Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
File:                     mOhT44UoY0okfIaH-hKOU07IRCY.mft (raw, json)
Hash identifier:          TMmiQ7ICCowZR//yI+fQl2S88kZJcH6G4qkmeA1SUSA=
Subject key identifier:   87:8F:B5:2C:0E:82:D3:D7:F1:21:E3:89:38:02:BB:C2:91:58:96:CD
Authority key identifier: 98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26
Certificate issuer:       /CN=A915E18D/serialNumber=98E853E38528634A247C8687FA128E534EC84426
Certificate serial:       0836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
Manifest number:          0828
Signing time:             Thu 16 Jul 2026 21:31:38 +0000
Manifest this update:     Thu 16 Jul 2026 21:31:37 +0000
Manifest next update:     Thu 23 Jul 2026 21:31:37 +0000
Files and hashes:         1: mOhT44UoY0okfIaH-hKOU07IRCY.crl (hash: oKLKJxyx08C3jPjZJ5KcEitcO4hyco58MDCsueMaaGc=)
                          2: BFC45160484411F0A8433B42C4F9AE02.roa (hash: SEGLZJRsG8d/oF/uE/MLRtBE/snz3gSEd4tQtKL1yRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 21:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=98E853E38528634A247C8687FA128E534EC84426
        Validity
            Not Before: Jul 16 21:31:37 2026 GMT
            Not After : Jul 23 21:31:37 2026 GMT
        Subject: CN=6a594dba-a130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:be:1d:eb:15:96:45:39:71:57:ca:24:2e:
                    36:3b:2c:23:ee:c9:04:6c:b2:5f:dc:f9:7b:5b:9f:
                    8e:ee:f8:ba:6f:03:03:39:b0:46:e5:06:d5:ad:c6:
                    80:aa:af:cc:83:12:c7:59:94:e3:b2:2a:43:6e:d5:
                    3e:32:00:ec:12:4a:c6:ff:43:1d:43:8a:3c:7d:34:
                    98:82:25:0a:54:3e:e7:e2:d1:87:6f:d4:52:28:e8:
                    58:38:22:21:fd:78:b9:ca:d3:00:cb:98:89:c5:7a:
                    d6:cb:d8:ea:a3:88:d6:e1:e2:e2:66:ed:e1:75:19:
                    b5:a8:1d:6b:5a:1c:0f:ad:a2:d3:18:df:0f:6a:1c:
                    c0:8b:c4:cf:ff:df:8a:f2:fc:89:57:21:14:f1:08:
                    46:89:94:8d:2e:a4:54:db:9a:f1:5f:d7:72:9c:be:
                    6a:21:de:34:af:b6:81:f4:bc:fe:f9:59:86:d0:76:
                    85:5a:93:5e:66:16:8d:da:01:62:10:41:0d:2d:13:
                    ee:4b:58:8e:c4:07:cd:bb:5a:ec:af:57:18:99:e3:
                    2d:62:f2:41:62:fe:b1:4b:8e:97:bb:f7:4d:8a:6e:
                    9d:47:3e:bb:1a:9f:81:30:fc:e2:5b:d6:fa:07:50:
                    be:96:b4:d9:78:ca:e9:a9:0c:3f:3f:fb:30:21:af:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8F:B5:2C:0E:82:D3:D7:F1:21:E3:89:38:02:BB:C2:91:58:96:CD
            X509v3 Authority Key Identifier:
                keyid:98:E8:53:E3:85:28:63:4A:24:7C:86:87:FA:12:8E:53:4E:C8:44:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhT44UoY0okfIaH-hKOU07IRCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/7A12697E2AE211EBBBFC4F0AC4F9AE02/mOhT44UoY0okfIaH-hKOU07IRCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:e7:e5:48:68:08:c3:9c:8c:15:09:f7:3c:f6:c0:eb:14:
         16:46:7b:6a:cd:01:3e:6b:5b:b3:8d:08:f3:89:bd:ca:ce:7b:
         e1:3a:b8:c2:2e:45:90:8d:e8:77:1c:a8:94:f6:0a:95:01:9a:
         8e:97:a1:30:e4:1b:2c:cf:b0:16:bc:8a:e4:38:eb:6f:a9:7a:
         d9:f4:20:af:34:d7:c4:fa:62:d0:41:de:28:df:b1:7b:ea:10:
         4f:e2:74:88:ad:e0:19:c4:f8:30:19:ca:30:01:3b:3f:1d:4b:
         9b:a7:4c:4e:db:2e:a8:b8:b7:db:28:05:b4:a4:43:cd:46:f8:
         43:a7:e3:72:85:fb:32:74:18:85:a6:aa:98:8a:b0:85:c3:2e:
         c2:b9:17:e0:b8:b4:70:01:e4:82:0b:e9:58:5b:33:5d:4e:c2:
         45:a9:60:14:67:1e:80:5f:23:cd:a7:a9:d9:08:a0:6e:ac:6b:
         71:6c:3c:e5:cb:f6:2b:33:18:55:14:96:53:7a:f2:0e:46:91:
         39:31:95:05:bd:76:23:2a:42:fc:fe:34:12:79:ad:3a:0c:5c:
         4e:5c:06:32:51:de:0e:77:36:a0:ad:e2:1f:fc:93:29:21:0e:
         ac:e7:48:df:3c:c5:ba:58:a4:a2:d8:2d:13:24:84:8b:dd:57:
         00:58:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:22:10 2026 by rpki-client