Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File:                     OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier:          dbzjeztDsgZawgXTIfdtckk60vv4uUDRB1aFhC3bUNk=
Subject key identifier:   5A:78:E8:F6:E6:A4:AC:B5:F8:08:39:A9:6B:83:75:AA:90:42:CE:E1
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1B63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number:          1B22
Signing time:             Mon 06 Jul 2026 16:22:35 +0000
Manifest this update:     Mon 06 Jul 2026 16:22:35 +0000
Manifest next update:     Mon 13 Jul 2026 16:22:35 +0000
Files and hashes:         1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: dx5kGc7eEbjmcchXVpzHd0lXZFCQFQXJjOHR+i0ZQPI=)
                          2: 95851A544E8F11F1BB8AFF5DB7833773.roa (hash: DZ5DPupzTqqmSWdwYpXblDHHSqI4zxqj2PRZ30A7k3I=)
                          3: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: 2kYQB/1ehx0OoDHYCfNabfp1Bn54gGxKktYjFpVzelU=)
                          4: 96F7E1784E8F11F1BB8AFF5DB7833773.roa (hash: qvhkzDn6OfQuvCTV8G5Fvq3qQbKfUPKsi0/SYUxzYw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 16:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7011 (0x1b63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Jul  6 16:22:35 2026 GMT
            Not After : Jul 13 16:22:35 2026 GMT
        Subject: CN=6a4bd64b-94d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ee:ab:51:1d:62:df:35:e5:fb:0a:5f:45:78:
                    04:a5:58:34:1e:8f:e0:34:27:94:cc:10:2c:6c:4b:
                    b7:52:1b:1f:34:04:ac:ce:0b:73:20:62:0d:83:af:
                    0a:a4:0a:2a:aa:9f:11:61:3c:ff:78:26:67:fa:99:
                    c6:fb:17:b0:ed:15:fa:0a:3f:96:f1:47:01:a8:65:
                    c6:98:7b:1e:71:4a:b7:54:35:7b:03:d9:05:3c:68:
                    88:00:c0:d7:63:33:c8:6f:ad:c8:b3:e7:37:ed:2f:
                    d3:e4:29:3e:91:70:03:60:67:5d:40:76:6a:65:db:
                    bb:28:8f:7a:93:02:af:01:b1:85:88:e9:e0:78:90:
                    d9:5a:ef:25:2e:4d:5a:3f:eb:59:4a:cc:7b:31:8c:
                    58:9a:bd:1e:f9:43:9d:2a:0f:8e:8e:68:23:19:eb:
                    03:ed:78:31:c4:66:49:87:3c:c7:64:da:90:07:92:
                    d0:cd:05:08:42:23:18:ae:f1:a0:b0:39:0f:aa:86:
                    57:59:1a:72:dd:64:24:68:4b:fd:63:6c:7a:84:df:
                    45:aa:e9:fa:e3:a7:d4:5c:46:5c:29:51:1f:10:d0:
                    b1:a4:77:8e:23:41:85:58:37:6c:6a:4f:23:0b:74:
                    92:c9:93:92:f5:fe:36:64:6a:51:70:3c:50:9a:d7:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:78:E8:F6:E6:A4:AC:B5:F8:08:39:A9:6B:83:75:AA:90:42:CE:E1
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:ec:97:cd:fb:db:48:7e:4c:29:f6:3f:18:eb:17:e7:ec:
         a0:d3:95:63:86:db:c8:78:21:06:13:97:d7:cd:81:33:20:39:
         69:78:81:71:d7:ba:5c:31:c5:3c:4f:78:db:35:83:eb:4d:34:
         2b:4b:6b:57:85:8d:98:e1:b1:d2:cb:e7:56:4c:db:af:6a:10:
         fe:c9:e5:a8:08:bc:cd:fc:58:67:db:25:b5:84:fd:cb:33:89:
         e9:af:27:99:89:3c:05:76:63:0d:c2:15:89:20:e5:73:d4:2a:
         b1:11:c9:1a:88:63:bc:dc:35:49:ce:d2:15:26:f9:c7:4b:13:
         c2:42:f1:af:3a:c8:9f:0e:7e:b1:46:5a:1d:53:02:0d:72:2c:
         98:8b:66:73:a7:20:77:46:55:fe:1d:38:1c:78:2e:10:98:31:
         b7:6b:3b:d4:15:0c:c7:11:13:43:a6:0f:9f:df:e9:d0:5d:8a:
         90:c9:53:14:ad:5f:e2:87:14:59:ee:97:f2:54:5a:b8:01:b7:
         83:d9:6a:92:f6:9d:4a:a2:e6:05:fc:70:4b:05:40:9c:92:21:
         d4:c1:52:e7:19:77:3d:1c:1a:49:bd:a1:5e:0e:5e:1a:bc:d6:
         96:6a:5a:95:98:5a:27:12:e7:b1:80:0b:f3:51:ae:dc:b3:be:
         69:9f:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:13:37 2026 by rpki-client