Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File:                     kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier:          c3aUyNtDfjzYNLV4jtgEzl5wUSZ6kCb3g/c9VfSdV0s=
Subject key identifier:   3D:75:B1:F0:FE:20:44:A6:63:65:ED:0F:2C:6E:6F:E4:34:86:C4:48
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer:       /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial:       0CD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number:          0CC2
Signing time:             Mon 06 Jul 2026 18:52:20 +0000
Manifest this update:     Mon 06 Jul 2026 18:52:20 +0000
Manifest next update:     Mon 13 Jul 2026 18:52:20 +0000
Files and hashes:         1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: QcT6uekyZb62jI94Gl0/v8QxK0s12JiYtfsIYxVmTUg=)
                          2: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=)
                          3: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
                          rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 18:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3284 (0xcd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
        Validity
            Not Before: Jul  6 18:52:20 2026 GMT
            Not After : Jul 13 18:52:20 2026 GMT
        Subject: CN=6a4bf964-4f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:ee:5d:4e:48:aa:f3:0b:ff:e5:64:0a:29:
                    36:0d:52:24:e3:40:8b:43:0d:6c:c6:66:fc:7d:ec:
                    4d:2e:41:10:ae:3a:cf:7d:2c:c8:1f:ed:ec:b5:dc:
                    9e:df:ab:90:ee:dc:2c:98:cf:6e:cd:35:42:33:2c:
                    62:bc:d7:51:41:97:71:ce:d6:13:ab:9f:bf:52:ae:
                    b1:78:e7:47:a0:8e:7a:26:7a:09:60:85:f2:d7:5c:
                    61:2e:e3:f1:38:ba:b5:a6:cb:77:c1:5a:ef:b6:ee:
                    e0:a6:21:e5:44:13:87:99:ba:45:73:be:65:87:34:
                    13:8b:dd:99:07:3f:0f:63:96:22:e2:7c:ce:d0:29:
                    89:e9:d5:14:3f:69:3f:f4:b2:76:7d:71:b3:e4:9e:
                    c3:94:0b:92:4b:9c:14:b7:09:2e:fc:e3:cd:2c:0a:
                    91:92:84:04:86:8e:ec:78:f2:eb:e0:71:9d:21:b7:
                    0e:fa:59:22:4d:c5:32:7f:68:5b:69:3e:d3:af:9d:
                    98:81:81:51:d9:7e:75:2c:39:d9:e1:07:2f:33:03:
                    d6:40:a9:7f:af:4a:c6:07:fa:4b:f2:ba:03:af:55:
                    ae:c5:fc:1c:a0:6b:1d:2f:2a:3a:81:5e:47:11:77:
                    ea:b3:de:a2:c5:d5:0f:77:54:cd:73:f0:81:e7:52:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:75:B1:F0:FE:20:44:A6:63:65:ED:0F:2C:6E:6F:E4:34:86:C4:48
            X509v3 Authority Key Identifier:
                keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8a:f1:0e:72:56:df:b6:45:73:1f:bd:4f:a6:e6:03:16:56:
         34:1d:95:45:c2:ce:98:08:9a:8d:85:ee:ae:c4:01:72:8a:57:
         af:3d:0e:5c:95:32:bd:7a:f8:2d:44:75:19:4c:9d:70:52:c6:
         ad:ef:76:c0:cc:51:3e:64:0d:9a:f4:fd:5c:9a:43:73:47:b4:
         f1:2d:e8:c5:b0:32:5a:9f:d7:c7:8f:25:ae:a4:03:34:af:0e:
         6c:04:16:9d:b4:26:9a:a8:71:69:ef:81:10:1a:f9:70:ec:23:
         26:31:9f:4f:19:69:0f:e5:84:15:7c:ad:a3:f1:d0:85:e2:10:
         b7:ed:9e:40:cd:95:6a:ef:92:03:2b:14:0d:49:8a:a8:ce:37:
         60:97:c4:61:61:2d:37:b5:c5:71:05:0c:2e:2f:b3:7c:e0:a9:
         9a:88:20:76:07:3e:37:7d:4b:66:f8:57:f8:9e:1c:b6:44:ec:
         d1:9d:82:13:71:f7:b0:d9:c8:cf:27:19:a0:32:1d:64:93:bb:
         e5:ff:73:11:45:4c:2b:8a:03:dc:9d:77:52:34:c1:75:3e:0f:
         20:fa:ef:51:29:41:a3:f6:d2:af:08:6e:db:49:d3:75:31:65:
         c0:b1:f2:3a:d3:b9:ab:a7:a6:0f:f5:e3:4d:85:34:c1:6a:78:
         d3:48:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:04 2026 by rpki-client