Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
File:                     owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json)
Hash identifier:          aR1mkhi2Kp7naPnCsSOxFloqBEOT6HASNAF+5wZhEFo=
Subject key identifier:   D3:E7:0D:22:48:E1:37:3F:C9:52:34:D7:15:80:A2:15:0E:EF:33:40
Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06
Certificate issuer:       /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
Manifest number:          0297
Signing time:             Mon 21 Sep 2026 01:41:40 +0000
Manifest this update:     Mon 21 Sep 2026 01:41:40 +0000
Manifest next update:     Mon 28 Sep 2026 01:41:40 +0000
Files and hashes:         1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: 8CnJV7OQnhdz8F55EmcY8w5l5vy2Iw/KNIfdARYxoMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl
                          rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91185B8, serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406
        Validity
            Not Before: Sep 21 01:41:40 2026 GMT
            Not After : Sep 28 01:41:40 2026 GMT
        Subject: CN=6ab08b54-31c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:33:df:23:63:8e:78:e3:55:66:7c:51:e5:f2:
                    68:f5:2b:0b:b0:65:60:6b:52:46:19:ea:ba:a6:20:
                    47:07:b2:b8:f0:c3:a9:89:82:79:ce:e3:67:78:28:
                    f5:61:b8:ee:3e:a5:cc:68:26:f0:b0:75:76:f9:3a:
                    24:0e:8e:2e:c9:7a:cd:2e:b4:d6:7a:6a:03:bc:94:
                    1a:c2:de:8f:b1:ce:d0:52:f8:60:0f:41:c0:84:81:
                    a7:0d:6d:3b:ba:fd:f3:ae:87:fb:ca:ea:19:1b:86:
                    4e:db:2a:1b:30:0c:01:59:22:f6:d6:88:a0:29:d2:
                    32:ae:04:74:67:2e:2b:8f:59:aa:bd:f7:08:fe:83:
                    2a:87:42:12:0c:ad:9e:01:05:ce:23:74:87:dd:8a:
                    a3:47:b5:b2:17:ed:3e:2e:4d:7c:4b:ca:e4:96:01:
                    fa:d0:87:3b:b4:c4:60:c2:42:cf:60:b4:69:59:61:
                    44:8b:97:0b:a6:f5:66:9f:67:b8:8c:f0:b6:e5:b8:
                    39:dc:37:b2:5b:99:fd:56:a9:81:30:77:c0:26:8b:
                    16:71:6a:8c:17:27:a9:ea:e2:dc:f1:34:cc:4a:bd:
                    d3:fc:a0:08:e6:ed:54:9c:0d:cd:73:47:55:62:d9:
                    86:a2:25:c9:1f:42:08:6e:08:c6:41:4d:a8:16:bb:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E7:0D:22:48:E1:37:3F:C9:52:34:D7:15:80:A2:15:0E:EF:33:40
            X509v3 Authority Key Identifier:
                keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9a:f6:16:87:6d:66:75:36:08:49:ac:ce:30:92:f9:49:1a:
         a4:60:5e:ec:67:ac:6b:bc:b1:97:4c:cc:0d:8d:05:d5:c7:c8:
         46:1a:0c:58:82:18:a4:90:5e:df:f1:1f:59:6a:54:bc:69:d4:
         15:6a:6c:26:20:e5:7e:00:96:48:60:f3:34:8d:2e:eb:dd:a4:
         b4:2e:6e:fd:9c:c2:d1:b2:ff:cf:98:e4:10:db:fc:73:06:96:
         c8:26:a3:11:26:2b:76:8b:78:bf:9f:de:8e:4c:38:31:bf:fc:
         2d:af:6f:99:1a:8b:a0:02:83:63:fe:77:fe:f7:86:9c:1b:52:
         ca:4d:49:ee:2e:09:ac:33:44:3f:26:b7:a8:cc:d3:9e:d6:9b:
         aa:5a:b1:f8:5d:14:1f:95:8c:ee:14:ae:55:ce:f9:5a:54:5c:
         7c:1b:c5:3c:db:60:45:c5:8a:12:6e:c4:f4:10:fc:ee:62:17:
         11:c8:70:48:e3:d6:b8:f2:69:c2:83:30:c4:bf:d2:16:91:5b:
         53:f0:a8:ab:51:73:7e:e5:f3:81:86:fb:88:37:ca:c0:a6:1f:
         b7:f0:38:79:d7:2d:cd:a7:38:8d:1b:84:b0:05:fc:fa:6b:d1:
         fb:0c:3b:88:0b:c7:3d:0f:a3:0b:67:6e:69:d2:c2:c2:cf:13:
         2b:79:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:31:01 2026 by rpki-client