Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
File:                     OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json)
Hash identifier:          4iw7AdvUl3bwbRShfrmaNIdPLn7YjAT7ysBGI/EP4is=
Subject key identifier:   E1:37:F9:DF:AA:1E:23:A8:0A:1D:90:23:B3:80:20:F4:EB:3C:07:7B
Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
Certificate issuer:       /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Certificate serial:       077C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
Manifest number:          076A
Signing time:             Tue 22 Sep 2026 21:25:13 +0000
Manifest this update:     Tue 22 Sep 2026 21:25:13 +0000
Manifest next update:     Tue 29 Sep 2026 21:25:13 +0000
Files and hashes:         1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: E/jYuL/Uq4Ilp9MlfTxtVuGy45Z+Z6RMPLLW9GezJlw=)
                          2: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: dXlGJvljbOTRyiUKcUkx49BNHkG/wuJwIqZ/bk6onnk=)
                          3: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: cPeYwDdd00kAIVqMVLrluyBHMf7E83NSh4S72gm9IyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
                          rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
        Validity
            Not Before: Sep 22 21:25:13 2026 GMT
            Not After : Sep 29 21:25:13 2026 GMT
        Subject: CN=6ab2f239-44f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:ed:0d:24:0b:8c:e2:3b:87:91:b6:96:8e:
                    7a:f7:07:b1:43:44:d6:26:a9:35:b2:56:2c:92:d2:
                    43:ed:56:06:e3:e7:6d:29:81:ae:d2:b9:05:31:cf:
                    74:ad:00:b2:9d:07:7f:e1:cd:63:d0:77:b7:f7:38:
                    f4:0c:d5:d8:aa:4f:e5:ed:50:21:be:5d:ae:f9:a9:
                    22:76:00:f6:87:b8:75:5f:e3:d2:2f:87:93:cb:0f:
                    3b:69:e9:92:43:2d:a9:e4:45:18:3a:40:2e:28:1c:
                    0d:6b:fa:3c:be:a5:a2:90:56:e4:f2:7f:8d:27:75:
                    5a:b9:ab:46:00:62:95:57:72:ff:a9:ac:4d:47:b7:
                    0c:39:41:27:de:f4:ba:e7:01:09:af:e3:ac:ff:19:
                    44:6e:e8:cc:96:07:e5:28:b0:a4:4f:3d:bd:c2:97:
                    ea:06:95:45:da:bc:61:f4:c7:ab:6e:dd:ad:cd:fa:
                    2d:fb:5c:de:5f:18:12:6c:8a:3e:3a:41:75:1a:d4:
                    6a:e8:1d:3a:ad:39:e5:25:bc:a8:0d:bd:53:bd:3b:
                    05:de:fd:00:1a:78:44:7f:00:37:c6:4e:c9:f9:90:
                    26:40:65:3c:35:34:f6:c4:00:d2:95:f9:f6:3f:a9:
                    fa:49:d6:7c:f9:9f:ea:59:68:7f:e7:17:e1:b2:f7:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:37:F9:DF:AA:1E:23:A8:0A:1D:90:23:B3:80:20:F4:EB:3C:07:7B
            X509v3 Authority Key Identifier:
                keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:bb:9d:5d:98:4e:6c:cf:32:09:31:00:72:63:6c:c9:0e:
         10:9a:7e:97:0f:0a:64:1d:11:0a:2c:37:73:ad:c4:75:42:87:
         ed:37:e4:ff:55:fd:f6:62:c9:cd:32:de:5b:71:ac:b4:c2:95:
         55:24:0b:ab:80:b1:4c:4c:9e:e4:eb:7d:71:a5:7c:94:5b:5c:
         17:1f:72:ce:30:69:9b:94:e5:7e:08:92:fc:44:1a:cd:cb:cb:
         5b:f8:2c:ef:84:bd:88:e2:bf:a9:a9:0b:66:36:0f:3c:9a:19:
         3d:cd:f1:39:9f:82:13:48:87:7f:d9:58:0d:11:5d:00:da:9c:
         00:97:f6:d0:b8:68:07:60:d9:e4:2a:e0:1e:fa:1f:e3:1e:77:
         2f:ac:86:08:8a:c5:07:a5:1f:48:91:17:76:67:18:46:00:0c:
         dd:13:76:3c:8b:c5:cc:79:98:3e:ef:b6:58:f9:c7:92:a1:cd:
         bc:7e:a8:77:ad:fd:b2:ac:ad:7d:ff:13:38:2c:e0:c7:f8:cb:
         7d:45:2f:a7:fc:0a:02:ad:c8:a9:c9:b0:10:a5:58:b9:97:ce:
         e5:d9:aa:9e:a8:f7:6a:fb:25:57:fc:99:f7:7f:f4:5e:18:e1:
         74:d4:91:89:23:51:32:52:ef:42:49:c2:2c:f8:77:d2:63:32:
         54:23:0b:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG
Qzg3MkU1QzUwHhcNMjYwOTIyMjEyNTEzWhcNMjYwOTI5MjEyNTEzWjAYMRYwFAYD
VQQDEw02YWIyZjIzOS00NGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwXtDSQLjOI7h5G2lo569wexQ0TWJqk1slYsktJD7VYG4+dtKYGu0rkFMc90
rQCynQd/4c1j0He39zj0DNXYqk/l7VAhvl2u+akidgD2h7h1X+PSL4eTyw87aemS
Qy2p5EUYOkAuKBwNa/o8vqWikFbk8n+NJ3VauatGAGKVV3L/qaxNR7cMOUEn3vS6
5wEJr+Os/xlEbujMlgflKLCkTz29wpfqBpVF2rxh9Merbt2tzfot+1zeXxgSbIo+
OkF1GtRq6B06rTnlJbyoDb1TvTsF3v0AGnhEfwA3xk7J+ZAmQGU8NTT2xADSlfn2
P6n6SdZ8+Z/qWWh/5xfhsvcgGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOE3+d+q
HiOoCh2QI7OAIPTrPAd7MB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE
NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa
V05pbmtSam83MWI4aHk1Y1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANuq7nV2YTmzPMgkxAHJjbMkOEJp+lw8KZB0RCiw3c63EdUKH7Tfk/1X99mLJ
zTLeW3GstMKVVSQLq4CxTEye5Ot9caV8lFtcFx9yzjBpm5TlfgiS/EQazcvLW/gs
74S9iOK/qakLZjYPPJoZPc3xOZ+CE0iHf9lYDRFdANqcAJf20LhoB2DZ5CrgHvof
4x53L6yGCIrFB6UfSJEXdmcYRgAM3RN2PIvFzHmYPu+2WPnHkqHNvH6od639sqyt
ff8TOCzgx/jLfUUvp/wKAq3IqcmwEKVYuZfO5dmqnqj3avslV/yZ93/0XhjhdNSR
iSNRMlLvQknCLPh30mMyVCMLCg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:51:19 2026 by rpki-client