Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File:                     ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier:          E8gNbGIRq6RPfhg8UYcmp24GF6kvEhfOJi2SWZUg1l0=
Subject key identifier:   49:85:4E:AD:34:97:F1:B5:2E:6D:C9:18:D8:94:83:54:CC:BD:B3:29
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer:       /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number:          0224
Signing time:             Tue 21 Jul 2026 04:41:27 +0000
Manifest this update:     Tue 21 Jul 2026 04:41:27 +0000
Manifest next update:     Tue 28 Jul 2026 04:41:27 +0000
Files and hashes:         1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: NwaiOfDWy5RavraOz8wlF4eKDNttFSZLivK4dxvZl48=)
                          2: 9993077459B011F18691C362BD833773.roa (hash: PKDdZUq/eeCrgJp6yfNiqjr8n5K/Gvs8SrQ/lEfK2Y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
                          rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
        Validity
            Not Before: Jul 21 04:41:27 2026 GMT
            Not After : Jul 28 04:41:27 2026 GMT
        Subject: CN=6a5ef877-ed41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:e2:18:69:02:41:59:31:67:af:1b:5c:c1:
                    b2:1c:cd:a9:10:87:5d:4a:a1:04:f2:a7:47:3b:36:
                    37:af:15:96:ec:e0:5a:1e:08:b5:c5:be:6a:13:6c:
                    a2:c4:5a:07:60:d8:4b:de:77:a6:88:88:76:99:62:
                    f8:3f:86:1b:b9:74:ce:a5:3e:b0:63:82:70:f7:79:
                    83:2c:34:f4:60:6a:5b:46:53:b1:fb:1a:c3:ae:59:
                    91:d2:09:d3:cd:99:7b:83:bb:3f:71:27:2f:47:72:
                    5e:47:bf:b4:b3:e6:68:16:6d:85:67:2e:9c:9c:41:
                    40:dd:51:eb:9d:a8:08:05:27:f6:52:a2:4d:ce:fc:
                    e0:07:96:0a:ea:2e:72:65:6c:75:27:b5:51:87:e8:
                    14:3e:ce:47:d3:f8:c9:41:70:52:e1:e2:05:24:14:
                    8c:a0:ab:b7:2f:a9:69:ca:40:90:27:5c:26:27:eb:
                    4c:af:f3:27:b0:ba:53:f1:1e:cb:82:a0:f3:cc:a1:
                    da:13:50:43:a8:39:b2:6a:1c:fd:a8:3b:a7:c3:9b:
                    ff:30:61:ba:75:b2:e9:d8:60:c0:80:91:7a:b7:93:
                    85:0c:23:8a:c1:3e:91:dc:88:30:2a:a7:0b:0c:d7:
                    ff:cd:1f:05:92:96:f8:33:d3:83:ea:10:bb:87:20:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:85:4E:AD:34:97:F1:B5:2E:6D:C9:18:D8:94:83:54:CC:BD:B3:29
            X509v3 Authority Key Identifier:
                keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:86:48:e1:7e:cf:cd:9d:5c:93:17:b6:61:dd:09:17:48:2b:
         a4:62:24:d7:96:ed:90:85:67:23:cf:bb:c9:f0:db:21:75:e3:
         9a:fb:2d:67:5e:ba:01:53:e9:a0:52:09:7f:12:d5:fd:dc:11:
         87:59:69:7a:03:37:bd:46:5b:e5:a7:81:38:28:38:8c:b4:b3:
         a5:c2:6f:f6:64:2c:dc:88:f2:16:91:99:f9:d3:0d:40:df:bf:
         4a:6e:c3:ab:4a:94:85:27:25:c1:6e:ee:fd:0c:2b:d1:e6:a1:
         6f:32:97:5f:fb:88:c6:56:e8:5b:35:e3:9c:0c:bd:e2:4c:b7:
         e8:57:a6:52:ea:95:bf:9f:b0:9c:b5:6c:d5:94:ed:be:5b:64:
         0b:da:73:5c:df:11:69:8b:fe:36:1b:fe:ee:ed:00:ea:f6:3d:
         d1:04:e1:01:ff:3f:24:98:27:9e:b8:1b:a7:66:f2:5f:f5:d2:
         05:df:ec:d6:43:fb:a9:f5:93:82:70:10:6a:b0:a9:74:c6:10:
         9b:4c:ea:8c:cc:de:bd:ae:e6:04:c3:5f:c3:50:71:27:b5:6a:
         2f:18:1b:ef:08:28:8e:91:bd:1a:71:42:7b:18:81:be:9b:12:
         13:1b:b3:3e:bf:e4:30:99:03:03:b4:bd:d5:db:37:d7:74:ad:
         92:ea:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:02 2026 by rpki-client