Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
File:                     oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json)
Hash identifier:          b4zhizOoXGvDvC6qjXIAFMqItkloDN2SMP+MhhzmSdo=
Subject key identifier:   7C:47:5F:F3:1D:03:AC:AF:B4:79:AB:4C:28:A1:3A:54:D7:82:D9:E7
Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73
Certificate issuer:       /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
Manifest number:          026C
Signing time:             Fri 17 Jul 2026 02:56:57 +0000
Manifest this update:     Fri 17 Jul 2026 02:56:56 +0000
Manifest next update:     Fri 24 Jul 2026 02:56:56 +0000
Files and hashes:         1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: vcDErs292LnEbL8d/8jnOdx3UxijOCabRxf6V1Jz2Is=)
                          2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: zHAD2aRjfS80FrmwnylIxolsBZEI+CFeAtlJuiT/1ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl
                          rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
        Validity
            Not Before: Jul 17 02:56:56 2026 GMT
            Not After : Jul 24 02:56:56 2026 GMT
        Subject: CN=6a5999f8-90cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:c9:d1:95:14:a3:8c:a4:80:de:53:4e:6b:
                    4b:61:7f:7e:09:9c:48:10:f4:0c:0b:85:03:d4:09:
                    c2:1b:5a:30:58:cf:1e:f5:25:44:f7:c0:57:b9:cb:
                    a2:12:89:5c:ef:79:2b:e1:d0:36:3c:7f:eb:9a:e2:
                    4e:15:cc:43:52:52:ff:c3:d0:a0:57:ac:4e:24:03:
                    e3:6f:ed:92:42:7a:cc:67:47:ac:2d:70:b9:9a:b7:
                    a2:22:99:e7:ca:6e:58:f8:6f:8b:fb:95:aa:0e:df:
                    36:84:62:14:af:86:87:8f:b0:23:57:6e:a3:20:29:
                    3a:7c:62:59:f1:1d:0a:d0:65:d7:16:11:00:7c:14:
                    25:d8:30:a1:9f:2f:0c:e4:af:81:7d:6f:dd:d9:ea:
                    a1:a1:51:f1:8d:bb:52:ac:2e:48:df:1a:cf:e7:88:
                    d8:60:ed:69:ed:c4:00:6e:92:cb:85:b3:2a:35:f4:
                    0c:a5:f5:69:fd:45:7a:7e:73:4c:d6:ba:c3:27:00:
                    81:17:5d:c5:53:e7:f9:83:eb:c8:43:a5:fc:24:5d:
                    6c:d4:4e:93:39:a7:8a:f1:cb:f3:96:9e:f8:17:75:
                    20:91:49:a7:d1:39:6b:b0:53:4b:27:44:bb:5e:08:
                    06:c6:18:16:be:17:1f:b5:11:e0:c6:81:f4:0c:85:
                    6b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:47:5F:F3:1D:03:AC:AF:B4:79:AB:4C:28:A1:3A:54:D7:82:D9:E7
            X509v3 Authority Key Identifier:
                keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:aa:18:a0:14:79:dd:1a:55:3c:30:d2:cd:77:fa:70:9f:f3:
         84:4f:4e:7c:8e:b7:a4:41:80:44:28:c4:f4:cf:a6:a6:df:3a:
         97:eb:c8:22:23:24:ec:98:3f:72:cc:9b:bb:5c:34:49:9f:43:
         27:24:49:27:f3:65:00:bd:c2:c2:b1:0c:94:01:5c:cb:2e:9f:
         e4:b7:a8:33:41:6c:03:a6:89:e4:42:02:b7:af:70:58:cd:fc:
         1a:f2:6b:be:25:49:b7:24:ec:04:0e:ed:cf:ee:3c:05:3a:7f:
         aa:2e:ad:ac:3b:01:99:03:99:be:8a:29:96:6f:ff:98:eb:d1:
         86:84:70:61:14:a0:c3:32:1c:35:cd:9d:3d:cd:c2:d6:0b:2d:
         8c:fa:6c:5b:01:9a:70:31:bd:64:82:e3:da:66:ff:e6:97:25:
         93:b3:fd:91:ac:ca:1f:33:8b:c8:79:5e:3c:af:a5:07:54:c6:
         5b:f2:bf:12:14:1e:32:c3:19:96:6f:91:af:03:ff:a3:4f:de:
         f2:d6:fb:6a:c4:84:d7:f8:02:cf:22:53:29:e1:63:46:84:f9:
         46:ef:73:b5:99:85:29:55:6c:a2:25:c7:70:ae:e4:b2:4e:ec:
         21:94:e3:08:7f:e3:f2:c9:71:dd:d0:55:7c:a1:6a:7c:a0:35:
         78:e0:83:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD
MjlGMjAxNzMwHhcNMjYwNzE3MDI1NjU2WhcNMjYwNzI0MDI1NjU2WjAYMRYwFAYD
VQQDEw02YTU5OTlmOC05MGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm1LJ0ZUUo4ykgN5TTmtLYX9+CZxIEPQMC4UD1AnCG1owWM8e9SVE98BXucui
Eolc73kr4dA2PH/rmuJOFcxDUlL/w9CgV6xOJAPjb+2SQnrMZ0esLXC5mreiIpnn
ym5Y+G+L+5WqDt82hGIUr4aHj7AjV26jICk6fGJZ8R0K0GXXFhEAfBQl2DChny8M
5K+BfW/d2eqhoVHxjbtSrC5I3xrP54jYYO1p7cQAbpLLhbMqNfQMpfVp/UV6fnNM
1rrDJwCBF13FU+f5g+vIQ6X8JF1s1E6TOaeK8cvzlp74F3UgkUmn0TlrsFNLJ0S7
XggGxhgWvhcftRHgxoH0DIVr+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHxHX/Md
A6yvtHmrTCihOlTXgtnnMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy
OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK
SzJoLXpHUU95RjNDbnlBWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPaoYoBR53RpVPDDSzXf6cJ/zhE9OfI63pEGARCjE9M+mpt86l+vIIiMk7Jg/
csybu1w0SZ9DJyRJJ/NlAL3CwrEMlAFcyy6f5LeoM0FsA6aJ5EICt69wWM38GvJr
viVJtyTsBA7tz+48BTp/qi6trDsBmQOZvooplm//mOvRhoRwYRSgwzIcNc2dPc3C
1gstjPpsWwGacDG9ZILj2mb/5pclk7P9kazKHzOLyHlePK+lB1TGW/K/EhQeMsMZ
lm+RrwP/o0/e8tb7asSE1/gCzyJTKeFjRoT5Ru9ztZmFKVVsoiXHcK7ksk7sIZTj
CH/j8slx3dBVfKFqfKA1eOCDVw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:20:27 2026 by rpki-client