Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
File:                     i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json)
Hash identifier:          hEPa449YuGUoBnP4AoFnszS+x6j5nQPVR0z3sb/KHkw=
Subject key identifier:   FA:72:59:55:1A:58:25:80:D9:32:56:E3:AF:DF:A1:8E:02:D7:D5:E6
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Certificate issuer:       /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial:       0D78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
Manifest number:          0D3E
Signing time:             Sun 20 Sep 2026 18:16:54 +0000
Manifest this update:     Sun 20 Sep 2026 18:16:53 +0000
Manifest next update:     Sun 27 Sep 2026 18:16:53 +0000
Files and hashes:         1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: H+EYp3K5xG8QMuXNCoQtQgjm8bzWfeWSvAnwMy4U+8E=)
                          2: F315E40E545811F1A4AA7BC6AE833773.roa (hash: mQCN8GGTKlZamLj2u8NmpeyO8hy09UCVcvX6A9tbhCk=)
                          3: A0C1D666451911F1A50ED04697833773.roa (hash: vRJyMNJ4KrDOIdOdKlShLmonDHmEMHH8Xt3hyYOcOF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
                          rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3448 (0xd78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C21E, serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
        Validity
            Not Before: Sep 20 18:16:53 2026 GMT
            Not After : Sep 27 18:16:53 2026 GMT
        Subject: CN=6ab02315-bf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:ce:cd:c8:07:db:87:5b:29:10:f9:e2:87:
                    04:31:91:13:f4:7c:85:43:65:e8:52:9a:6d:47:66:
                    8a:9e:66:3e:76:7c:99:bf:bb:d5:b4:03:fd:77:b8:
                    18:31:49:33:77:71:1b:d0:ae:09:48:7f:53:b0:92:
                    65:0d:68:38:a8:ac:5a:56:d9:87:27:14:8b:1c:fc:
                    b9:c1:23:6d:05:5e:b1:b8:47:6e:10:cc:98:bf:3e:
                    e4:65:54:7e:95:48:c6:d6:b2:01:2c:9d:80:49:db:
                    4a:d7:69:6a:8f:80:49:cc:24:09:d5:fb:a2:a4:98:
                    2a:f9:01:a3:f2:cd:fc:2a:46:98:f4:35:ff:eb:96:
                    3c:55:49:9b:9a:f9:be:89:0d:06:e3:da:35:e5:83:
                    1e:09:3c:aa:89:30:18:c4:8f:63:3b:1b:5b:66:de:
                    db:ed:1c:eb:18:bc:e7:17:26:ac:94:03:bd:84:41:
                    e3:ea:e0:b6:aa:76:9b:60:12:00:15:88:41:6c:c8:
                    8e:f4:96:c9:6d:f5:ca:52:0c:e5:45:4f:ec:a0:6b:
                    3b:2e:ef:09:bd:b8:c0:8a:47:7d:ef:e5:0a:85:10:
                    ea:9b:56:7f:b6:f9:54:16:42:06:1e:62:cc:c4:76:
                    02:a4:3f:6b:71:cb:df:cd:3f:f5:85:92:d1:40:93:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:72:59:55:1A:58:25:80:D9:32:56:E3:AF:DF:A1:8E:02:D7:D5:E6
            X509v3 Authority Key Identifier:
                keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cb:cf:9e:5f:f8:bf:a9:95:eb:cf:62:fe:71:fd:a8:dc:68:
         5e:ea:20:dc:94:9d:5c:a2:6e:5e:ad:e8:9c:b3:c7:17:63:74:
         49:58:28:e5:49:d4:65:fa:4d:41:b9:5a:b2:db:f0:46:64:a3:
         bb:43:7b:48:57:48:2c:64:03:17:87:52:74:0e:46:df:e5:a3:
         50:8b:f6:c3:19:19:ba:f1:02:69:5f:c1:63:f2:59:f3:9a:31:
         70:34:5f:e2:14:79:f4:84:e6:d9:b0:69:5b:4b:1d:c7:a0:20:
         12:77:60:75:2a:14:0f:be:2d:b0:1d:1c:1e:ae:50:18:0d:a5:
         91:1d:7d:e4:1f:c6:6a:a4:3b:6d:06:41:ed:d8:ad:3b:60:01:
         a9:87:66:d2:6c:6e:29:04:c3:8b:f2:b8:e5:3c:45:04:79:6b:
         e4:a5:21:10:18:37:53:dc:ba:e2:8a:b0:63:b6:ad:6c:11:1c:
         8a:47:60:1e:a7:8d:e9:4b:d5:91:ba:45:8c:6f:03:d3:00:9f:
         c1:c8:97:57:69:82:5f:9d:4d:af:6d:cd:82:6d:62:2a:c9:66:
         fd:3c:17:d5:c2:3a:b6:18:c8:67:dc:3f:6a:65:77:27:ff:90:
         09:d5:61:54:35:6d:5c:02:fc:e6:75:e7:66:d9:b2:22:e7:9b:
         bf:c2:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:21:05 2026 by rpki-client