Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
File:                     ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft (raw, json)
Hash identifier:          U7pNIlX68KgiS7c3TxpLt+Ncf/G41kAI3ZCbYeldcKQ=
Subject key identifier:   43:DC:52:30:40:B8:C8:91:12:5F:A6:48:28:CD:20:84:89:F8:99:EE
Authority key identifier: A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D
Certificate issuer:       /CN=A912B1E4/serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
Manifest number:          62
Signing time:             Wed 07 Oct 2026 08:39:42 +0000
Manifest this update:     Wed 07 Oct 2026 08:39:41 +0000
Manifest next update:     Wed 14 Oct 2026 08:39:41 +0000
Files and hashes:         1: ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl (hash: sl8CuJo+Bj8j3kRV/MkH2wQsGwymnwdunQcOpXLzdz4=)
                          2: 3BE765AC2E5911F1AF1402DA99833773.roa (hash: 4vN9DxDqav8XQy5RbRHkPzQNR/xKvXelfPI7Z+9SlN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl
                          rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B1E4, serialNumber=A231A96AA2228A328BC8E6585E73630DB43F112D
        Validity
            Not Before: Oct  7 08:39:41 2026 GMT
            Not After : Oct 14 08:39:41 2026 GMT
        Subject: CN=6ac6054d-f061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:81:40:d7:f6:01:e1:ab:b2:0d:73:29:c9:
                    be:71:50:6f:71:bf:8b:87:27:bc:68:46:4e:72:3a:
                    a2:fb:49:5d:dc:c7:d5:71:d2:f6:53:4b:ab:c8:f9:
                    cc:a4:2f:14:f8:e9:d1:aa:11:3c:12:72:6a:00:06:
                    96:e7:e9:8d:e6:a9:e4:47:14:9c:17:dd:27:5b:90:
                    77:a2:b1:d7:dd:a3:99:05:80:26:60:79:21:9b:e2:
                    03:8d:b7:cf:90:67:93:d9:1a:ae:a7:be:41:08:95:
                    6d:14:a7:37:53:37:08:dd:16:70:56:b6:e9:80:67:
                    eb:20:b8:c2:58:22:c0:61:a7:f9:30:28:9e:06:bb:
                    cf:95:d0:e5:f7:04:0f:e6:d2:0b:09:12:00:66:f8:
                    5c:a1:a1:35:b1:5d:70:1a:b4:ac:9d:06:69:b2:fa:
                    63:54:1e:d0:19:b3:f4:1c:6d:14:70:a5:f9:dd:37:
                    9b:39:a8:5e:4d:43:0a:a3:b0:be:08:64:6c:a6:14:
                    0b:b3:50:5d:5c:96:3b:41:b5:8c:39:50:75:21:3c:
                    a2:67:c4:4a:b5:50:68:dd:42:01:5f:96:a8:91:23:
                    13:29:72:71:e7:54:60:29:5b:7e:62:13:37:a9:4f:
                    ce:69:5f:86:e0:83:96:5b:a2:fd:ec:5b:b9:a8:2a:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DC:52:30:40:B8:C8:91:12:5F:A6:48:28:CD:20:84:89:F8:99:EE
            X509v3 Authority Key Identifier:
                keyid:A2:31:A9:6A:A2:22:8A:32:8B:C8:E6:58:5E:73:63:0D:B4:3F:11:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojGpaqIiijKLyOZYXnNjDbQ_ES0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B1E4/F4F52CD62E5011F1B1292DA997833773/ojGpaqIiijKLyOZYXnNjDbQ_ES0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:fb:0b:d9:df:25:bc:57:6e:03:8a:0c:e4:ab:f3:fa:b3:
         c7:a1:67:3a:db:17:5f:14:be:c7:08:4c:03:92:2b:1a:df:b8:
         d6:cc:c4:64:0a:d1:c6:4b:fc:e8:2d:0f:d9:17:2d:c2:3c:2b:
         b7:56:06:73:6b:b5:a4:a8:45:cc:78:60:9e:85:86:64:f8:4f:
         fb:df:ef:a4:62:1a:2b:d3:5d:e6:98:a8:9b:37:5f:c3:52:0a:
         0c:c3:73:25:e5:45:01:47:11:1d:cf:4e:d5:22:f7:72:47:61:
         42:86:70:58:3e:f4:d1:0d:8e:35:4c:c7:53:d4:2e:df:37:99:
         d0:32:67:57:50:64:37:63:91:06:57:e9:84:74:83:21:19:d7:
         0b:bf:c7:ed:67:56:42:fa:91:1a:16:31:ac:2f:c3:f6:8e:f2:
         d8:57:db:6d:e5:27:50:f3:b9:9f:01:d1:f4:d8:c1:12:16:a3:
         2b:da:91:54:1c:95:fa:d6:ca:2b:79:29:9f:48:cc:9f:6f:c0:
         11:55:f1:18:1d:a9:91:98:35:59:1c:96:7e:20:83:fc:8c:3c:
         03:a6:38:6e:28:f8:8b:9b:f3:ef:2d:f9:f8:00:43:70:49:42:
         94:65:16:6e:02:86:85:16:ea:6e:03:01:05:da:a3:6f:b1:7c:
         a9:3f:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:50:04 2026 by rpki-client