Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
File:                     OSQdwqlJIur_mC2bQID4vkD3tr0.mft (raw, json)
Hash identifier:          zVTBPgh70ryrQeQ6YKJu5zeTF78CJG6zE7FOBkvf/9Q=
Subject key identifier:   D5:EE:69:62:24:BD:98:D3:01:F1:BA:A5:8A:A1:87:0E:95:14:15:13
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
Manifest number:          0101
Signing time:             Fri 17 Jul 2026 07:24:57 +0000
Manifest this update:     Fri 17 Jul 2026 07:24:57 +0000
Manifest next update:     Fri 24 Jul 2026 07:24:57 +0000
Files and hashes:         1: OSQdwqlJIur_mC2bQID4vkD3tr0.crl (hash: t1NypLXXB/BXVZbf9Z6QQOJgffKP53nEE1iNIj2Hgvc=)
                          2: 7B3E74A6025011F096E34819C4F9AE02.roa (hash: ioHaAryV52goIPTIw4MmhfdDQAaRIVCGfRVkC5i3KUo=)
                          3: B0C47BF26CFE11F09B124778C4F9AE02.roa (hash: xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=)
                          4: 16105334922D11F087917886C4F9AE02.roa (hash: rwcvJwRrSw9L7kAxnP7pO6DGMWmMpKwilOoZUFJ3P8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: Jul 17 07:24:57 2026 GMT
            Not After : Jul 24 07:24:57 2026 GMT
        Subject: CN=6a59d8c9-123f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:85:b2:55:39:a6:ed:99:ce:21:1d:a9:8d:
                    28:28:ed:b0:ce:6e:f3:7d:85:d3:4c:a5:0a:5d:09:
                    15:c8:7e:d0:f0:ab:54:ab:3e:39:1b:fc:8a:34:e0:
                    4e:ff:b9:a2:5e:12:8e:d4:0a:86:60:25:58:19:68:
                    95:85:88:55:cd:63:f9:a9:85:f0:c0:c5:43:77:bf:
                    b3:d6:dc:46:fc:2f:4f:72:c6:a3:a4:41:8a:63:54:
                    8b:34:ea:84:fa:87:ed:66:5e:d8:e0:48:f3:f5:c1:
                    2c:a1:78:d4:8b:4e:b0:fb:68:4e:29:f0:dd:30:10:
                    8a:fd:9f:25:bb:4a:8b:3f:9b:f9:0c:98:35:08:5b:
                    ae:f8:64:9c:19:92:38:b7:d6:00:8b:a9:1c:de:43:
                    c5:06:af:0c:4a:b5:a8:d7:d6:d1:7f:a9:1f:dd:2c:
                    0d:6d:cc:36:44:4b:41:b7:31:72:df:b3:c2:44:78:
                    60:ac:9e:c0:a9:fc:d7:ab:92:07:02:ef:42:f4:25:
                    dc:d3:6f:78:4f:df:98:4a:fb:dc:7f:d5:af:03:3e:
                    1b:3d:20:05:5e:eb:66:94:8b:55:3a:1b:38:86:8e:
                    a4:84:ea:c0:37:d7:6a:63:5c:d8:39:7e:4b:50:54:
                    d4:98:01:14:72:e9:44:a9:f3:ab:60:c1:de:1f:be:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EE:69:62:24:BD:98:D3:01:F1:BA:A5:8A:A1:87:0E:95:14:15:13
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:51:dd:a1:3b:f1:1e:24:5b:e6:8a:81:88:65:67:f0:ea:ac:
         9c:e7:b1:a7:7f:90:9e:c4:2e:30:6e:ee:5f:a5:32:fc:ad:70:
         13:b9:2d:36:83:d5:be:8b:2b:31:5f:3e:1d:c4:c2:c2:c7:01:
         5e:29:58:08:c2:42:48:16:e9:b2:44:48:16:59:45:55:42:cd:
         70:d5:4b:95:42:7a:77:5e:fa:42:0c:d8:19:6a:35:77:a1:9c:
         ad:d7:0a:5e:08:95:c8:2b:ab:94:11:0b:91:db:47:69:e8:7b:
         76:dd:3a:4c:43:77:66:bd:49:b0:d6:d8:c2:30:91:dd:cd:40:
         07:bc:84:f1:86:13:0b:81:79:ce:50:33:88:a3:7c:d8:65:61:
         82:98:a4:c6:dd:79:b4:96:a7:60:65:0f:bf:dc:0d:cd:38:69:
         3b:21:29:38:d7:34:4c:98:5b:74:8f:57:8b:b1:8f:c4:03:74:
         5f:ff:40:71:51:10:cf:70:6e:ce:80:42:1e:a8:73:1a:fa:7a:
         34:d3:7a:f1:d4:6c:93:87:26:f9:92:07:b0:6b:7e:71:f5:f7:
         d4:6f:df:b4:fa:63:e4:57:19:bf:8e:c2:66:ee:97:f1:a0:47:
         79:2b:10:6c:a6:1d:11:bf:1c:77:4c:c9:86:a9:fe:bf:69:5a:
         a2:fd:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:49 2026 by rpki-client