Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
File:                     oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json)
Hash identifier:          obYD4D9jEQ64szQQbl0qbAVw9JfREZCQv2aAnZoskLw=
Subject key identifier:   D9:34:B1:99:FC:0D:72:57:A0:13:4D:CE:CB:68:1F:2F:EF:CE:6D:03
Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23
Certificate issuer:       /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
Manifest number:          0125
Signing time:             Thu 16 Jul 2026 14:16:20 +0000
Manifest this update:     Thu 16 Jul 2026 14:16:20 +0000
Manifest next update:     Thu 23 Jul 2026 14:16:20 +0000
Files and hashes:         1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: /+No+Cotms//dr7VD7r13gI6UQm4sqhn7DAIQRbFGr8=)
                          2: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: DA85ff4aMzWQg5AImUfIHcT74CRXr+XSDwxZJMl53Eg=)
                          3: 8AE793B2E9E311F0A43C19FF656F56BC.roa (hash: iLjsYldebmEc4jQ39cKvj356cAs2Ip03tkyos/Cg+/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl
                          rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 14:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923
        Validity
            Not Before: Jul 16 14:16:20 2026 GMT
            Not After : Jul 23 14:16:20 2026 GMT
        Subject: CN=6a58e7b4-09c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:59:0a:c3:f9:1d:3c:f4:08:88:36:f0:e0:
                    a5:27:44:c3:b8:65:96:ff:5f:a8:1d:f4:aa:b6:aa:
                    ad:dc:ae:6e:b8:6a:10:c4:a5:b5:ba:3b:9c:83:4f:
                    7e:18:e2:4a:f1:75:dd:1e:ce:6f:ce:06:86:8e:8b:
                    7e:eb:31:19:ae:22:5b:48:60:63:24:b9:ff:0e:0b:
                    da:eb:70:c5:16:d9:41:27:37:ea:ba:12:3c:57:6a:
                    c9:b5:e8:f6:f6:32:7d:ff:79:62:2b:3c:b8:db:81:
                    ef:bf:1e:6f:43:d9:12:a4:86:3c:7f:ef:2c:79:e5:
                    5e:8e:6c:da:e5:71:9f:1e:96:31:4d:b6:96:2e:74:
                    2d:f0:34:13:7f:69:13:01:20:3f:2f:56:de:a6:f7:
                    ab:9d:70:49:7a:2f:3b:35:b2:40:21:05:40:24:4e:
                    90:14:40:a9:30:4b:20:0c:50:ab:62:79:84:e1:f0:
                    05:0e:56:db:26:0b:1a:fe:c2:71:5d:27:17:34:97:
                    2e:53:48:2f:f0:86:cf:04:eb:f7:8b:90:27:87:d6:
                    dd:50:1b:10:29:9b:64:36:6a:25:4b:d3:74:c2:f5:
                    f3:f0:d5:7d:57:d7:58:3e:24:53:85:8f:52:74:f1:
                    6c:a5:4c:20:20:a3:08:10:66:f7:dd:7e:11:0e:0f:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:34:B1:99:FC:0D:72:57:A0:13:4D:CE:CB:68:1F:2F:EF:CE:6D:03
            X509v3 Authority Key Identifier:
                keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cc:9b:a4:04:b4:68:f7:cb:a6:ea:3d:6a:32:9d:a6:87:bc:
         7a:9f:94:ab:26:37:b9:83:03:e9:bd:be:e1:8e:13:31:bb:76:
         ae:d2:49:ce:4d:eb:0f:85:c1:c4:22:f5:ce:7f:6f:ba:dc:7c:
         e2:f7:3d:c5:6c:f9:eb:11:b9:31:d3:2a:c7:75:ad:47:df:2f:
         9b:97:d7:9a:30:da:1a:36:2c:f8:d1:5a:a4:ca:52:60:02:56:
         80:a0:a8:a6:37:45:8d:e7:d6:af:e7:70:63:3d:83:0b:2f:43:
         3c:42:00:c7:e9:dc:f6:2e:9d:ce:04:b8:2b:ad:50:df:a2:e4:
         6f:12:18:3c:20:7d:5b:b6:c1:7b:db:ea:d8:5b:b0:30:96:b7:
         8b:4d:c6:54:30:7d:98:35:e9:58:19:bd:22:5e:ca:e9:1b:dc:
         80:42:e1:64:3f:a8:c9:a1:ec:fb:32:82:a6:42:5a:ca:b9:2d:
         6b:69:d5:6a:93:90:cc:0a:cc:c2:88:de:78:8b:24:81:b1:51:
         ee:53:b1:c3:f2:9a:ff:b3:4c:6b:0e:ff:c2:32:42:ed:37:fb:
         dd:67:76:6d:42:2e:a0:da:94:ab:7d:41:01:f1:67:f2:d3:8e:
         42:b1:db:2a:a4:4f:b2:6e:fa:fc:f5:90:f1:80:7b:70:fb:55:
         cc:f1:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:31:01 2026 by rpki-client