Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
File:                     oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft (raw, json)
Hash identifier:          UHmVrwk4elXw5ATfGdauramgNW4W16z3/okpMokqGek=
Subject key identifier:   19:80:7A:2D:57:C1:94:F5:80:4F:BA:84:BD:BB:0E:EC:7E:4F:51:A6
Authority key identifier: A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36
Certificate issuer:       /CN=A91965C6/serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
Manifest number:          47
Signing time:             Fri 17 Jul 2026 09:42:09 +0000
Manifest this update:     Fri 17 Jul 2026 09:42:08 +0000
Manifest next update:     Fri 24 Jul 2026 09:42:08 +0000
Files and hashes:         1: oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl (hash: muj74sGxBGLUDOMCbVYV9zJ2sEB4kmzeuzHnLi/Qm9o=)
                          2: D4496826179411F19180A41B2E3D8C67.roa (hash: GgDsG3hy1PBcF5IbzyAuO44d4hcQihWGIRpm85tQHW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl
                          rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91965C6, serialNumber=A16F18DC0144F256405885F40D8D9227EC1B7B36
        Validity
            Not Before: Jul 17 09:42:08 2026 GMT
            Not After : Jul 24 09:42:08 2026 GMT
        Subject: CN=6a59f8f1-cddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:62:ce:79:0b:f1:e4:32:4d:e3:03:3c:6b:
                    62:d5:0d:6c:f9:2a:7f:33:de:d3:e1:34:30:dd:37:
                    ed:2d:e3:52:4b:ff:82:a0:bf:22:65:56:90:0c:01:
                    d2:40:24:63:f4:0c:99:c5:d9:db:be:ad:6c:df:ac:
                    9b:61:93:2e:1b:34:f6:e1:7e:cb:fe:58:91:29:34:
                    37:50:71:42:8e:7b:35:1e:3a:a2:97:d7:f6:31:c9:
                    19:51:b4:71:a5:c7:47:f8:94:92:32:7c:76:6d:9c:
                    a4:ea:a6:88:a5:5c:67:72:7d:4f:2e:38:58:77:4d:
                    04:c3:18:a4:b5:63:fe:23:cf:be:fb:08:ec:fc:7c:
                    9f:d6:3a:97:5f:bd:47:70:90:13:c2:73:80:2e:b4:
                    19:8d:6a:5f:da:00:8f:42:9b:d7:12:99:51:2d:27:
                    96:55:27:31:f9:74:71:62:96:3b:c4:e0:e8:b3:f1:
                    d3:56:50:66:3b:4e:ee:55:b0:65:dd:43:d2:07:43:
                    5e:f1:63:f9:ef:3a:63:89:89:20:3e:d2:d1:be:a5:
                    84:1d:fa:e3:da:5b:40:41:53:ab:52:26:ae:1c:81:
                    43:01:dd:e7:d2:a2:61:3a:d6:67:57:87:1d:f1:6c:
                    a2:0c:12:3c:2d:c9:e0:96:8e:a8:3d:71:50:ce:92:
                    68:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:80:7A:2D:57:C1:94:F5:80:4F:BA:84:BD:BB:0E:EC:7E:4F:51:A6
            X509v3 Authority Key Identifier:
                keyid:A1:6F:18:DC:01:44:F2:56:40:58:85:F4:0D:8D:92:27:EC:1B:7B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/129350C6178E11F1BA3FA3192B3D8C67/oW8Y3AFE8lZAWIX0DY2SJ-wbezY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:99:31:dc:de:b0:25:45:ea:11:01:10:f9:0f:53:53:1d:d4:
         89:ef:c1:d4:a5:2e:da:fa:a3:7f:8b:4a:d6:66:11:5a:ca:01:
         29:13:23:77:1f:30:be:71:b3:7c:28:25:37:91:61:10:6d:39:
         62:38:5c:86:45:62:03:08:dd:e0:f6:ba:08:77:4a:40:57:b9:
         14:9e:db:d4:65:49:b2:a7:54:d5:3a:8a:80:a3:e1:62:6a:a0:
         82:de:87:6c:aa:a7:1e:d5:12:2d:af:67:9a:b6:76:21:42:7e:
         a3:17:96:1b:2b:65:bb:75:79:eb:1b:b8:b0:fc:1b:33:b9:99:
         a8:de:16:11:2f:3d:37:6d:8b:dc:f5:87:dc:67:83:2e:a5:58:
         25:24:ab:15:c7:fd:1a:46:15:6d:92:96:49:8f:34:bb:48:24:
         ca:49:b8:df:89:0a:cb:87:30:fd:8d:0f:14:a9:1d:00:74:97:
         79:25:be:f3:50:df:bb:d1:88:2b:3a:a8:35:b6:eb:17:4f:48:
         96:6d:be:97:64:c9:44:09:c9:3d:a2:a5:18:95:01:8c:7a:0e:
         e5:e2:c0:4f:01:41:1d:a5:64:4d:76:3f:06:f1:8c:d9:1d:84:
         cd:4e:9e:44:74:07:37:40:98:26:f9:d0:d4:74:6a:b2:ef:cd:
         79:9f:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:20 2026 by rpki-client