Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File:                     oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier:          70WSN41iuoRMPbM0bE+fo8cLuxPKyhcg4/Oi9po2Z/s=
Subject key identifier:   EB:CC:9C:59:B2:C7:D8:7D:3F:87:2A:83:F1:E7:80:66:62:B9:FF:2D
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer:       /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial:       0840
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number:          0829
Signing time:             Mon 20 Jul 2026 21:41:27 +0000
Manifest this update:     Mon 20 Jul 2026 21:41:27 +0000
Manifest next update:     Mon 27 Jul 2026 21:41:27 +0000
Files and hashes:         1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: NLvq7kQ5MkbpNSak6q5Gc+07A1rVcIs74meEcY1NOMQ=)
                          2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
                          rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 21:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2112 (0x840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
        Validity
            Not Before: Jul 20 21:41:27 2026 GMT
            Not After : Jul 27 21:41:27 2026 GMT
        Subject: CN=6a5e9607-d0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cd:a9:b7:82:26:b6:a8:95:e6:03:ec:04:5a:
                    df:3a:bf:2d:ad:39:c2:5a:81:aa:ea:f6:18:36:b5:
                    76:c8:d9:1d:8a:bc:4c:2b:34:a5:86:e0:3b:e0:81:
                    33:67:0e:93:ab:a3:83:26:c8:fa:df:fd:9e:07:fd:
                    f1:25:18:a2:4f:f9:e2:6d:d5:1b:ad:57:f3:d8:40:
                    08:5e:51:a1:88:5a:d5:b0:de:d0:be:c8:e3:3e:1f:
                    8a:ae:48:93:16:33:77:82:ee:fb:bd:c9:60:4a:0b:
                    da:aa:8c:99:90:63:a1:6a:65:99:45:4f:66:a0:c8:
                    94:69:88:1a:58:38:ff:02:5c:f8:58:92:d3:6a:46:
                    46:f3:b0:df:a3:e1:9d:19:6b:2d:e1:a1:06:1d:9d:
                    3c:1a:26:50:00:48:6a:89:9a:d1:f1:b9:93:b2:49:
                    62:94:00:4d:29:b4:18:c9:6f:dc:63:93:59:db:e0:
                    1c:aa:6f:d2:2b:c4:67:d2:1e:f4:9c:3d:c0:36:d5:
                    16:c2:f8:44:87:51:70:d1:ed:f2:b2:cb:41:41:92:
                    a1:f1:25:0b:96:f4:f6:97:84:3a:9c:24:b1:16:44:
                    66:f4:6c:49:2c:c2:85:fa:b3:b6:c6:f3:9c:70:71:
                    b1:8d:6c:c0:09:b5:98:8c:0e:ad:6b:6e:5b:46:a6:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:9C:59:B2:C7:D8:7D:3F:87:2A:83:F1:E7:80:66:62:B9:FF:2D
            X509v3 Authority Key Identifier:
                keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:43:8b:09:11:83:e0:b0:56:1d:53:87:de:ae:a4:5a:be:b7:
         ce:18:f8:5c:bf:ba:50:6b:ba:3c:a0:80:de:d8:35:99:b8:2b:
         0d:27:46:b4:ab:88:9e:f4:81:90:d2:31:d5:13:43:f3:ae:06:
         03:c0:16:a6:8b:4b:5f:16:16:e1:93:81:d6:7e:6c:ac:46:74:
         0c:87:7f:8b:b1:b8:77:ea:60:ce:85:da:b1:bb:92:6e:31:6b:
         89:20:82:3a:f9:76:8e:0e:1c:30:f5:09:be:ac:f6:82:ed:ba:
         96:c9:54:97:a9:4e:44:93:42:40:de:1c:ac:ae:7d:5e:76:c9:
         76:86:7c:bc:12:0d:f3:12:d7:db:49:7d:20:47:e2:d7:1f:6a:
         63:c9:12:73:9d:4f:32:05:bd:a9:2f:e3:24:f8:7c:aa:11:d7:
         e5:db:7a:74:c6:ca:0e:ce:73:de:7d:7e:93:c6:ec:39:b4:b2:
         24:e0:95:fc:4a:7a:4d:08:53:9c:53:87:26:7e:b7:c7:3e:d6:
         ae:e6:67:f1:a5:32:ec:6d:f9:1b:93:4a:af:97:06:35:f5:67:
         9c:60:b4:4b:35:88:84:02:3f:23:fc:6e:f9:f5:8d:23:54:f6:
         0c:9a:e0:3c:2b:2a:ef:ca:a6:5f:75:e5:d7:8c:e4:48:99:a4:
         86:4b:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:18:21 2026 by rpki-client