Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft
File:                     okltnZFYW2aRdHCbDN4x_OMbL1o.mft (raw, json)
Hash identifier:          3dHtoIoz4yEGRp2hTbPlb64d3fTzVEjlsQCV4ZzNmrM=
Subject key identifier:   82:A2:89:FD:11:A3:C9:67:26:A5:70:B2:88:9B:B0:98:11:62:58:1C
Authority key identifier: A2:49:6D:9D:91:58:5B:66:91:74:70:9B:0C:DE:31:FC:E3:1B:2F:5A
Certificate issuer:       /CN=A91B67D6/serialNumber=A2496D9D91585B669174709B0CDE31FCE31B2F5A
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft
Manifest number:          06
Signing time:             Mon 27 Jul 2026 11:36:36 +0000
Manifest this update:     Mon 27 Jul 2026 11:36:35 +0000
Manifest next update:     Mon 03 Aug 2026 11:36:35 +0000
Files and hashes:         1: okltnZFYW2aRdHCbDN4x_OMbL1o.crl (hash: ub1jU5mvZ/MLAU1xxnItjHKuWb5yKUteXkY1Zs6HhqM=)
                          2: 0385DA1883C711F189BAF24284A30FBC.roa (hash: SWSLd1xBawCW6ENPqMycNBRpduG6/fZvzOANRn5i3gk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.crl
                          rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B67D6, serialNumber=A2496D9D91585B669174709B0CDE31FCE31B2F5A
        Validity
            Not Before: Jul 27 11:36:35 2026 GMT
            Not After : Aug  3 11:36:35 2026 GMT
        Subject: CN=6a6742c4-d9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:54:ff:44:d9:4f:69:e5:f0:5a:6f:8b:78:
                    6d:df:5d:69:8a:f7:5d:27:e1:d3:09:d9:7b:f6:5b:
                    ad:24:53:c4:25:9e:ae:ec:18:fb:e9:4d:92:b5:fa:
                    ce:c6:64:f8:64:83:5c:90:f7:9c:af:9c:e9:50:e9:
                    e6:3b:c2:a3:83:80:74:6d:31:fb:f6:3d:6a:7b:d6:
                    96:34:9b:bb:63:1c:31:2d:ef:2b:65:5f:b9:73:6b:
                    5a:a7:a7:94:20:42:de:32:d3:91:6f:8f:d0:9d:e2:
                    d8:79:b2:b8:cd:9a:49:20:39:5a:74:2a:a7:aa:84:
                    83:40:50:ce:20:35:41:47:19:32:4b:fb:f4:cf:6e:
                    3c:ac:ed:f2:7d:6b:b7:5e:2a:1a:32:88:92:8d:f7:
                    c4:20:48:c8:b4:17:bc:a1:93:3e:c3:ed:96:d9:b9:
                    9c:31:29:49:9b:3f:ff:9a:dc:01:3d:df:90:ed:71:
                    4b:42:19:3b:3c:fb:5d:33:8e:9f:9a:52:f7:79:c1:
                    7d:af:52:87:6f:1b:07:6f:10:da:c1:43:a0:ba:97:
                    54:ff:31:8c:4a:8b:7b:ae:67:5f:0b:c1:1b:6e:7d:
                    fb:8c:bd:00:31:7e:44:dc:93:38:8f:da:4c:2c:1c:
                    1e:48:02:2a:9e:e3:69:1b:0e:4f:70:1e:ff:89:73:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A2:89:FD:11:A3:C9:67:26:A5:70:B2:88:9B:B0:98:11:62:58:1C
            X509v3 Authority Key Identifier:
                keyid:A2:49:6D:9D:91:58:5B:66:91:74:70:9B:0C:DE:31:FC:E3:1B:2F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/okltnZFYW2aRdHCbDN4x_OMbL1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D6/826D599083C311F1BC885B3F83A30FBC/okltnZFYW2aRdHCbDN4x_OMbL1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:15:89:5d:32:60:c5:ce:f2:f1:bd:31:8e:95:88:e3:97:b3:
         f2:26:6b:68:3b:3a:43:e6:1d:10:9a:89:60:b7:66:a6:4a:dc:
         f7:dc:9f:54:26:90:9a:2e:b3:fc:7b:8d:f5:f9:07:be:78:b5:
         a9:49:40:d5:0f:2e:e0:e3:fa:a0:14:6a:7d:01:ab:fa:e9:fa:
         55:48:8b:c9:64:d9:da:3e:f0:8e:0a:fe:1c:eb:27:16:5b:e0:
         14:dd:a4:7f:09:c4:4d:12:87:78:37:a4:ce:fb:c5:85:1f:27:
         80:91:44:73:3a:6b:6d:79:00:80:26:42:bb:4b:f9:2c:f1:60:
         82:7a:5e:21:19:13:c6:63:9a:9d:41:8c:7e:ab:b5:77:17:e7:
         57:8d:be:fb:11:34:5b:d1:a6:22:cc:f1:8b:d6:88:bb:1a:95:
         f4:54:12:f8:17:bf:65:74:1e:64:3e:5e:f6:47:7b:ba:43:42:
         34:0b:ad:4e:8a:3c:d1:58:58:5d:e0:e2:16:94:aa:ce:a8:73:
         86:e7:d3:e9:78:2a:18:c9:2c:f4:95:05:49:f0:ee:03:3a:77:
         88:7f:4e:fa:29:47:a1:30:ae:6d:cc:2a:c4:e7:5a:00:2c:80:
         05:0d:90:95:f7:77:04:f2:ac:14:89:8a:a0:2d:8c:a2:ff:05:
         4b:4c:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:07 2026 by rpki-client