Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File:                     OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier:          JkBI3r2lwKjabR5+HUIX5pU2BVfI2wqbWY3GaVWt5D0=
Subject key identifier:   EC:71:32:3B:B1:2C:C3:8C:1D:F6:04:95:0C:5F:C6:44:91:59:1F:28
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer:       /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number:          01BF
Signing time:             Thu 27 Aug 2026 01:46:37 +0000
Manifest this update:     Thu 27 Aug 2026 01:46:36 +0000
Manifest next update:     Thu 03 Sep 2026 01:46:36 +0000
Files and hashes:         1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: VuIahpsoVGRBfh5sWijH5/S/OHIHM+vtKOPrMPPUFWQ=)
                          2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: +DCvPGD1gJzVRYp0NyLyo9qI/LocUFsJLWMxD2e8AY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 01:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
        Validity
            Not Before: Aug 27 01:46:36 2026 GMT
            Not After : Sep  3 01:46:36 2026 GMT
        Subject: CN=6a8f96fd-0098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:87:93:47:cd:6b:1a:6e:29:f1:9a:de:71:d3:
                    e0:14:15:0c:00:82:a1:c1:ef:ec:1a:79:d3:40:b7:
                    75:6e:bb:fe:60:32:da:4d:63:98:3e:08:81:f7:5d:
                    c0:8d:70:e5:8c:49:0d:fb:62:aa:8c:99:43:2e:cb:
                    17:07:99:19:b4:2d:c1:30:5f:14:e6:7c:43:be:f6:
                    00:38:5b:13:ee:93:eb:79:8a:75:02:84:30:e6:96:
                    38:3c:d8:12:d7:b7:a3:c8:4b:37:ce:7e:97:03:30:
                    21:79:eb:6a:ed:97:e7:f7:fd:64:5e:75:94:08:7e:
                    a7:f7:19:23:39:95:37:8c:f1:ad:69:6e:6d:fd:71:
                    a1:a4:0b:84:02:4f:35:9f:c0:f1:70:1c:9c:ec:51:
                    ce:e1:4a:a0:bd:26:ce:80:f3:03:a0:99:76:22:45:
                    4b:a9:cc:6e:de:98:e1:99:87:c1:42:bf:7a:3e:0b:
                    3d:f1:20:3c:eb:cb:92:b0:5f:f7:f6:fb:69:38:a0:
                    63:11:da:94:6f:33:c6:d5:8a:50:2f:15:3e:cf:d5:
                    4e:ff:79:8e:1b:06:ea:b3:8f:f5:d9:38:e1:96:3d:
                    ce:10:c0:46:66:95:63:1b:47:6d:32:60:e1:0a:6b:
                    75:95:53:72:bf:e7:fa:13:bc:63:b4:2c:1d:8e:d1:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:71:32:3B:B1:2C:C3:8C:1D:F6:04:95:0C:5F:C6:44:91:59:1F:28
            X509v3 Authority Key Identifier:
                keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:67:86:41:42:2a:ec:11:11:2c:a9:0e:a5:20:df:31:14:
         21:09:97:68:9e:c6:c9:36:52:bb:06:0a:96:b4:19:bf:7c:ae:
         02:7e:ec:65:3e:53:96:01:b5:42:c0:a3:bf:2c:c8:46:c0:d3:
         d3:1c:ee:54:ae:ae:c5:e2:ee:d9:44:f9:11:bd:9a:46:45:bf:
         bf:10:b4:ba:e9:95:89:d3:5a:f3:71:cf:e6:99:9a:6b:fb:9f:
         52:3e:ff:ef:c5:ee:65:c1:5b:6c:bc:14:5f:49:5d:cb:d3:92:
         f4:cd:d8:7d:95:6b:b5:c6:45:0b:20:84:a8:cf:61:8b:44:82:
         1b:c3:51:2f:10:d8:a0:5e:cc:77:a2:98:51:cf:e8:65:1d:15:
         9a:77:c7:76:87:15:70:a4:d9:8c:fe:95:53:1d:02:d4:da:e8:
         aa:51:a5:52:3d:47:2b:3b:9a:7e:89:bd:e5:b3:5f:97:c1:2e:
         51:48:9b:ef:6b:8b:35:3a:81:cc:53:fb:58:27:65:c1:b2:92:
         63:c5:db:a3:92:d2:1f:c0:61:49:85:4c:df:61:c1:6d:d6:af:
         4a:39:61:ce:04:d1:8d:5b:6d:11:b6:f9:37:a3:de:5b:a7:b9:
         79:2e:f8:4a:b7:12:5d:d1:0d:f4:49:d3:9f:27:28:cc:69:6f:
         fb:2f:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:03:27 2026 by rpki-client