Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File:                     0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier:          ltxeH0QsJYbI67WKvEtE3QS4pxydQvtwV7pYBcD3hrk=
Subject key identifier:   3B:B3:81:A1:44:C8:C3:AE:29:56:4D:AF:4A:26:A1:DA:BA:3F:12:C2
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer:       /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number:          028B
Signing time:             Mon 27 Jul 2026 03:11:54 +0000
Manifest this update:     Mon 27 Jul 2026 03:11:54 +0000
Manifest next update:     Mon 03 Aug 2026 03:11:54 +0000
Files and hashes:         1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: Tr8oKvygSt/Tt+0lnzPi7LgwjHQrtBvQuff+jN3UL5Y=)
                          2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=)
                          3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
                          rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
        Validity
            Not Before: Jul 27 03:11:54 2026 GMT
            Not After : Aug  3 03:11:54 2026 GMT
        Subject: CN=6a66cc7a-a664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:78:f6:7a:98:7d:56:26:2a:55:da:cd:8a:
                    48:32:42:0e:a2:e7:2c:d5:11:1f:5d:a5:76:de:f0:
                    3e:30:c1:89:70:70:07:e2:c3:15:14:5e:ff:4b:d7:
                    a5:d2:00:79:59:e9:08:ff:2e:a2:18:0a:02:23:82:
                    aa:d2:8d:a0:10:3b:66:60:96:51:a7:81:c3:7d:10:
                    b0:3c:b7:9a:e2:09:0a:0b:50:24:71:1c:a9:1f:7c:
                    b0:9c:40:92:c0:81:14:a2:37:69:c2:8a:89:57:af:
                    8f:be:e8:bb:21:aa:38:e5:53:fc:98:c8:99:c2:75:
                    12:10:23:f8:ca:5c:4e:3b:ed:4f:c6:44:c7:cc:96:
                    a3:83:7c:46:9f:fa:9a:c9:5d:f0:b1:f4:f3:ea:33:
                    e1:16:1a:7d:f1:4d:ca:68:b7:a9:6a:3c:d4:3a:87:
                    d8:6c:96:5f:d5:20:0f:5e:f6:38:6d:7a:57:be:6c:
                    28:b1:37:aa:7b:cb:22:85:97:14:a9:2d:35:c3:d0:
                    23:dc:03:34:e0:ee:a1:67:81:a5:44:7b:05:69:d1:
                    6d:16:4f:0f:93:59:cf:8c:cd:a6:c0:aa:6d:78:4c:
                    2b:14:2b:6a:5f:8d:d4:55:b3:fd:73:10:61:c9:03:
                    23:cd:3c:24:08:f6:b9:a3:ac:79:d9:6b:7b:94:e7:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B3:81:A1:44:C8:C3:AE:29:56:4D:AF:4A:26:A1:DA:BA:3F:12:C2
            X509v3 Authority Key Identifier:
                keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:81:2c:9b:5c:b2:53:f1:c7:f8:ba:46:3d:35:d1:da:9c:b5:
         af:6c:16:b6:22:2c:43:f7:86:be:22:b2:76:b5:2f:d3:9a:de:
         61:f7:06:f0:3f:66:6a:5a:7b:cc:24:f2:70:d7:9b:2b:17:d8:
         78:69:30:f2:d3:a6:e6:37:36:7a:92:46:4a:6c:72:6b:83:3a:
         a1:7e:18:93:d0:3c:be:10:07:56:5e:aa:c7:ee:5d:12:a2:3a:
         19:df:d3:92:f0:82:71:81:28:5a:67:aa:60:33:80:09:28:a0:
         ab:85:33:ee:e9:07:c4:39:01:df:13:1a:88:a9:7a:93:17:b2:
         56:3e:2f:31:f6:6c:99:a9:37:7b:07:e3:f4:91:29:43:5d:ac:
         70:73:81:df:a0:cf:3e:22:25:a7:fb:58:5c:e6:8b:df:ce:44:
         c7:31:4c:ab:f3:d2:f3:f1:33:4b:94:6f:88:dd:5d:b9:23:5c:
         d0:b4:95:ed:d1:65:8d:8f:1e:40:ef:19:17:66:da:f7:44:d0:
         0a:97:d5:56:e5:62:20:37:4c:44:87:1e:fb:45:54:17:89:e1:
         e5:50:a6:9b:38:20:ae:b6:5f:2a:7f:b8:fd:0b:d0:8e:cb:29:
         18:36:06:47:90:a4:f3:d6:6f:13:19:5d:53:2e:e9:15:90:78:
         97:99:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:24:35 2026 by rpki-client