Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          bGpccMyUsXQK2aJ9jcEXVkX/IY/m/1JN+1IjkE1X1Us=
Subject key identifier:   B6:6E:BC:B1:FD:ED:EC:32:9F:CD:7D:A4:C4:30:23:09:D5:B0:91:BB
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       0411
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          0406
Signing time:             Mon 27 Jul 2026 01:28:26 +0000
Manifest this update:     Mon 27 Jul 2026 01:28:25 +0000
Manifest next update:     Mon 03 Aug 2026 01:28:25 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: wT8jeo+uDLrUgDETTrTeRRupZo6FTeIjRcEUQJXGOvc=)
                          2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: znPEMd590TcR/3IMAM9N/494V66QspV9NulehEdGj6g=)
                          3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: ioqugPebSQF2gysJZ13DhVnh23alifn8w8A9RVCFn1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: Jul 27 01:28:25 2026 GMT
            Not After : Aug  3 01:28:25 2026 GMT
        Subject: CN=6a66b439-2764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:71:40:75:37:c4:79:39:cf:df:5e:b0:d2:
                    1e:4f:67:0d:97:38:44:d2:5a:19:81:bd:54:e1:9f:
                    f8:a4:29:b4:04:a6:2c:d1:d6:c8:9b:c4:d1:d3:e6:
                    ce:04:ab:3b:87:56:82:64:8f:bc:4a:c9:75:86:f0:
                    fe:0d:0e:3d:78:b4:1b:5a:4d:4c:f1:00:82:b0:6f:
                    e5:e1:d6:9e:92:88:13:a2:ee:80:be:d1:cd:e7:29:
                    25:e8:e3:3b:1e:3b:60:68:58:59:d4:35:04:34:5e:
                    56:ee:3b:1b:15:2d:f3:e5:ad:42:d0:3e:f6:0a:4f:
                    52:5f:1e:1d:e1:77:59:1a:69:6f:e3:07:b6:00:08:
                    3c:28:e7:59:46:44:c1:bc:e4:8a:7c:05:5d:fd:cf:
                    dc:5b:75:77:5e:bf:1b:69:df:3f:e0:8c:39:b8:c6:
                    75:1e:1b:50:e0:23:96:12:48:29:df:b0:0c:8b:48:
                    23:2f:22:bc:a1:f6:aa:0b:b3:66:cc:01:cd:3f:52:
                    38:4f:0f:ce:69:4c:35:0b:9c:19:02:cc:97:06:2a:
                    67:2d:cf:2d:10:95:7a:81:59:a3:1f:28:cd:2a:c3:
                    3d:75:ac:36:c4:58:59:16:e3:00:c7:b0:10:e4:4a:
                    a4:7f:7d:64:32:80:0b:5d:e0:cf:40:2d:9f:f7:f8:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:BC:B1:FD:ED:EC:32:9F:CD:7D:A4:C4:30:23:09:D5:B0:91:BB
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:91:8d:b4:1f:7a:8e:ab:cc:cf:3e:7d:44:70:31:ba:d1:
         d4:0e:71:8f:da:ce:86:2e:52:7a:af:a9:92:92:65:56:e9:29:
         a5:92:61:de:1b:6b:16:11:b6:fe:fc:51:8b:a7:08:c9:ff:ab:
         08:b7:54:d1:bd:46:c7:96:0a:d4:d1:53:c5:c3:d6:10:2b:ea:
         ea:b4:e1:94:dd:9d:ee:49:93:e2:99:e4:f5:84:5a:c7:0e:5b:
         4b:f2:bd:12:45:08:ed:29:a1:1f:dc:ab:86:9f:79:b4:74:c5:
         d7:22:80:ce:b3:bf:fc:96:ad:54:0b:e0:bf:7b:eb:59:b5:10:
         ef:5b:3e:16:bc:56:54:0c:a8:1a:99:1a:81:48:0d:62:2e:dd:
         9a:25:7d:9e:11:82:8a:4f:6c:ba:c3:e3:b1:a7:8d:92:2d:0c:
         f8:97:ce:2a:57:80:72:b9:eb:f9:b0:0a:37:ff:b6:f4:aa:89:
         33:99:c6:0d:01:18:32:5d:23:a2:62:7c:a8:de:0f:f4:09:46:
         d7:29:2a:92:64:64:19:5f:d3:cc:a3:a9:66:9f:34:55:06:75:
         4c:60:80:78:08:ac:ec:50:b2:f7:4e:7f:2b:a5:4c:70:78:1f:
         e7:2c:66:d8:a7:7a:0e:53:c7:92:aa:1c:12:bb:75:23:23:d1:
         2c:34:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:40 2026 by rpki-client