec:02:86:aa:a2:91:
                    f0:aa:b1:b9:cd:35:19:09:ba:85:2c:39:8b:fe:e6:
                    91:c8:54:18:07:58:3e:c7:df:af:3b:cd:5c:8e:b8:
                    ee:d6:5b:90:27:be:35:1c:14:6b:72:45:f5:7f:4b:
                    77:2f:c2:ce:24:d4:03:17:eb:24:50:0a:43:1a:8b:
                    0b:7a:f1:80:1c:54:6d:a4:2f:fb:92:1a:f7:c2:6c:
                    91:a7:5e:b1:88:a7:c2:2e:f8:d8:cc:7d:ee:ed:52:
                    fe:3e:a6:68:c6:8c:78:a8:b5:92:63:07:27:2b:65:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AD:15:2E:4E:BE:E8:1E:E2:8D:B0:C7:2F:7E:80:88:E9:F1:CA:46
            X509v3 Authority Key Identifier:
                keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:dd:b2:8d:05:bc:c8:05:0b:33:0d:c2:a0:47:e4:4b:24:84:
         6a:fb:0a:1d:a0:61:00:1f:dc:bf:58:ed:3e:bc:de:50:73:ba:
         e3:ef:3c:05:29:eb:87:bc:c9:93:2e:46:c9:f8:5b:39:bf:74:
         f3:f2:c7:48:24:23:56:aa:44:64:f8:74:66:f1:82:75:d8:05:
         72:2d:38:6f:0c:8f:0e:0d:97:da:7d:c9:5b:14:09:cb:4a:d7:
         a1:ef:11:05:f0:80:80:5d:ec:25:03:7c:a0:38:8d:72:e9:c6:
         2a:c2:46:46:de:8f:45:2a:dc:33:04:2c:4b:ed:4e:38:ed:8e:
         7b:39:4d:83:bd:72:a2:3d:38:d7:cd:f1:32:a0:db:02:c4:a6:
         35:2e:52:7f:2f:9c:00:6e:4f:68:d5:78:8e:55:9c:41:70:8e:
         79:3d:18:11:52:dd:19:79:54:15:7b:f9:7c:06:dc:61:35:a9:
         3f:12:98:00:c3:27:71:8c:99:21:dd:0b:bc:a4:8a:f1:01:b9:
         48:3c:f3:12:49:f1:08:07:85:46:a0:d0:99:4a:29:50:83:0a:
         f3:7c:af:db:54:f1:59:34:01:07:44:14:73:14:11:f8:47:e0:
         8c:c9:e4:1f:3f:1e:09:c0:51:d1:95:ea:5d:58:7c:90:b3:de:
         5c:28:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:38:25 2026 by rpki-client