Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File:                     o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier:          d8CmP8/RbDFf7l7Foh3BIeO7kttBCUFlL9EQ/Wp3SwY=
Subject key identifier:   6C:25:7B:05:D2:99:11:33:19:51:8C:C4:E0:AB:2C:58:22:F6:51:75
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer:       /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial:       040C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number:          0405
Signing time:             Mon 27 Jul 2026 01:29:03 +0000
Manifest this update:     Mon 27 Jul 2026 01:29:03 +0000
Manifest next update:     Mon 03 Aug 2026 01:29:03 +0000
Files and hashes:         1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: WpbEqGSDhrK5QJyxG1egt/pWvrka4Hm4TEfsgW8Wd+U=)
                          2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: omBdwTJjBpYLM0wYV64/jRWywyvUBhT0d+jsji8w+eY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
        Validity
            Not Before: Jul 27 01:29:03 2026 GMT
            Not After : Aug  3 01:29:03 2026 GMT
        Subject: CN=6a66b45f-1150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:4f:cf:82:e0:c1:a9:e3:00:2c:d2:fe:13:
                    42:a4:95:ca:85:f8:2f:75:16:c0:a2:05:87:ec:23:
                    a9:f1:be:09:3d:6e:8c:31:78:81:3c:37:f2:5b:62:
                    99:82:9e:7a:da:11:de:e6:7a:ca:6f:2b:77:81:99:
                    1c:b4:6f:ca:71:5a:cc:66:0b:e1:75:4b:0b:ee:31:
                    69:e2:f6:ff:fe:68:0a:5f:f3:95:ab:fe:3c:d7:ff:
                    51:5d:24:fb:6f:17:bf:ae:c3:0e:e4:dd:28:6c:b1:
                    3c:a9:53:8f:1f:37:9c:52:e7:16:ee:18:29:23:ba:
                    64:10:b7:52:62:8b:a7:27:c4:e9:9f:c8:b5:66:00:
                    a2:a7:72:b1:a0:27:61:c1:e6:be:4b:0c:7c:a4:f5:
                    9c:d4:4d:7b:9c:6c:43:26:51:7b:2b:01:41:5b:8f:
                    a1:a1:cc:3d:05:3d:7f:b2:5a:29:c2:9a:97:42:c1:
                    c1:4c:8b:34:b1:dc:5d:35:81:05:77:36:6d:b3:db:
                    56:13:60:ea:fc:e5:1c:6c:05:2a:78:1f:6a:ac:ba:
                    e3:d1:b8:5f:9f:f7:29:a3:a5:b7:f0:cb:60:45:55:
                    f1:e4:2c:50:fa:6d:ee:66:21:26:04:4b:2a:2b:43:
                    84:36:81:e2:8c:48:1d:30:11:8a:64:56:ad:4d:63:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:25:7B:05:D2:99:11:33:19:51:8C:C4:E0:AB:2C:58:22:F6:51:75
            X509v3 Authority Key Identifier:
                keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:be:82:dc:77:be:a3:d4:e5:08:58:4f:2f:28:75:86:c4:
         61:41:7a:71:e9:b1:bb:9e:de:13:0d:bf:b6:9b:f7:8e:f7:d6:
         8f:13:ee:cf:87:67:3e:4b:e1:c3:dd:5d:94:06:e7:60:57:e8:
         e8:1f:cf:ef:de:84:51:fa:b8:52:c5:a0:9b:91:2a:d9:38:c2:
         f4:a8:b2:5a:fc:03:02:f5:40:d6:e1:51:3f:a4:1c:85:57:1f:
         8b:27:c8:f3:ba:eb:9e:ef:c9:93:db:7c:86:5b:f1:0a:43:a8:
         40:c4:8c:d7:57:eb:2e:93:b8:ad:a6:3b:52:c0:b8:2c:57:ad:
         0d:74:cd:1c:85:cd:b8:f7:a7:7e:43:c1:7d:3f:f2:ee:c2:7d:
         bc:0f:4e:d3:e5:aa:f1:75:c6:87:52:a7:b2:82:f6:99:af:4a:
         f5:8f:f4:9b:64:32:71:14:40:fa:65:80:07:8b:7d:86:da:f9:
         2f:51:37:e5:3b:a0:e3:67:9a:6f:aa:9f:19:b1:c9:aa:06:bb:
         ed:2b:06:50:4b:5a:07:0c:93:83:e3:fa:21:b6:d7:bc:e7:30:
         56:fe:d8:ab:dc:2e:8f:87:67:ea:ab:65:a2:f1:2b:6f:a6:78:
         59:f5:88:f0:76:1a:b0:d3:a0:a1:a3:55:4c:3b:c0:68:17:71:
         f7:8f:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:54 2026 by rpki-client