Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File:                     kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier:          4KdVnngTZrO+8OH+lNIU4a1X9845dCzeAETtCRuZe94=
Subject key identifier:   3B:F6:DA:9E:76:00:EE:FA:C8:03:84:E1:A2:21:9E:69:60:36:44:D4
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer:       /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial:       0CEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number:          0CD9
Signing time:             Thu 20 Aug 2026 18:25:46 +0000
Manifest this update:     Thu 20 Aug 2026 18:25:46 +0000
Manifest next update:     Thu 27 Aug 2026 18:25:46 +0000
Files and hashes:         1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: sagAsZwhe2dyBRvoG8J3rbKdRlGVPiaYG4Gub/MdKiE=)
                          2: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=)
                          3: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
                          rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3307 (0xceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
        Validity
            Not Before: Aug 20 18:25:46 2026 GMT
            Not After : Aug 27 18:25:46 2026 GMT
        Subject: CN=6a8746aa-a76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:fe:26:e4:3e:f2:58:1c:08:21:2b:f8:31:
                    2d:35:b3:c4:7e:7a:ea:0c:a1:e8:0f:63:b8:30:63:
                    86:f0:c0:b6:63:4f:98:67:a1:a9:96:f2:f8:24:37:
                    9d:af:d1:69:bc:9d:6d:a6:67:33:d5:27:a1:04:14:
                    8f:db:31:f0:6d:b3:59:b3:bf:df:37:ab:c9:42:06:
                    6a:d9:c1:2e:a8:6e:64:30:f7:74:5b:10:53:d8:1a:
                    41:39:24:b1:62:fc:c3:dd:bc:1d:5a:d8:cd:97:43:
                    14:1a:8e:5e:6a:a9:c4:f1:73:c0:96:cd:2d:cb:8b:
                    10:c5:21:41:30:08:00:6a:15:1e:d5:12:a9:33:e1:
                    12:ed:a4:63:fb:88:1e:fa:87:07:86:aa:81:4f:b1:
                    61:c9:92:23:d5:b0:3f:4d:29:aa:12:ab:c9:c1:55:
                    e4:51:42:83:53:86:3b:1d:a9:c4:cd:f2:20:ad:dd:
                    db:28:31:10:9f:87:ab:b2:d7:f8:e3:1d:53:5e:03:
                    a4:0c:5e:ea:2a:2e:c5:71:3a:e2:00:68:18:0f:fb:
                    48:6b:52:90:25:6d:02:6c:5d:5d:61:c5:cc:d5:a7:
                    57:24:d1:2f:22:28:db:8e:ce:be:41:cb:01:87:25:
                    4b:3d:a0:69:f6:41:52:3c:d0:32:67:cc:a3:ca:c4:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F6:DA:9E:76:00:EE:FA:C8:03:84:E1:A2:21:9E:69:60:36:44:D4
            X509v3 Authority Key Identifier:
                keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:7e:9d:de:e4:e2:aa:b3:05:a3:8e:50:9b:41:15:fa:ba:
         d0:63:60:81:98:72:c9:d7:d2:25:91:f4:c8:1f:0c:06:a7:7d:
         12:6f:ca:ac:43:34:27:e5:c3:ef:b6:9e:5a:4e:6a:5f:af:94:
         20:bd:35:ff:65:7b:3c:34:74:73:76:79:22:a4:c8:37:8b:6d:
         6e:82:32:c4:7d:ae:69:8c:31:24:19:2d:37:34:60:21:47:e3:
         c8:72:3a:e6:d1:8f:e8:51:2e:07:84:67:24:10:8b:62:c6:05:
         49:44:c2:bd:08:31:ff:37:4c:c2:f1:d1:11:fd:f7:3d:af:b0:
         79:ed:40:0a:67:85:0e:bc:10:f6:ff:b5:0b:89:d2:84:ef:5f:
         3a:19:fa:f8:3d:c8:18:62:0b:31:03:d7:a7:d7:02:20:43:0f:
         20:84:2a:a7:b9:5b:3d:9a:fb:8b:58:1e:b1:cb:85:ed:66:c8:
         f2:51:69:b0:7f:c2:13:3c:3e:3c:70:2d:2b:e6:65:c0:70:b5:
         a2:f1:c7:66:96:3d:6b:62:d6:be:b1:0c:d7:dd:b1:2d:e7:4c:
         46:8c:38:45:0b:d0:01:9d:de:5c:7d:25:c3:d9:06:e4:a8:e9:
         11:29:66:aa:48:3c:83:f6:53:a8:01:c1:43:d5:ef:a6:f7:ae:
         aa:ac:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:20 2026 by rpki-client