Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          I4uoBauHCWKHuss6Tejuf2bxMjiXrdTq4Du/R+rRhPw=
Subject key identifier:   D7:EC:E1:65:E1:CA:E2:D5:9F:47:57:58:90:6D:65:DB:9E:98:69:E4
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       115C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0DFC
Signing time:             Mon 21 Sep 2026 14:39:11 +0000
Manifest this update:     Mon 21 Sep 2026 14:39:11 +0000
Manifest next update:     Mon 28 Sep 2026 14:39:11 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: o9Bw/UMxSYvj4+OfznkkqK5xmHwGI7gj6deq1SXdSSw=)
                          2: B35BC30CB53211F1B42F37F15011F970.roa (hash: KSzj0LdTLAiz1FUtjk9h/u0XDwsyNspF5msQCwgzr/o=)
                          3: 0F75123EB42411F19F202BBB3E11F970.roa (hash: JNL6WqomlW19XznMLYXyyQo8z6bj0pJRq0tJqCedMSI=)
                          4: DC75E9A4B4E511F1A38ADEFD3811F970.roa (hash: /JW9Vk0apJhTZwFqw6P9ComNZ+dwVYIIOxiI0EsMVuY=)
                          5: 33253220B5CA11F19A00DBF44311F970.roa (hash: sKLVgopa7iD7VB18ZJtMNmaTxumSLt54Q49L9FE+4sc=)
                          6: 5A0CB6A2B4E811F1854CDF493911F970.roa (hash: LcwdNHZ8xt+068DDbraScihxciGm/JNMucUMjF6oTj0=)
                          7: 90DF5EC4B4E711F18624952E3911F970.roa (hash: X0rwSD+HZbPZY8h7R2w+ZV104yI5jo7fwpbe6qSeuYY=)
                          8: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: fLAof7EN40ztkzN10YcbHQELHkhYt0IIW6Znw2IZaqs=)
                          9: 8dGmB_rjCduiA5gacvFfz-CchFQ.asa (hash: zt1aa+pxSfuL6A44R86Qov6zVJzYPeS7hFwUUgZgyf0=)
                          10: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: 0zLruqLd1y3E26SuAUI5s7BI64FwkLMd9kXmrMpepI8=)
                          11: 6D2E74CE119511F18720E261383D8C67.roa (hash: 8hV+I/mqYZMZ3vIhGJc/3XoKmvvL+nj8+XqDRjhEKdk=)
                          12: 387CFC8CB53211F1A3F79FC95011F970.roa (hash: 9RU4NC4GOwe0MSqyLPNSykxJNhzsYTqRRIbYRGwrGLY=)
                          13: 4F892B3E79E211F186F7A31866A30FBC.roa (hash: Grkkrl99VNi5MICWLKTFyVceKxzaNnh3d7iazSAthD0=)
                          14: 59103346B4E811F1854CDF493911F970.roa (hash: NNEMwnDF6sfToB41gHzDn96KDua5tOSoYN5KtgYQOME=)
                          15: F85564DA127711F18BE24F01353D8C67.roa (hash: W4FJg9h2yD393Ffa6VXVJzFyZbTn5L3T36PgxiREF00=)
                          16: 1E66F094B5CA11F1A1E2B0F14311F970.roa (hash: yWjDQdYNQhUx5r9jrComjavaquGimA0SlIdJ0UPL5Po=)
                          17: 849E45A839B811F1B2456B00AE833773.roa (hash: NIopzKgjt4Tj6l5DHK6hyouyjYzBxpc2yEAWeW/rLjM=)
                          18: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: lIkl2NY+Awo03/dF05stBpELHB4nLbupIltgZJsoD+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 14:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4444 (0x115c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Sep 21 14:39:11 2026 GMT
            Not After : Sep 28 14:39:11 2026 GMT
        Subject: CN=6ab1418f-4b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:65:78:cb:bd:70:63:95:8d:a4:8f:1d:a3:
                    e5:34:35:d8:06:9f:db:ee:1b:4f:ec:b6:13:94:e4:
                    c2:b6:c5:d1:a2:e4:30:df:37:6e:2a:2b:6e:de:31:
                    0b:ff:bb:6c:0e:a7:a5:ec:b3:f1:5f:09:e3:77:1a:
                    79:8c:38:7c:ec:9c:7c:20:95:ad:5f:c4:e0:33:e1:
                    d8:bf:cf:db:c0:85:6a:f2:a8:5a:06:d8:99:ad:e6:
                    2e:d2:ed:36:41:cf:d2:2f:17:26:4e:e8:a0:b2:66:
                    2b:69:c9:6f:e0:d2:41:3c:c2:b2:97:6b:a1:4f:5c:
                    05:bf:5c:58:76:27:3c:1c:50:7c:72:e8:5b:1f:2e:
                    5a:cf:5e:51:12:68:2d:ec:17:ce:bd:38:16:4f:de:
                    72:5d:18:60:1b:4e:52:db:e4:d5:f9:89:2a:09:43:
                    5b:41:47:a6:3a:ad:34:1e:23:38:f8:ca:9e:44:0d:
                    47:a0:25:e5:81:4d:9e:e6:e7:b6:8e:a2:70:e6:e0:
                    d7:d9:03:dc:6e:40:db:ef:86:e1:93:7b:b0:ed:a6:
                    04:18:b6:b4:0c:b1:50:8d:1c:16:4e:ad:de:72:63:
                    8d:1f:5c:54:4e:d5:fe:3c:e9:41:02:79:04:69:4d:
                    47:a6:2c:6b:a4:a1:dd:90:cd:c3:ce:0b:d9:4b:c2:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EC:E1:65:E1:CA:E2:D5:9F:47:57:58:90:6D:65:DB:9E:98:69:E4
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e9:ba:3d:1c:00:7d:6d:a7:dd:ab:b8:20:92:7f:a4:d7:40:
         5f:e8:9f:9e:cb:74:0f:02:40:f2:69:46:fd:76:97:4c:69:a1:
         88:f6:26:ef:80:a3:5a:92:f7:b0:11:c6:1c:b5:e6:cc:96:b0:
         2c:49:ed:94:1e:da:47:cb:a5:f9:de:76:e7:d6:18:98:a7:ed:
         21:3e:8d:2a:77:16:e5:eb:51:f7:f7:ab:1f:ae:30:1b:1b:8d:
         03:55:86:33:a2:92:1f:00:6d:6f:08:34:ed:59:72:a0:56:42:
         dc:db:e8:6f:20:9b:c9:4d:96:85:d7:f6:be:ab:e0:93:22:0a:
         21:6d:a4:f5:dd:f3:3c:9e:df:35:0c:92:26:98:8e:96:9b:a4:
         48:2e:e8:b0:ca:78:e1:a2:2d:50:ec:c0:57:ec:b7:9e:cb:08:
         ce:96:25:d2:79:a9:78:9a:c9:12:30:3e:9e:63:90:84:06:b7:
         16:7a:cd:55:c6:38:b5:7c:c2:b1:5f:7b:d1:97:59:ec:dd:d7:
         0c:b5:74:9d:9f:bf:d7:62:08:e9:29:6d:00:bb:8f:8d:b7:7c:
         2e:d5:49:da:01:ee:90:c5:94:35:57:1b:79:d4:61:5b:4a:cb:
         6d:2a:28:3f:78:51:3a:f3:c9:2d:cd:86:11:b5:72:f6:8e:f5:
         9e:14:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:07:00 2026 by rpki-client