Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
File:                     OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json)
Hash identifier:          R9ug5pUOX+Gi8y349Vr+vgs1IvPuhjYnKmWEumrJx+c=
Subject key identifier:   24:CD:C4:A4:05:A5:F5:3D:2B:0B:5A:A5:1C:57:22:DA:A0:40:95:56
Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F
Certificate issuer:       /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
Certificate serial:       07BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
Manifest number:          07AA
Signing time:             Tue 04 Aug 2026 21:53:14 +0000
Manifest this update:     Tue 04 Aug 2026 21:53:14 +0000
Manifest next update:     Tue 11 Aug 2026 21:53:14 +0000
Files and hashes:         1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: 957DD40pVB1wH/PZ7oQmTNddLzgo0AJCX4RwcZzHu7w=)
                          2: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: NHvUGTdmuwIhXvGpasqL3enB4HKIbc5EZnmgVQdvyDA=)
                          3: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 4tQkVgaEfrNeT5ZxKwsq/6JwQwooD/KUZ+m6cfHLrN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl
                          rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 21:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980 (0x7bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F
        Validity
            Not Before: Aug  4 21:53:14 2026 GMT
            Not After : Aug 11 21:53:14 2026 GMT
        Subject: CN=6a725f4a-5dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:fa:3f:9e:8c:e3:43:f6:b6:3f:f5:4c:4f:
                    4c:64:9a:26:50:b5:da:1a:f5:07:75:aa:85:2b:59:
                    7d:40:a3:f7:24:a6:5b:c9:e2:b2:ad:d3:56:a7:41:
                    4d:4a:81:c9:4c:ce:31:34:63:b9:69:7e:04:de:92:
                    f1:be:16:77:29:25:82:da:d8:b7:55:a6:74:98:cc:
                    57:4c:6c:c5:08:27:19:22:01:38:75:f5:94:a8:22:
                    68:7b:ad:72:57:e9:21:b3:45:ed:34:13:76:24:28:
                    16:ed:cc:25:11:7d:e0:83:d2:c7:fa:4c:79:20:96:
                    9e:fa:cd:d7:dc:95:0a:c3:6e:7c:c7:b5:b8:d1:04:
                    ca:4d:7c:01:d9:ed:57:27:26:2d:ec:fb:a2:c8:9d:
                    71:24:22:8a:58:19:89:b4:12:2e:be:75:e4:f9:19:
                    80:ea:10:c3:0e:91:38:69:9b:f9:d0:15:68:76:9c:
                    bd:46:91:47:d7:76:af:28:6e:a5:7e:a6:11:f4:d2:
                    14:a5:7f:52:b1:03:41:18:7e:9e:d4:a1:f7:ec:9c:
                    60:c0:7f:7b:54:cf:8b:af:4a:15:b1:5b:a4:40:d8:
                    72:39:37:d5:4f:fc:e9:31:71:f6:05:03:0f:d5:8c:
                    b7:5c:38:52:df:ce:11:d2:28:27:78:c4:e6:71:3b:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CD:C4:A4:05:A5:F5:3D:2B:0B:5A:A5:1C:57:22:DA:A0:40:95:56
            X509v3 Authority Key Identifier:
                keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2e:69:cf:79:10:51:90:98:2c:a1:e8:fc:a6:4e:c7:67:f0:
         e9:1b:bc:e4:e5:3f:02:85:56:9a:51:5e:10:0c:2a:ec:ce:29:
         bc:f5:99:45:d2:1c:d3:92:2b:e6:35:ef:c3:cd:92:c2:0c:30:
         12:c1:83:4f:8b:f8:91:17:65:15:49:24:1d:14:80:29:1c:2a:
         8d:92:6b:5b:8d:40:79:4e:12:bd:53:b3:0d:4f:68:1c:78:e9:
         5a:d7:25:ed:7e:eb:ab:31:6c:e8:89:b5:0e:8b:7c:55:d1:a5:
         6e:df:70:9c:20:d9:1d:56:de:81:7b:7b:ed:72:38:46:a2:76:
         65:53:41:db:b9:fa:60:ab:0d:ef:79:7d:30:2f:fb:f6:5c:6e:
         59:65:95:b4:94:94:d5:5a:fa:66:1b:fb:6f:61:42:34:32:76:
         4a:db:ec:f7:28:1d:c5:c7:e1:4d:d7:53:d4:3c:de:ae:cd:56:
         76:33:e9:b3:b2:47:e9:d9:c9:ea:14:6c:6b:2a:31:79:bd:c9:
         a1:6c:43:ca:4f:08:f4:66:c3:4d:88:63:fc:34:b7:4d:69:2d:
         6c:6e:42:62:91:95:2a:08:43:7c:54:8e:29:d0:f6:46:4c:be:
         0d:19:00:75:ca:13:37:ee:d4:e9:e5:f1:dd:09:ab:2d:38:a4:
         86:c0:2d:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3
NUMxNEQ2NUYwHhcNMjYwODA0MjE1MzE0WhcNMjYwODExMjE1MzE0WjAYMRYwFAYD
VQQDEw02YTcyNWY0YS01ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssj6P56M40P2tj/1TE9MZJomULXaGvUHdaqFK1l9QKP3JKZbyeKyrdNWp0FN
SoHJTM4xNGO5aX4E3pLxvhZ3KSWC2ti3VaZ0mMxXTGzFCCcZIgE4dfWUqCJoe61y
V+khs0XtNBN2JCgW7cwlEX3gg9LH+kx5IJae+s3X3JUKw258x7W40QTKTXwB2e1X
JyYt7PuiyJ1xJCKKWBmJtBIuvnXk+RmA6hDDDpE4aZv50BVodpy9RpFH13avKG6l
fqYR9NIUpX9SsQNBGH6e1KH37JxgwH97VM+Lr0oVsVukQNhyOTfVT/zpMXH2BQMP
1Yy3XDhS384R0igneMTmcTtsvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTNxKQF
pfU9KwtapRxXItqgQJVWMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC
ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG
WHAwRXliVDYweEYxd1UxbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAny5pz3kQUZCYLKHo/KZOx2fw6Ru85OU/AoVWmlFeEAwq7M4pvPWZRdIc05Ir
5jXvw82SwgwwEsGDT4v4kRdlFUkkHRSAKRwqjZJrW41AeU4SvVOzDU9oHHjpWtcl
7X7rqzFs6Im1Dot8VdGlbt9wnCDZHVbegXt77XI4RqJ2ZVNB27n6YKsN73l9MC/7
9lxuWWWVtJSU1Vr6Zhv7b2FCNDJ2Stvs9ygdxcfhTddT1Dzers1WdjPps7JH6dnJ
6hRsayoxeb3JoWxDyk8I9GbDTYhj/DS3TWktbG5CYpGVKghDfFSOKdD2Rky+DRkA
dcoTN+7U6eXx3QmrLTikhsAtwA==
-----END CERTIFICATE-----
Generated at Wed Aug 5 03:08:29 2026 by rpki-client