Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
File:                     OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json)
Hash identifier:          dEE//VR4IoZXb40ftGMg8Ahhl7Hj3fY/+Sz5A+HcBj4=
Subject key identifier:   35:C5:2A:17:94:41:C5:AB:CB:53:87:F6:EA:0E:1A:21:73:FC:C6:1A
Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
Certificate issuer:       /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Certificate serial:       0762
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
Manifest number:          0750
Signing time:             Sun 02 Aug 2026 22:10:50 +0000
Manifest this update:     Sun 02 Aug 2026 22:10:49 +0000
Manifest next update:     Sun 09 Aug 2026 22:10:49 +0000
Files and hashes:         1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: mzNBZk9fGaBq0T1E+4KE2WgBS4y8HYDNsMSE5fJ2SZw=)
                          2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: cPeYwDdd00kAIVqMVLrluyBHMf7E83NSh4S72gm9IyM=)
                          3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: dXlGJvljbOTRyiUKcUkx49BNHkG/wuJwIqZ/bk6onnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
                          rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 22:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
        Validity
            Not Before: Aug  2 22:10:49 2026 GMT
            Not After : Aug  9 22:10:49 2026 GMT
        Subject: CN=6a6fc06a-e815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:ea:c8:2d:1d:c1:d4:b8:65:4d:b6:48:02:
                    d7:49:d0:8a:e1:6c:73:7b:b1:a2:a6:6b:a9:de:aa:
                    1d:83:71:b1:20:2b:3d:4a:93:65:4b:95:c1:fd:ca:
                    81:e6:f3:24:05:6d:2a:c8:7e:5c:b5:7c:59:9b:b3:
                    4a:4d:15:fc:0e:8d:f3:94:99:f9:b4:e8:97:67:b5:
                    13:38:bf:c0:70:83:2a:a3:b8:77:fe:15:cc:a7:88:
                    2f:99:8c:00:73:9b:69:14:86:f8:21:56:86:df:89:
                    10:e5:6f:0e:08:bd:2a:f4:1a:07:0a:e1:e5:23:ac:
                    39:e3:19:7e:12:67:b3:b8:df:3b:1a:5d:be:0e:88:
                    5b:37:42:d8:9e:88:50:48:fc:e7:3f:d6:07:c6:82:
                    17:5b:7a:6f:66:f5:f7:64:e8:ff:a5:49:f5:65:4b:
                    cf:01:3d:ad:fe:69:8f:39:44:ca:ed:29:8a:52:b4:
                    34:6b:89:71:e2:a3:df:35:9e:45:f7:96:70:cc:00:
                    31:3d:9e:9a:2c:c7:e9:e6:07:58:38:3b:34:6f:65:
                    03:6f:89:e5:53:63:39:4b:1f:35:36:c4:d3:ba:ec:
                    77:5d:da:ec:8a:03:58:50:8e:82:1c:bc:89:31:3a:
                    d5:a0:d6:4d:4e:f4:0a:69:7e:6e:39:40:16:87:34:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C5:2A:17:94:41:C5:AB:CB:53:87:F6:EA:0E:1A:21:73:FC:C6:1A
            X509v3 Authority Key Identifier:
                keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:ad:2a:44:a4:b9:65:61:f8:c3:7a:76:d3:73:ff:51:7b:c9:
         03:e9:58:fd:7b:29:3c:f6:1c:e5:10:ae:69:15:2e:fb:b3:85:
         30:d3:36:42:3c:64:be:0c:b3:ac:85:e9:fc:a1:83:e1:fd:34:
         60:47:6e:a5:9a:6c:00:dc:86:33:6d:89:0d:5f:a3:a4:4b:86:
         07:2f:ca:d6:86:65:58:01:18:7d:f1:3b:83:cb:bc:a1:76:0c:
         5b:08:19:ef:09:88:1a:cf:bb:66:f1:57:0d:bf:a6:34:be:a4:
         cb:92:e4:c5:5c:14:97:18:af:2d:26:73:72:e4:20:84:66:b6:
         2b:88:50:02:07:c5:1a:57:b6:97:77:42:3e:45:d3:8e:8a:dd:
         07:e0:72:cc:66:2c:2f:23:4a:ca:f6:d3:0f:11:9c:3a:4e:b0:
         cc:c0:b3:3e:1e:b7:70:46:20:4f:78:11:c0:82:7c:4d:d8:aa:
         30:0d:39:22:25:60:97:02:46:a1:d6:96:a7:70:3f:36:b3:be:
         0d:8b:b9:e2:56:b5:bd:5d:4e:83:d2:2f:28:3c:24:51:14:35:
         18:df:c3:71:df:b4:ad:e6:10:65:c5:0d:0b:35:4a:77:14:b5:
         9a:8b:73:57:d8:24:94:66:75:30:20:1b:92:3e:63:f0:47:a0:
         52:7d:7e:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG
Qzg3MkU1QzUwHhcNMjYwODAyMjIxMDQ5WhcNMjYwODA5MjIxMDQ5WjAYMRYwFAYD
VQQDEw02YTZmYzA2YS1lODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1+HqyC0dwdS4ZU22SALXSdCK4Wxze7Gipmup3qodg3GxICs9SpNlS5XB/cqB
5vMkBW0qyH5ctXxZm7NKTRX8Do3zlJn5tOiXZ7UTOL/AcIMqo7h3/hXMp4gvmYwA
c5tpFIb4IVaG34kQ5W8OCL0q9BoHCuHlI6w54xl+EmezuN87Gl2+DohbN0LYnohQ
SPznP9YHxoIXW3pvZvX3ZOj/pUn1ZUvPAT2t/mmPOUTK7SmKUrQ0a4lx4qPfNZ5F
95ZwzAAxPZ6aLMfp5gdYODs0b2UDb4nlU2M5Sx81NsTTuux3XdrsigNYUI6CHLyJ
MTrVoNZNTvQKaX5uOUAWhzSJFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXFKheU
QcWry1OH9uoOGiFz/MYaMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE
NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa
V05pbmtSam83MWI4aHk1Y1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA460qRKS5ZWH4w3p203P/UXvJA+lY/XspPPYc5RCuaRUu+7OFMNM2Qjxkvgyz
rIXp/KGD4f00YEdupZpsANyGM22JDV+jpEuGBy/K1oZlWAEYffE7g8u8oXYMWwgZ
7wmIGs+7ZvFXDb+mNL6ky5LkxVwUlxivLSZzcuQghGa2K4hQAgfFGle2l3dCPkXT
jordB+ByzGYsLyNKyvbTDxGcOk6wzMCzPh63cEYgT3gRwIJ8TdiqMA05IiVglwJG
odaWp3A/NrO+DYu54la1vV1Og9IvKDwkURQ1GN/Dcd+0reYQZcUNCzVKdxS1motz
V9gklGZ1MCAbkj5j8EegUn1+Zw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 22:49:21 2026 by rpki-client