Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File:                     oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier:          rPXk0yIpfDt0Hi5O5YOHx52iHIppgvNYV7GWv9bQjJY=
Subject key identifier:   22:72:2C:44:A3:29:E2:5A:2B:9D:92:E1:C7:DD:11:E8:8E:1B:2E:F3
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       02FC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number:          026A
Signing time:             Mon 03 Aug 2026 03:41:22 +0000
Manifest this update:     Mon 03 Aug 2026 03:41:21 +0000
Manifest next update:     Mon 10 Aug 2026 03:41:21 +0000
Files and hashes:         1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: ze9TPOo96UGhWewzQEdD7rzlFn5w/W1HFIctJdxL3Fk=)
                          2: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: dt5esh4YiRNAZirmy+skM3OnPaDSuZwtvyic2vepcxs=)
                          3: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: w7xvtRmpzUbr8JgK3UFIlzl77CVDLrjcc7Gh+fzdIN8=)
                          4: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: SYFTPDFr7LN35U/gebZm+cm1jSEOdDw/ts0Jc9H4NkQ=)
                          5: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: 6XAi7gM1Xpz2gjUW0XmMeYKCRI5I+iCkq9l2pCZ8bjA=)
                          6: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: Nla2jOROMyL7ZvHl9XXDHQ8v7Tf0J7Qb5Yh4lPB6G08=)
                          7: 49FC44B0162A11F18FE9298B373D8C67.roa (hash: zOKxQxHBIClXa7SK7lv75vi8fEUHv381/lbkm79W98w=)
                          8: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: tgWNFtii+Zc83iPIGPSMYRpyk9K7VuUWU7rCDmoIp90=)
                          9: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: IqfXkMnj8uGfdCn+beW+9o36zBKAVet07b4tkBjSXV0=)
                          10: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: jTaoK/9ZfbV3RhpV4K59uEmZ4z35REbUAdYTCvW5auQ=)
                          11: BA917E94D65F11F090E652930BB43E13.roa (hash: 1K/PdX1BRrVHh8XufguLAU4ALPmlwz8oCRHa0WcJP6U=)
                          12: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: sg/PZjzTpz4UXrJ5M++piAcm3f5OkkNiXbIxTQjYcQY=)
                          13: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: u55hQRiwUoLbf82ToZOywDnWMRlS9BpxwCPoCivIco8=)
                          14: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: ZOW+e6hIHzkmr+e6qFgnn41jrQPPj4OwONpdz5HcpDw=)
                          15: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: wV4TOeBb8Yf87AHJqxIiiwZT4YbWOsXLWCv25sOzq68=)
                          16: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: oTOrED2V9vZn9qb8N0LH0Sx58NuFVTBUIOpttu2MXWg=)
                          17: FAC35354610611EFB6324A30C4F9AE02.roa (hash: FqAfFj1Tl22vJwoCZnFEARrScAUogzoTdgh+P1prj9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 03:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug  3 03:41:21 2026 GMT
            Not After : Aug 10 03:41:21 2026 GMT
        Subject: CN=6a700de2-0c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:33:5c:66:5d:53:1f:fb:c6:f2:ed:ff:1b:
                    89:da:f9:ef:a8:cd:49:21:1f:61:cd:38:5b:5a:dd:
                    cb:ca:69:2d:b4:fa:90:a7:a4:9e:e0:1a:8f:cb:b7:
                    ce:3d:38:b2:44:65:b6:fc:cd:3d:7d:4a:8d:de:97:
                    db:14:c4:a8:76:68:2d:cf:0e:0f:5d:e4:db:60:d1:
                    dd:e4:c8:14:03:e1:77:13:f9:27:9c:a1:ac:d0:aa:
                    38:b9:85:ae:ce:95:b1:2b:c7:81:3b:18:b1:d8:8f:
                    b1:77:ff:03:b6:99:3b:bd:9d:c1:c0:b6:43:12:3b:
                    c3:1f:d5:78:58:e8:f0:ce:f3:15:26:d5:80:30:65:
                    be:aa:39:c0:a3:27:33:90:9d:7f:5a:91:0b:1d:c7:
                    4e:ab:35:57:cd:87:59:c0:b5:a9:a7:98:43:4f:cf:
                    7e:20:12:6d:ce:2a:00:50:94:93:a9:e6:ba:ce:2e:
                    cf:58:58:94:98:f2:07:39:87:e1:ed:23:f1:2e:d9:
                    87:67:81:1f:ee:de:63:42:16:9b:f3:9f:fe:7a:4f:
                    ce:9b:4d:a8:9b:e7:75:b0:ed:84:61:41:ec:10:17:
                    ce:b5:f2:2b:78:05:15:7c:b8:f6:c2:ed:e6:72:8b:
                    58:a0:51:06:f5:21:25:d4:3c:ab:ab:b8:1e:e9:b9:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:72:2C:44:A3:29:E2:5A:2B:9D:92:E1:C7:DD:11:E8:8E:1B:2E:F3
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:47:92:6e:c5:85:70:2b:b2:44:52:85:63:83:1c:4e:6a:0d:
         34:14:f2:a0:48:6c:42:3a:d8:ab:f3:c1:67:06:17:ff:78:78:
         fd:98:77:49:48:a4:c5:3f:37:eb:23:ac:89:ef:0d:35:6a:27:
         7b:57:e4:df:c0:63:12:da:d5:3e:d5:ab:37:82:d5:32:55:ae:
         b1:3e:2d:c3:f0:80:21:cf:25:06:d1:02:39:04:a5:78:9b:a2:
         ac:5c:74:31:2f:7e:7d:07:4d:cb:e2:a1:06:74:3f:be:3c:40:
         ed:ca:eb:32:e7:bd:de:fd:50:21:21:57:00:e0:3f:53:75:19:
         3e:ed:82:2b:a9:8a:d3:01:73:03:b8:38:1f:84:99:83:ec:81:
         8d:c9:fd:40:c4:be:a5:4e:8c:a6:e0:33:59:20:7a:67:e1:96:
         8d:97:90:86:e3:68:5e:f6:1f:6b:88:6c:0b:4c:0b:4b:1a:b5:
         b8:36:db:94:18:63:0c:92:25:83:2c:54:70:5e:0e:cb:e4:39:
         4e:32:8f:8b:4e:fc:09:d8:f7:3c:3d:d6:5f:74:b0:f2:ac:03:
         8e:c4:13:e0:20:50:b6:fb:f8:d0:2f:0c:b3:df:80:15:aa:e7:
         4f:f5:8b:8a:e0:a1:1d:fb:0c:fa:f3:9d:4d:61:68:d8:9b:c0:
         b2:c1:7c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:57:23 2026 by rpki-client