Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
File:                     Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json)
Hash identifier:          +zGJWRzmNWLQhUkX/ZAN4msvp3nhc72jUvRbFjhW1oU=
Subject key identifier:   21:5E:BA:D4:DC:90:7E:7A:01:63:CF:C3:14:27:6D:E8:70:F9:85:DF
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Certificate issuer:       /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial:       341E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
Manifest number:          33A9
Signing time:             Tue 28 Jul 2026 15:29:05 +0000
Manifest this update:     Tue 28 Jul 2026 15:29:05 +0000
Manifest next update:     Tue 04 Aug 2026 15:29:05 +0000
Files and hashes:         1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: V3wd2rWFPXiB+BKgD/CzmECViTAc2IlJxfynifp80yM=)
                          2: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: D3M6wzI4okhGRiWpslBcCzchggkeDwBoIQLL3NU2Nsk=)
                          3: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: ywYO0R2h+KCbkByqxPNiOzqIp/WyrJLVsBz2TrN/mq0=)
                          4: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: YkWYNrxgO0n51u4sQpXTHmpzMu712XYl/YRt4XSQRKE=)
                          5: 3729B51E870611F18212677BADEE528E.roa (hash: KmqkE4g5dl2qjiw7G2tcNNphjk7q9UbrdXY3bWAn7D8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13342 (0x341e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
        Validity
            Not Before: Jul 28 15:29:05 2026 GMT
            Not After : Aug  4 15:29:05 2026 GMT
        Subject: CN=6a68cac1-eca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:17:27:24:c9:72:e6:70:3d:41:85:d3:54:
                    23:4c:d9:8a:64:d4:f9:26:96:06:17:f1:25:66:1e:
                    c9:5d:52:8f:f6:fa:b2:55:0a:55:9e:a9:71:65:e0:
                    47:40:66:5e:0d:6f:98:fe:ca:dd:48:35:2e:b0:9d:
                    6a:62:3d:da:dd:16:23:f8:1a:b6:59:32:55:1d:fc:
                    06:01:65:92:95:cb:bd:ae:d2:94:98:f5:d6:a6:ec:
                    fe:9d:04:fe:ad:7f:13:65:1c:f0:98:63:bf:47:6a:
                    19:12:b7:cf:0f:79:10:1f:5d:b2:cb:79:e4:14:70:
                    15:17:b8:d8:0d:27:6b:25:26:01:64:e8:25:a3:0d:
                    51:cd:c9:43:f9:98:16:17:7d:77:34:c4:d2:1e:df:
                    53:d8:60:db:78:19:55:c7:35:85:ad:74:19:14:b4:
                    e1:f5:26:af:9d:ec:2d:ec:c2:f5:0b:b5:85:c5:20:
                    d2:59:56:9c:f4:43:c9:d4:7c:01:57:eb:f3:93:8c:
                    87:1e:ba:e0:c6:cd:79:52:29:6d:a0:f4:3d:2e:d2:
                    ac:9c:71:4d:19:ea:4d:ef:21:ce:e5:c3:0c:06:73:
                    ca:ae:f6:d2:3d:b7:22:af:36:c2:17:c0:b9:5b:fb:
                    08:de:2c:db:de:43:e6:86:5b:b2:d2:2c:a2:f5:f7:
                    a3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5E:BA:D4:DC:90:7E:7A:01:63:CF:C3:14:27:6D:E8:70:F9:85:DF
            X509v3 Authority Key Identifier:
                keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:be:d3:20:04:a3:a4:16:b5:4a:06:22:0f:b9:9c:2e:64:
         25:c8:eb:3e:f6:ab:3e:5f:e0:7b:75:a4:01:0c:c7:24:9d:0b:
         d7:ce:4f:bb:32:6c:e0:46:84:fc:9a:b8:c7:d6:07:37:da:5b:
         af:99:66:aa:76:85:0f:cc:41:ed:a5:94:bc:ef:ed:dd:49:96:
         0a:c4:e8:89:b2:ae:7f:74:eb:fd:f0:96:29:68:8c:2e:0e:37:
         79:19:50:1a:24:ba:da:f8:fa:6a:75:de:50:a1:ec:62:7f:8b:
         fd:fe:a6:72:3f:f5:10:72:47:e4:ae:53:e9:4e:20:e4:24:be:
         28:6d:a3:99:ce:d1:d3:c6:d4:40:0c:61:4d:50:65:f4:6e:22:
         5c:40:2e:92:09:81:49:81:80:ad:0e:eb:df:11:5c:2c:a1:26:
         1f:24:d1:0e:6c:24:de:c5:d5:fd:76:39:ff:66:cb:a5:ce:a5:
         f9:f3:50:b4:3d:e9:0b:dd:36:c3:a4:57:a8:81:39:40:05:58:
         9f:7a:b7:90:e6:12:02:1e:3a:99:32:36:c1:cd:97:cc:0e:bf:
         da:fe:e3:c4:b1:ec:1f:6d:e8:cf:8d:5d:b4:66:9a:5e:8a:4f:
         14:62:38:d4:1c:cd:d4:ee:03:39:b3:ef:1e:fd:d1:b2:b8:3c:
         90:5c:84:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:52 2026 by rpki-client