Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
File:                     oUUkHZgwrySnFWc1ElXsjn7VPv4.mft (raw, json)
Hash identifier:          Bbg8i1nkqcDzq/NlcffZwLNWsAAKnp81yDn3Td0up04=
Subject key identifier:   B5:FA:03:33:D6:83:33:64:B6:E2:1F:08:83:90:FB:0C:C3:1E:58:CE
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Certificate issuer:       /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
Manifest number:          DE
Signing time:             Mon 27 Jul 2026 08:58:31 +0000
Manifest this update:     Mon 27 Jul 2026 08:58:31 +0000
Manifest next update:     Mon 03 Aug 2026 08:58:31 +0000
Files and hashes:         1: oUUkHZgwrySnFWc1ElXsjn7VPv4.crl (hash: Ca74uXLEk6+r6ZOlc+XN+HiuZV/DrkMh63yahXE7q38=)
                          2: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (hash: zRRASQfNY/IUyP28hDWRYbCWpGy8GvNHBf7/Zg6e0kQ=)
                          3: C24679DC741211F0808A8240C4F9AE02.roa (hash: N7HLFHANn01+NhgR1Pjfm0vM2oOkPaw9sH4Q3c5dgnI=)
                          4: CA9147E64AD811F1881BEE7FC5833773.roa (hash: tJvZEShvl0XSM24iAjhyNDnXr1neGghFyUscgQfBVUw=)
                          5: B015DEC49D0211F0992DA43DC4F9AE02.roa (hash: XNKmAaFf5HoukGTwreoWJabf3NdToWkx6WrL3K+h2cI=)
                          6: 90CF95CE66DD11F09FD37312C4F9AE02.roa (hash: 61YOBpN768smaHlb7VNUU/OIP9xDMKXDWqFb5RlTs1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
        Validity
            Not Before: Jul 27 08:58:31 2026 GMT
            Not After : Aug  3 08:58:31 2026 GMT
        Subject: CN=6a671db7-4122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:c6:73:d7:2f:62:a6:ad:8d:f6:e3:f7:b7:
                    73:61:54:f6:b0:e2:bd:66:9a:76:3c:93:31:95:c3:
                    5d:42:59:c0:96:0c:3b:05:27:a9:c8:9a:0b:c5:48:
                    0a:a7:36:31:6a:5d:01:1b:d4:ee:47:ff:73:38:ec:
                    68:bf:d0:1d:7c:c9:52:c3:81:6b:9d:08:a5:17:1b:
                    48:49:10:5a:aa:18:fe:6d:e2:ab:8a:d6:4d:bd:ba:
                    ca:95:15:91:80:02:c4:3f:62:91:1a:e1:e7:aa:cc:
                    c5:36:73:80:42:e4:26:65:65:b8:f6:7f:dd:b1:d7:
                    e3:8a:54:86:21:28:e5:e7:0e:2b:f1:ab:1b:47:49:
                    93:6a:b2:36:9b:3a:fb:76:94:cb:c7:91:74:bc:21:
                    67:95:96:fe:dd:8c:bf:51:db:5b:5e:de:80:10:76:
                    2e:b4:c0:45:81:30:d8:e6:15:40:db:98:28:06:65:
                    0c:b3:29:79:9d:d4:61:d1:de:e7:7c:39:52:84:02:
                    36:cb:74:34:7f:28:61:4c:1d:19:16:5a:48:6b:da:
                    99:41:7c:92:99:7c:de:ee:63:d4:50:cb:72:90:50:
                    47:5b:bb:04:c2:63:10:68:26:ed:4b:4f:0a:55:5e:
                    c7:80:56:51:38:ff:a2:62:5c:3e:1a:3c:7a:42:50:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FA:03:33:D6:83:33:64:B6:E2:1F:08:83:90:FB:0C:C3:1E:58:CE
            X509v3 Authority Key Identifier:
                keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:25:64:bc:c1:a0:b0:2d:28:1d:92:0d:5c:f7:67:81:47:
         44:d9:fc:81:cf:9f:f6:c6:d2:0c:53:6e:c7:5e:98:c5:c8:97:
         d1:68:e9:63:d6:e5:fc:7e:ee:78:14:c5:d5:9e:94:28:da:59:
         f2:b7:4a:ac:15:27:41:61:59:34:1c:39:4f:31:7c:ae:06:46:
         61:f3:3e:d0:df:99:d2:ee:35:d7:c9:24:71:fe:70:a8:ef:13:
         84:12:cd:af:3b:47:3f:04:c8:32:29:86:ce:81:e9:c4:36:21:
         59:20:af:8f:9c:5f:b1:29:79:44:27:b9:d6:f3:26:51:69:18:
         33:70:86:3c:3c:df:8d:e5:8f:ab:09:90:03:c7:42:73:21:3a:
         db:57:e2:bf:95:47:14:57:52:ec:24:8b:ac:23:ed:2a:28:75:
         3a:28:dd:94:2b:4e:d4:47:c8:5c:e4:31:e4:98:24:4c:87:73:
         c0:1b:24:1d:58:5f:a0:45:6d:6b:26:61:8a:f0:43:f9:fa:26:
         00:db:df:ad:f7:6e:cf:86:b2:ec:cd:12:87:27:68:22:2f:90:
         c7:bb:44:56:a1:64:ae:10:d9:92:c2:b7:15:06:e2:09:59:05:
         a8:63:fc:9d:af:9a:8e:82:85:a1:01:fb:cd:4e:eb:82:6f:64:
         17:65:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:45 2026 by rpki-client