Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
File:                     O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft (raw, json)
Hash identifier:          pYU1XGOy9ntQrX4KsVz3Qn+WQwXmf6C5m4D/ccAqQGY=
Subject key identifier:   56:EE:D5:B2:9B:B8:A5:26:49:21:70:8C:9B:73:7C:13:5D:53:58:A8
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Certificate issuer:       /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
Manifest number:          0252
Signing time:             Fri 17 Jul 2026 03:08:23 +0000
Manifest this update:     Fri 17 Jul 2026 03:08:22 +0000
Manifest next update:     Fri 24 Jul 2026 03:08:22 +0000
Files and hashes:         1: O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl (hash: xjSMUzaYqmk6aGn8DWH6ZplvM49KjKUzIJGAc9P9xqw=)
                          2: 62923A1EF2B711EDAA29717AC4F9AE02.roa (hash: f+SXz/7qnkULN0UO8ykoynDM3JBtbR5ZSL/l0DN40Vo=)
                          3: 631D6D82F2B711EDAA29717AC4F9AE02.roa (hash: uOBgq1wqwkIdJF6l8fQkWsM2YOmgJUVNC/DA3LL3Uc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
                          rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91579E2, serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
        Validity
            Not Before: Jul 17 03:08:22 2026 GMT
            Not After : Jul 24 03:08:22 2026 GMT
        Subject: CN=6a599ca7-8524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:cd:b3:c9:a9:f5:69:1f:ee:7e:e2:95:5a:
                    5e:68:51:15:f1:83:82:1b:d2:2b:6a:4c:bc:13:f4:
                    ab:45:60:cf:de:c3:a7:25:a4:eb:29:04:8a:02:35:
                    47:01:ea:a1:03:e5:a1:ab:54:26:27:68:12:03:47:
                    3e:22:ba:a6:6f:cc:b6:3d:f0:5b:34:c4:52:a5:d0:
                    ce:0d:e6:1d:cf:49:83:43:09:58:06:2d:47:98:53:
                    53:fd:a6:5b:d6:40:93:c5:8a:58:5b:69:7e:6e:53:
                    03:c7:c5:4f:dd:12:42:ef:64:5c:25:03:bf:55:3d:
                    3e:c9:98:9b:24:be:9f:01:99:12:1d:ff:e4:26:a4:
                    b0:37:f2:92:34:d0:d0:8c:15:a4:e2:02:97:eb:c5:
                    cf:55:12:cb:0a:9d:30:35:9d:52:43:8e:32:60:21:
                    9e:db:0f:10:e2:7a:6d:53:ab:b2:05:4d:ef:fc:cb:
                    10:36:ee:c4:e2:af:03:25:b1:1b:4a:15:ec:82:18:
                    c1:10:b2:3d:48:bb:80:75:c0:06:2b:d7:15:01:42:
                    77:46:e2:f9:40:95:62:c7:b2:c8:0e:d6:26:7e:7c:
                    45:50:61:96:08:1a:ce:02:2f:23:a0:05:fe:61:ce:
                    95:b8:02:07:59:17:b6:08:08:a2:dd:b6:78:2c:ff:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EE:D5:B2:9B:B8:A5:26:49:21:70:8C:9B:73:7C:13:5D:53:58:A8
            X509v3 Authority Key Identifier:
                keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:b0:dc:b5:b3:ec:ba:a5:73:e0:41:59:40:b5:87:bb:76:
         56:16:cb:4c:66:9a:0b:bd:26:32:59:2e:00:e9:d1:44:ff:38:
         45:21:96:bc:f3:3e:05:d0:16:bf:de:a3:63:84:73:da:66:b7:
         3c:6b:70:9e:1e:ea:31:55:e2:0f:31:29:ca:39:49:8f:91:22:
         92:42:c4:c5:a6:6f:a9:05:16:58:f7:41:fd:a7:c8:20:05:d1:
         cc:ea:d4:d2:91:08:36:14:48:a4:b6:71:4e:5d:4f:e9:ef:1a:
         f0:d8:49:12:59:d2:12:47:12:84:95:43:c6:d4:3b:a5:e9:e0:
         93:0b:64:83:af:90:7d:e7:b8:fe:d5:93:33:7f:01:0e:e6:7b:
         89:fd:14:57:3d:eb:22:6b:31:f7:11:bd:b3:48:df:68:b5:5c:
         68:69:73:71:b8:ca:68:15:f5:20:be:d3:dd:19:b7:8f:b4:30:
         53:a6:d0:39:48:24:29:c7:c2:60:4e:78:a1:56:de:01:84:33:
         db:5c:5e:0e:25:99:4b:26:c5:5d:2f:59:e4:e9:e8:c8:0d:cc:
         32:d5:ac:39:e5:ed:ca:7b:55:72:27:a0:a1:67:8d:9a:2c:1e:
         f8:61:11:13:16:a6:31:e5:0d:ad:00:75:01:d8:e2:79:e1:58:
         30:70:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:18:59 2026 by rpki-client