Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
File:                     oXIQwPgrRl5webuW88SZw_xMCog.mft (raw, json)
Hash identifier:          FYQEDpjCYXPkqczbeg1lbloP/WlH02OeZWb5mb6/8os=
Subject key identifier:   E6:D1:A0:91:22:11:A7:11:C3:58:AF:45:33:34:34:5A:16:09:73:57
Authority key identifier: A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88
Certificate issuer:       /CN=A91E208A/serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
Manifest number:          10
Signing time:             Mon 27 Jul 2026 11:30:29 +0000
Manifest this update:     Mon 27 Jul 2026 11:30:28 +0000
Manifest next update:     Mon 03 Aug 2026 11:30:28 +0000
Files and hashes:         1: oXIQwPgrRl5webuW88SZw_xMCog.crl (hash: wJb4xn0N8V+HdKZd7+y6IyE+Lg1Bo8dPANHvJe6CSTI=)
                          2: 1D13321C760911F1B67326767BA30FBC.roa (hash: gKFAP2rvC3dl4ISST8Sh3uKKIKoWICHC4vi311f7Wpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.crl
                          rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E208A, serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88
        Validity
            Not Before: Jul 27 11:30:28 2026 GMT
            Not After : Aug  3 11:30:28 2026 GMT
        Subject: CN=6a674154-502b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:cc:5b:3a:52:a6:bd:cb:fa:b5:03:7c:3a:
                    a8:c5:38:88:18:6e:94:df:07:38:9b:24:c5:b5:c5:
                    a1:cb:c3:a3:be:64:ed:11:b3:a3:58:ed:d2:3b:2b:
                    80:6f:db:e7:89:1b:58:bc:32:a5:a9:60:6d:b1:cc:
                    16:b6:db:d4:ad:50:22:8c:fe:e6:52:ca:be:6e:23:
                    e8:d6:46:29:15:49:4e:2f:37:ac:d9:11:e3:82:d1:
                    4e:87:bb:a8:5c:3a:0a:3d:23:65:1b:82:6a:35:3e:
                    0b:fa:cc:0b:2b:ed:e7:ea:c4:bf:ba:11:a1:c0:2c:
                    20:be:11:13:77:9d:a6:27:d5:57:fb:73:93:dd:17:
                    77:0a:04:fd:3f:fc:61:70:4f:dd:60:46:4b:52:ad:
                    b8:bc:62:63:9b:31:60:e4:63:72:15:11:01:0d:a6:
                    0a:e9:08:d9:f9:3e:04:28:96:7a:7e:84:6e:75:cd:
                    70:8f:7a:3e:06:0e:4a:97:6e:80:12:97:e9:1d:6d:
                    6e:6f:77:c7:92:0f:1f:98:d2:6b:d6:e4:12:30:bc:
                    68:c9:ed:49:cf:2b:19:12:71:ae:2f:a4:a9:72:be:
                    f7:2d:e2:fe:41:be:25:fe:d2:f6:2a:c6:ca:e5:e1:
                    d4:47:51:00:ff:f3:62:06:dc:ec:d5:f1:f3:cb:f7:
                    d6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D1:A0:91:22:11:A7:11:C3:58:AF:45:33:34:34:5A:16:09:73:57
            X509v3 Authority Key Identifier:
                keyid:A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:28:34:96:3f:58:2b:dc:22:26:70:f5:7e:73:b5:11:0b:
         52:6c:c0:ca:b4:0a:23:a8:5b:ef:1f:32:fd:dd:b2:de:5b:4d:
         29:00:d2:5e:58:12:41:e8:b7:11:6a:f5:58:6c:01:40:8a:cc:
         4d:77:57:9d:69:46:20:e4:76:0d:21:2c:be:16:9a:f1:52:52:
         f8:01:26:a8:84:71:70:ef:25:86:ae:10:de:d6:e6:fd:3f:ac:
         b0:67:99:79:de:57:02:bf:48:93:13:e8:6e:40:ad:a9:50:43:
         63:cb:6c:1a:cc:25:eb:cc:1f:22:09:d6:0d:c3:bf:d4:00:34:
         63:be:0b:2b:63:51:f2:16:f8:db:c9:92:9a:63:05:9c:e3:df:
         84:67:ec:fd:e1:f9:2f:ba:e0:e1:26:f3:80:2b:77:42:68:49:
         ad:ac:e6:6c:c8:2c:7f:e1:72:75:c3:e5:c5:13:d7:04:6d:42:
         4b:72:6a:85:af:ce:d6:76:f4:d8:16:18:0c:c0:fe:34:7e:b6:
         c9:bb:64:cf:a8:5e:10:1b:4d:e0:5c:18:83:9e:6a:9e:08:62:
         b0:21:a4:dd:a9:50:85:f9:e4:9b:45:76:8d:c6:73:10:3f:0f:
         d8:74:50:40:6b:ed:1f:e8:95:87:06:2f:61:3e:3c:e9:ec:41:
         25:8a:44:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:45:10 2026 by rpki-client