Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File:                     OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier:          CED21pF3xOAyXyDF1EmFd8BUxwjjeb0Ri1tWIV9ZujI=
Subject key identifier:   35:E0:4B:28:9B:A1:AA:0B:63:60:14:FB:A4:58:1C:5C:17:88:2C:61
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer:       /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number:          026D
Signing time:             Sat 05 Sep 2026 01:55:35 +0000
Manifest this update:     Sat 05 Sep 2026 01:55:34 +0000
Manifest next update:     Sat 12 Sep 2026 01:55:34 +0000
Files and hashes:         1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: /us/QXfhNhLRwDFxYPeDoexxqYRCaIIhMbw1AlcFPwk=)
                          2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: PQd/8cl7exmw5LNAxBVE8+5SKezKc679UfwN3IJFrBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
                          rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 01:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
        Validity
            Not Before: Sep  5 01:55:34 2026 GMT
            Not After : Sep 12 01:55:34 2026 GMT
        Subject: CN=6a9b7696-3e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:16:a1:6b:27:d9:a0:3a:30:f7:ef:2f:54:
                    14:99:57:4f:cb:05:67:bf:f8:ae:d2:04:d4:99:f3:
                    8d:d6:e5:d5:f1:9a:82:bf:9c:ff:eb:45:27:06:d9:
                    b5:4a:79:8e:e7:db:3b:bc:a8:55:dd:82:a5:91:84:
                    d0:e6:f7:11:29:e9:d1:0b:5a:2e:a2:1f:e5:9e:fa:
                    71:6b:84:a1:12:bd:7f:66:b6:85:c8:57:9a:ed:6d:
                    eb:a5:f5:a6:84:e1:34:29:0c:f1:68:e6:b8:57:b6:
                    52:fa:da:0b:ba:88:ca:de:c9:30:ec:b1:a0:51:eb:
                    8a:f4:6f:d0:87:9a:c1:91:0d:cf:35:23:18:0f:ae:
                    54:c0:19:7c:09:17:8c:5f:5e:68:5c:f6:8f:35:bd:
                    23:29:5d:ac:16:c4:64:d2:6f:88:62:36:a2:6b:85:
                    fe:d1:7c:b3:4e:be:ca:e4:7e:39:d2:c9:22:84:72:
                    12:6b:b0:5e:df:d5:1c:3e:cd:be:d1:9b:ea:8e:d7:
                    44:b7:1a:d6:43:95:db:cc:13:4b:3c:44:bc:e7:bb:
                    c1:1d:b2:55:00:a8:dc:16:36:92:ba:02:27:73:30:
                    6e:4d:4f:bd:a6:49:ec:0e:8c:1e:7f:ff:05:59:c6:
                    00:a3:b4:c5:f7:15:5e:a4:23:be:f9:62:7c:ce:a2:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E0:4B:28:9B:A1:AA:0B:63:60:14:FB:A4:58:1C:5C:17:88:2C:61
            X509v3 Authority Key Identifier:
                keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:dd:8f:a4:d3:fd:23:47:3b:79:dc:cb:03:d9:bf:d6:d1:5d:
         5a:e1:32:f0:3c:ab:ac:24:29:11:cc:1e:00:1d:07:b3:22:49:
         cb:8f:54:fb:ae:b4:e8:ce:97:26:1b:e7:7b:e0:4b:67:1e:b2:
         01:cb:b3:5d:de:bc:0a:99:66:5b:87:fd:30:c2:fa:82:97:f3:
         23:00:1b:b8:a8:05:a7:6f:d5:b6:eb:74:dd:79:85:e1:8c:a4:
         ec:53:47:3e:14:92:29:7d:09:58:2f:cf:41:96:24:a7:74:6d:
         8b:95:13:7d:bb:e5:99:fd:ed:9a:7e:9e:ff:3f:dc:ea:66:63:
         2a:35:c3:61:29:ec:81:d0:0b:14:b6:b7:72:b0:e8:85:9b:2e:
         8d:7a:92:d4:19:b8:c1:68:96:60:c4:6b:dd:de:bf:9e:52:fa:
         f1:d9:81:0a:32:28:a8:f6:38:83:44:76:18:7c:1e:27:46:2e:
         ef:b4:20:db:4c:d1:39:2a:0b:96:86:98:df:7c:25:69:bb:74:
         2c:26:3c:ad:b3:fa:78:08:e2:83:97:5e:97:f6:25:88:ee:e6:
         34:03:43:a2:7c:9c:e6:9d:e2:54:66:3a:c0:ca:7b:cd:87:fc:
         66:7a:e6:e6:20:2c:27:70:c7:6f:c5:28:d7:97:9c:57:bb:d5:
         f3:8a:9a:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE1MzMxMTAvBgNVBAUTKDNBQTVBQ0E1NUM3QjM1RTNGOTIyQkJCOERBQUIxRDdE
ODg3MEUzNzMwHhcNMjYwOTA1MDE1NTM0WhcNMjYwOTEyMDE1NTM0WjAYMRYwFAYD
VQQDEw02YTliNzY5Ni0zZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0a8WoWsn2aA6MPfvL1QUmVdPywVnv/iu0gTUmfON1uXV8ZqCv5z/60UnBtm1
SnmO59s7vKhV3YKlkYTQ5vcRKenRC1ouoh/lnvpxa4ShEr1/ZraFyFea7W3rpfWm
hOE0KQzxaOa4V7ZS+toLuojK3skw7LGgUeuK9G/Qh5rBkQ3PNSMYD65UwBl8CReM
X15oXPaPNb0jKV2sFsRk0m+IYjaia4X+0XyzTr7K5H450skihHISa7Be39UcPs2+
0ZvqjtdEtxrWQ5XbzBNLPES857vBHbJVAKjcFjaSugInczBuTU+9pknsDowef/8F
WcYAo7TF9xVepCO++WJ8zqL4swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXgSyib
oaoLY2AU+6RYHFwXiCxhMB8GA1UdIwQYMBaAFDqlrKVcezXj+SK7uNqrHX2IcONz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTUzMy80MDI5OTc4QUY4
N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05lUDVJcnU0MnFzZGZZaHc0
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09xV3NwVng3TmVQNUlydTQycXNkZllodzQzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTUzMy80MDI5OTc4QUY4N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05l
UDVJcnU0MnFzZGZZaHc0M00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdt2PpNP9I0c7edzLA9m/1tFdWuEy8DyrrCQpEcweAB0HsyJJy49U+6606M6X
Jhvne+BLZx6yAcuzXd68CplmW4f9MML6gpfzIwAbuKgFp2/Vtut03XmF4Yyk7FNH
PhSSKX0JWC/PQZYkp3Rti5UTfbvlmf3tmn6e/z/c6mZjKjXDYSnsgdALFLa3crDo
hZsujXqS1Bm4wWiWYMRr3d6/nlL68dmBCjIoqPY4g0R2GHweJ0Yu77Qg20zROSoL
loaY33wlabt0LCY8rbP6eAjig5del/YliO7mNANDonyc5p3iVGY6wMp7zYf8Znrm
5iAsJ3DHb8Uo15ecV7vV84qaAA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:16:12 2026 by rpki-client