Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
File:                     oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json)
Hash identifier:          r6LBT/Ib0GBbAMfLEQ3KjJarktfutfxU8BKQ8cpq6kY=
Subject key identifier:   C6:88:A0:E4:52:51:79:3D:D3:E9:01:CC:B5:DE:27:44:57:2E:F5:B1
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Certificate issuer:       /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial:       09D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
Manifest number:          09C4
Signing time:             Tue 28 Jul 2026 20:15:47 +0000
Manifest this update:     Tue 28 Jul 2026 20:15:46 +0000
Manifest next update:     Tue 04 Aug 2026 20:15:46 +0000
Files and hashes:         1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: yzJvitRnapZ6MHa3UKFOG7sJYVvHxfKHXFcFP/HCgzI=)
                          2: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: JxvxI6LJ6TE3o05TEr7Y6rv7xRaFRfn8yJoeJorzJAM=)
                          3: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: qdHsepzcAOjuAg1w+GnK6uKVgZktZf14YKTA/qN5ags=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
                          rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2517 (0x9d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
        Validity
            Not Before: Jul 28 20:15:46 2026 GMT
            Not After : Aug  4 20:15:46 2026 GMT
        Subject: CN=6a690df3-d4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:7a:b1:b5:2c:36:86:aa:b8:64:3e:7d:d5:
                    1c:24:73:6e:f7:38:ba:31:bd:a0:13:b3:79:ce:b6:
                    8c:66:3f:8e:5e:a6:df:06:8b:af:fb:06:db:20:19:
                    5b:4f:6c:4d:1a:89:49:f7:73:21:cb:dc:ae:96:bb:
                    21:4d:4d:19:73:75:7c:3d:47:d7:5b:76:ef:7f:18:
                    2e:59:17:c5:13:f0:38:8b:56:56:11:e3:a6:ba:a1:
                    d2:9f:78:a5:a6:99:6e:3d:b9:c7:c4:b6:e2:c6:3c:
                    da:fa:27:3b:22:72:ca:2c:3b:ce:f0:31:53:cc:f6:
                    1a:b6:55:10:fd:1e:c6:81:7d:96:cd:b9:54:d4:e6:
                    be:a8:42:93:3e:50:fd:a5:bd:18:6a:ce:66:d9:22:
                    da:95:6d:56:aa:38:f1:c4:b1:d6:b0:72:0e:cf:c7:
                    0c:a4:30:14:2b:07:4d:cf:d7:e5:44:5c:0b:1d:d7:
                    fd:5e:5a:5c:0a:2e:af:64:d0:b2:f1:85:df:44:43:
                    90:bf:68:3b:83:b1:bb:31:dd:ca:ab:11:c5:88:ee:
                    a4:91:0b:0a:68:7f:f4:30:58:f9:5d:c7:82:47:2f:
                    65:8f:ca:c0:62:b5:d3:8b:d1:74:23:93:cd:4a:3c:
                    0f:10:40:c4:2c:55:ca:be:4a:40:ff:90:9d:a7:1d:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:88:A0:E4:52:51:79:3D:D3:E9:01:CC:B5:DE:27:44:57:2E:F5:B1
            X509v3 Authority Key Identifier:
                keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:94:14:61:07:75:9d:f8:74:7e:2a:dc:98:93:6c:42:6f:
         31:57:90:c9:dd:f4:b7:d6:3d:4a:c2:42:a2:6a:62:4e:a7:57:
         f0:77:32:d8:56:cd:77:a5:8a:55:da:e1:5d:25:8c:67:15:11:
         92:0a:05:27:2b:dc:65:cb:d8:29:e0:a9:be:d0:81:fb:dc:5f:
         2a:4b:34:fd:d9:8c:cb:bd:19:bf:67:0b:6e:3e:78:ce:e1:7d:
         cc:8d:31:6b:50:7d:3a:64:e3:31:59:02:16:d2:0c:39:c8:39:
         48:c1:8b:b8:98:fc:82:40:2e:6a:33:22:1a:ba:03:31:ff:21:
         fb:a0:ae:54:18:33:be:60:96:45:d0:ff:e8:e3:bb:74:82:49:
         2d:b3:34:11:95:44:64:72:fc:1f:3b:d0:1e:90:8d:df:d8:5a:
         f5:69:bc:a5:4d:ee:a3:06:2a:08:8f:00:5b:b1:ef:a0:2b:18:
         6c:c4:91:30:2b:b2:06:d9:8e:f9:c4:d5:30:a6:84:76:62:81:
         d0:a6:c3:84:aa:8d:55:4d:1a:2d:19:a2:eb:42:ac:10:cd:91:
         14:22:44:26:5e:00:4d:a7:de:0c:67:4f:c7:14:fb:31:d5:e6:
         ec:87:49:7b:1c:4c:23:78:7e:f2:ca:e8:7c:df:6e:4d:31:88:
         d4:e8:b5:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2
NTAzN0I5NDMwHhcNMjYwNzI4MjAxNTQ2WhcNMjYwODA0MjAxNTQ2WjAYMRYwFAYD
VQQDEw02YTY5MGRmMy1kNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCh6sbUsNoaquGQ+fdUcJHNu9zi6Mb2gE7N5zraMZj+OXqbfBouv+wbbIBlb
T2xNGolJ93Mhy9yulrshTU0Zc3V8PUfXW3bvfxguWRfFE/A4i1ZWEeOmuqHSn3il
ppluPbnHxLbixjza+ic7InLKLDvO8DFTzPYatlUQ/R7GgX2WzblU1Oa+qEKTPlD9
pb0Yas5m2SLalW1WqjjxxLHWsHIOz8cMpDAUKwdNz9flRFwLHdf9XlpcCi6vZNCy
8YXfREOQv2g7g7G7Md3KqxHFiO6kkQsKaH/0MFj5XceCRy9lj8rAYrXTi9F0I5PN
SjwPEEDELFXKvkpA/5Cdpx1w/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMaIoORS
UXk90+kBzLXeJ0RXLvWxMB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE
QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3
VHJUVThzNWY0MDVsQTN1VU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm/6UFGEHdZ34dH4q3JiTbEJvMVeQyd30t9Y9SsJCompiTqdX8Hcy2FbNd6WK
VdrhXSWMZxURkgoFJyvcZcvYKeCpvtCB+9xfKks0/dmMy70Zv2cLbj54zuF9zI0x
a1B9OmTjMVkCFtIMOcg5SMGLuJj8gkAuajMiGroDMf8h+6CuVBgzvmCWRdD/6OO7
dIJJLbM0EZVEZHL8HzvQHpCN39ha9Wm8pU3uowYqCI8AW7HvoCsYbMSRMCuyBtmO
+cTVMKaEdmKB0KbDhKqNVU0aLRmi60KsEM2RFCJEJl4ATafeDGdPxxT7MdXm7IdJ
exxMI3h+8srofN9uTTGI1Oi1Tw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:51 2026 by rpki-client