Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
File:                     ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft (raw, json)
Hash identifier:          M4aErZN97ehLHjDD+KEryMI56cYzNw+hl9iM9bv+UX8=
Subject key identifier:   F8:F4:1C:88:1F:EA:CE:20:9B:A2:2D:2D:79:1B:2E:72:53:0F:74:F5
Authority key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2
Certificate issuer:       /CN=A9196AF7/serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
Manifest number:          50
Signing time:             Sun 23 Aug 2026 07:55:38 +0000
Manifest this update:     Sun 23 Aug 2026 07:55:37 +0000
Manifest next update:     Sun 30 Aug 2026 07:55:37 +0000
Files and hashes:         1: ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl (hash: wiXAl3YSP4A6rGbeXHhhDWsaqxWr+SoR5BFbUA0LKY8=)
                          2: 7EF6CB6E24CF11F1AAA533A9A9833773.roa (hash: 8y7L9hPSTuk1LDFXpb7ShDJmE7OnOp5HbjTXee/kCzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl
                          rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2
        Validity
            Not Before: Aug 23 07:55:37 2026 GMT
            Not After : Aug 30 07:55:37 2026 GMT
        Subject: CN=6a8aa77a-0550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:fe:17:78:6b:23:db:2b:f8:02:1f:03:90:
                    a3:e5:d7:3c:c3:73:e7:11:12:fb:4c:da:95:f1:c4:
                    e9:3c:d9:d5:2f:18:a5:e6:83:be:30:13:9f:0a:49:
                    71:c0:7e:43:15:b3:08:a6:0f:55:f4:9b:ac:97:b7:
                    90:ae:4c:53:69:73:2e:d3:cd:65:7d:89:0c:fe:95:
                    57:9e:51:f5:0e:9a:ea:71:15:10:a3:d2:c6:46:6b:
                    fe:53:4f:0e:7c:b9:95:15:d3:d7:e1:64:04:51:eb:
                    8b:5b:15:ef:ef:b3:e6:5e:48:97:f9:a6:b9:be:5b:
                    a2:d8:de:f9:4b:25:5b:50:da:69:5f:62:91:dd:41:
                    2f:a9:61:ca:c7:f4:ea:d0:a6:e9:e5:26:bf:dd:2e:
                    56:3f:e8:55:16:27:6c:c1:94:59:14:98:91:6e:e6:
                    6a:8d:50:14:d9:8c:29:1a:3d:49:4e:e3:ab:56:ea:
                    32:84:ab:79:2f:9a:95:0b:d2:10:d8:98:8b:86:67:
                    fb:21:b7:c1:48:37:e4:62:c3:96:f7:be:10:15:8f:
                    3c:cb:b4:f0:df:96:29:6d:e7:c3:31:3f:a4:9c:53:
                    ab:21:62:2b:06:85:d9:6b:fa:a3:cd:23:26:ef:1a:
                    b5:c3:85:7e:39:8f:15:c9:8e:fa:0e:87:17:1b:41:
                    42:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F4:1C:88:1F:EA:CE:20:9B:A2:2D:2D:79:1B:2E:72:53:0F:74:F5
            X509v3 Authority Key Identifier:
                keyid:A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e7:f9:e4:88:a3:be:df:7d:65:0a:4b:6d:c2:d0:90:17:32:
         a8:c3:e7:29:80:d8:6d:ee:dc:4c:f2:71:50:c0:74:a9:31:65:
         15:2d:89:e0:83:dc:0c:a8:fc:14:2c:ff:8c:04:d3:fa:72:15:
         4c:6c:4c:0e:cb:5a:d3:9c:92:89:5f:25:38:10:94:1f:c0:88:
         6b:37:7d:bd:53:1e:5d:59:89:13:db:d7:e6:ae:df:21:61:ca:
         4e:b8:ce:43:34:44:2c:d4:be:dc:b4:c7:0c:7b:9c:88:53:6e:
         04:b2:78:12:ef:b0:c0:4c:4d:97:59:dd:34:4b:0c:62:8b:e9:
         a1:d3:9d:cb:82:ec:15:a4:b2:ea:af:b8:77:3f:45:76:f0:fa:
         3c:3b:d1:2b:d4:60:8c:15:5b:83:d7:cf:13:58:d1:b1:06:d2:
         44:58:7d:39:3f:f8:e7:cb:44:1d:6e:0a:bf:d0:a4:ae:32:82:
         b8:65:95:e3:1f:b7:3b:6b:ab:57:b6:e1:98:30:9f:e6:3f:86:
         fe:11:05:a7:00:e3:ef:db:16:8c:64:9d:86:af:4c:8d:b7:be:
         5b:24:26:1f:c2:3c:35:41:4a:e7:96:16:09:73:68:9a:3f:ee:
         47:64:df:71:4e:48:eb:9b:10:ec:33:eb:f8:68:d3:95:6a:5e:
         33:3f:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:36:19 2026 by rpki-client