Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          LHHhz8+5ETf6LKZTCQQmyHC5IF5/bv7bnjTpzQZpzBc=
Subject key identifier:   D0:B8:DD:05:B5:1F:FE:CA:B2:10:AF:B7:E5:29:12:F7:90:AC:62:E8
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          77
Signing time:             Fri 17 Jul 2026 09:03:18 +0000
Manifest this update:     Fri 17 Jul 2026 09:03:18 +0000
Manifest next update:     Fri 24 Jul 2026 09:03:18 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: neciheuzR74/tqJ3uUtxb/bU5k/x2vmaI/r9e6X4LFo=)
                          2: BD3AE9AC47AF11F1862D4448A9833773.roa (hash: Sa/+2RDFFnvmTt5yGyNUTGOg6sr8HGm5v/QNH+G6roA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: Jul 17 09:03:18 2026 GMT
            Not After : Jul 24 09:03:18 2026 GMT
        Subject: CN=6a59efd6-a374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:b6:c7:cf:3a:b5:72:b8:64:c7:e2:15:32:
                    45:03:f0:0b:d5:1f:a9:77:f2:f3:b1:0f:d7:b1:25:
                    fd:4a:53:e9:0a:2b:54:52:46:d5:5e:60:83:a5:5d:
                    e2:81:37:b3:6f:44:cc:42:79:8e:16:16:a7:c6:d8:
                    c5:95:22:18:bb:08:d7:41:c5:7c:db:e0:09:2e:b4:
                    0a:ba:6e:15:2b:d6:c6:e3:4a:16:cb:26:f7:c7:29:
                    c6:17:8c:2d:1a:4a:fe:fe:f8:54:da:55:bd:0a:84:
                    3a:66:03:87:56:4a:72:42:09:91:82:81:21:db:64:
                    7b:80:11:2b:75:29:b0:23:93:f5:36:83:ca:11:c7:
                    86:95:76:dd:b6:73:66:45:a5:ed:3f:ce:81:9e:31:
                    04:01:e0:73:af:b7:14:ae:09:88:5d:26:50:30:8f:
                    1f:20:b0:d2:e1:3b:25:df:f7:e0:e7:00:cd:1f:3c:
                    67:4a:db:84:44:5e:58:e3:56:ed:96:03:29:8d:33:
                    8d:03:70:eb:8c:33:30:db:66:aa:55:9e:ad:56:91:
                    44:a9:58:9e:61:3b:a5:97:06:03:d6:26:57:62:50:
                    7a:07:d1:8a:cb:30:ff:52:d6:06:84:e1:a5:1d:ea:
                    27:10:45:af:92:9c:b7:19:4e:91:72:a9:c6:d1:fd:
                    94:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B8:DD:05:B5:1F:FE:CA:B2:10:AF:B7:E5:29:12:F7:90:AC:62:E8
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3a:16:eb:b0:e2:a1:14:a5:36:20:90:b5:66:c9:64:da:5c:
         5d:f1:29:0a:5a:6b:20:e4:d3:58:bf:38:54:5d:a9:c6:69:5c:
         e3:e0:54:ba:b2:8f:8f:f0:33:34:2a:0d:c3:7c:df:69:cd:50:
         62:80:57:35:a8:d0:93:3e:76:30:20:51:e8:a1:14:e3:8c:c8:
         dc:58:42:d2:06:b9:0d:f8:32:96:b6:74:2d:92:f9:34:db:52:
         55:a6:46:9b:ad:0d:83:d7:a9:5e:70:ae:1f:13:7f:b4:f7:4f:
         d2:0b:4d:17:3c:3b:25:cb:c7:6a:ce:14:6e:68:1d:3b:62:9d:
         d5:e8:96:f0:4c:01:4c:a9:07:a4:81:cc:be:0c:07:15:aa:c9:
         3b:6b:19:19:c4:8f:61:34:47:9f:78:8a:f1:46:9f:ae:d5:63:
         3c:6a:98:4f:fb:dc:e1:62:8e:46:ad:fd:ca:73:2f:c9:30:d5:
         94:1a:cf:19:6b:89:69:ff:d7:9f:08:f1:7b:74:73:82:46:8a:
         7f:12:3b:8a:e6:8f:e8:7d:d2:c9:da:0b:3d:56:4d:15:28:de:
         1a:2c:96:21:dd:4c:53:59:78:26:25:74:12:30:76:c5:8a:a7:
         02:c7:2f:86:12:7e:3a:90:61:32:37:0a:62:ff:61:fa:f2:90:
         e2:20:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:49 2026 by rpki-client