Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File:                     ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier:          G5BpdGXoPclE05FQwiq2m0X07dUq7C+acbtfsrHUxrY=
Subject key identifier:   62:2C:35:1B:FF:7F:01:D0:3B:87:34:8E:25:AE:5C:74:2D:41:01:D2
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer:       /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial:       02CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number:          02C4
Signing time:             Mon 27 Jul 2026 02:37:21 +0000
Manifest this update:     Mon 27 Jul 2026 02:37:21 +0000
Manifest next update:     Mon 03 Aug 2026 02:37:21 +0000
Files and hashes:         1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: IQ+yfkZFVIIZKTWk5rKW4VloaONKpt0nk+Z5AshEl2U=)
                          2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: cXCRp9D8nLh2OADm8x+9jvTxFsaNkGvRt8yDC/0Utus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
        Validity
            Not Before: Jul 27 02:37:21 2026 GMT
            Not After : Aug  3 02:37:21 2026 GMT
        Subject: CN=6a66c461-da47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:5b:31:e8:0a:df:8d:55:16:ea:15:54:c3:
                    a6:55:73:43:14:c5:a9:82:2c:fe:99:5f:9e:68:27:
                    1e:09:b0:d9:5a:a8:11:3f:4e:f4:07:fb:5b:52:8a:
                    2f:95:d6:be:39:92:0c:c9:18:39:fb:03:cd:87:0c:
                    78:aa:0b:67:4d:9f:85:33:de:99:e4:85:94:e9:9b:
                    79:77:f7:59:a9:2f:fa:90:af:11:68:0a:43:5a:8f:
                    9f:51:a2:6d:c6:5c:69:b0:8b:c2:ed:5f:01:50:58:
                    9a:ff:40:39:be:17:ad:e1:02:dc:b8:f3:a1:8d:90:
                    96:1d:2b:94:9d:62:f3:79:d5:96:3b:ef:ee:59:d6:
                    4d:4f:b5:d8:48:40:29:03:52:8d:cf:0d:a1:58:1d:
                    9b:cd:7f:4e:18:24:31:30:df:ef:c5:8d:ba:03:ce:
                    3d:24:af:3b:52:3f:a6:f9:56:3b:1f:b4:fd:28:a5:
                    d0:71:b3:8d:47:62:8c:0c:0b:9a:9a:33:c0:fa:42:
                    da:64:28:55:f6:12:55:08:ef:68:85:d6:54:07:43:
                    30:22:79:bc:df:9b:d6:f2:55:c8:ca:fd:3b:8b:0f:
                    fe:a1:32:1b:08:e0:c5:e1:b8:06:61:32:b9:02:7c:
                    60:cf:c3:74:75:87:bf:14:18:c2:2e:ad:20:b9:84:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2C:35:1B:FF:7F:01:D0:3B:87:34:8E:25:AE:5C:74:2D:41:01:D2
            X509v3 Authority Key Identifier:
                keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:95:b1:f5:cb:46:30:70:7e:ed:d6:32:4b:40:7e:e3:72:2b:
         0e:ee:ce:a9:16:8f:33:b8:33:39:fc:10:89:38:15:ea:0d:19:
         e5:75:74:d4:b8:6c:aa:4a:dd:7c:8b:2a:0a:4d:6d:4f:0b:0c:
         12:03:85:e5:e6:19:11:9f:99:c5:bd:eb:51:46:00:b3:0d:94:
         63:c5:80:b8:90:b9:e8:9b:0f:4f:30:11:3b:42:33:9e:e7:94:
         87:98:3e:dd:ab:21:d0:60:56:9e:39:ed:27:c4:64:58:0a:fb:
         3a:ee:f5:99:aa:c9:11:02:b4:53:02:36:d2:36:a0:10:66:11:
         63:a3:48:8f:4c:1d:0f:0f:67:4f:2e:2b:e0:25:8e:65:03:07:
         8a:67:c0:fc:e4:1e:62:c1:ca:3f:a4:c9:4f:e4:f6:f3:07:2e:
         95:da:8c:26:d1:69:53:50:a3:92:d0:c6:90:66:50:9c:a2:9a:
         9f:80:1b:a0:5e:18:e6:be:3c:70:37:b4:1c:31:c6:87:f9:8c:
         3b:75:37:61:2c:ae:04:89:30:44:69:0b:21:ae:a0:80:1e:07:
         96:ba:a1:66:a7:40:09:1b:bf:ef:66:2a:84:bc:73:19:c1:f8:
         d4:75:ee:44:b2:1b:9e:bc:c5:05:d4:36:39:39:02:08:17:d9:
         19:f8:b9:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhBQzQxMTAvBgNVBAUTKEEzMzc2MzNFMzU5MTk5NDBCRDcyOUQ5MTJGMzY2MzE1
OEMyNjdDMzYwHhcNMjYwNzI3MDIzNzIxWhcNMjYwODAzMDIzNzIxWjAYMRYwFAYD
VQQDEw02YTY2YzQ2MS1kYTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyk1bMegK341VFuoVVMOmVXNDFMWpgiz+mV+eaCceCbDZWqgRP070B/tbUoov
lda+OZIMyRg5+wPNhwx4qgtnTZ+FM96Z5IWU6Zt5d/dZqS/6kK8RaApDWo+fUaJt
xlxpsIvC7V8BUFia/0A5vhet4QLcuPOhjZCWHSuUnWLzedWWO+/uWdZNT7XYSEAp
A1KNzw2hWB2bzX9OGCQxMN/vxY26A849JK87Uj+m+VY7H7T9KKXQcbONR2KMDAua
mjPA+kLaZChV9hJVCO9ohdZUB0MwInm835vW8lXIyv07iw/+oTIbCODF4bgGYTK5
Anxgz8N0dYe/FBjCLq0guYSVrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIsNRv/
fwHQO4c0jiWuXHQtQQHSMB8GA1UdIwQYMBaAFKM3Yz41kZlAvXKdkS82YxWMJnw2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFDNC9DOEZFMTc0QzU3
NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1VQzljcDJSTHpaakZZd21m
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL296ZGpQaldSbVVDOWNwMlJMelpqRll3bWZEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEFDNC9DOEZFMTc0QzU3NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1V
QzljcDJSTHpaakZZd21mRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUZWx9ctGMHB+7dYyS0B+43IrDu7OqRaPM7gzOfwQiTgV6g0Z5XV01Lhsqkrd
fIsqCk1tTwsMEgOF5eYZEZ+Zxb3rUUYAsw2UY8WAuJC56JsPTzARO0IznueUh5g+
3ash0GBWnjntJ8RkWAr7Ou71marJEQK0UwI20jagEGYRY6NIj0wdDw9nTy4r4CWO
ZQMHimfA/OQeYsHKP6TJT+T28wculdqMJtFpU1CjktDGkGZQnKKan4AboF4Y5r48
cDe0HDHGh/mMO3U3YSyuBIkwRGkLIa6ggB4HlrqhZqdACRu/72YqhLxzGcH41HXu
RLIbnrzFBdQ2OTkCCBfZGfi5PA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:55:58 2026 by rpki-client