Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
File:                     oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json)
Hash identifier:          dT8ibCGcSuPYG+dx2u2HCB2jnf9bsfYv225MPVLbTvU=
Subject key identifier:   59:DC:B0:F1:B3:FF:03:89:07:33:5C:22:C6:D5:D5:C7:37:EF:CD:1E
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Certificate issuer:       /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial:       0AE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
Manifest number:          0ACA
Signing time:             Thu 08 Oct 2026 19:36:21 +0000
Manifest this update:     Thu 08 Oct 2026 19:36:21 +0000
Manifest next update:     Thu 15 Oct 2026 19:36:21 +0000
Files and hashes:         1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: Nyu+3nx7UiIVRNkdzcRY/NwTAPJ6oY1A4eMDNdnBvtk=)
                          2: D65601C8861C11F188AD997381A30FBC.roa (hash: WU7YE/K0cvEfAIH9sG9oqCbuXQfC4KtRjMOmj1DEWdg=)
                          3: 6FD03784861C11F18E80495A81A30FBC.roa (hash: +OaHRdor7FrSH8stlmfhFUun2yan7PWVuqWKNlAkwUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
                          rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788 (0xae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
        Validity
            Not Before: Oct  8 19:36:21 2026 GMT
            Not After : Oct 15 19:36:21 2026 GMT
        Subject: CN=6ac7f0b5-ebb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:41:b8:88:89:e6:2c:2d:12:dd:8f:d0:a6:
                    51:40:f0:69:c3:cc:c4:be:e4:93:65:35:cc:7d:ac:
                    a5:36:be:a5:a1:17:8a:be:6e:9c:a4:24:7e:bd:7a:
                    43:fd:1f:ff:d1:e1:40:33:8e:ea:56:47:2e:54:20:
                    ed:8d:f3:ff:f0:df:d8:93:98:61:05:b1:51:d5:98:
                    28:74:9e:d8:e4:6b:76:a6:45:49:63:22:cc:d0:8f:
                    f2:e0:46:1a:ac:1b:df:9d:a6:3b:11:46:f8:07:7a:
                    ff:4f:26:5e:60:cf:0b:22:74:66:9a:76:6b:3b:c7:
                    05:97:57:d7:53:6f:4d:c8:48:57:ac:ba:2a:cc:af:
                    5d:6a:4e:4c:53:c5:06:27:ae:90:d3:c8:85:c3:d3:
                    db:6a:07:81:45:3b:7f:9d:36:02:a2:07:bc:13:ef:
                    57:8f:7c:08:f8:cd:71:75:63:23:e2:87:38:b6:bc:
                    2e:2e:a5:6e:53:93:56:71:13:e0:32:05:78:b8:b5:
                    8b:1e:f1:8a:ad:c5:be:ca:c2:db:45:29:f7:ef:80:
                    df:03:1f:2f:f6:1c:63:48:f8:05:7d:b5:4f:17:00:
                    e9:24:17:1b:20:d3:89:45:58:d7:a0:ee:ca:67:be:
                    73:39:55:4c:a7:0f:d8:59:71:95:b4:9f:5b:ce:31:
                    9c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DC:B0:F1:B3:FF:03:89:07:33:5C:22:C6:D5:D5:C7:37:EF:CD:1E
            X509v3 Authority Key Identifier:
                keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d8:ec:cf:e0:5b:c9:bd:da:ad:e5:a0:ea:c2:b5:d2:8f:1b:
         e0:f6:9e:06:81:df:b7:86:b9:3a:b5:0d:da:10:85:9d:6f:92:
         31:6b:37:d6:8c:ef:bc:e0:2f:d5:d1:c3:26:59:09:2c:93:5e:
         48:b4:db:a8:0e:d4:04:50:70:dc:3e:6d:e7:f1:fd:47:bf:9e:
         dd:39:55:c6:aa:70:10:1f:2a:0f:c1:ed:50:6f:de:f9:56:b4:
         97:65:91:4b:46:b0:30:0d:1d:b0:ab:31:70:f9:9d:a2:3a:5e:
         86:02:d0:fa:d9:73:a6:e0:84:a3:12:b2:09:d6:d1:63:ad:e3:
         e9:40:0f:3d:63:1c:ae:9c:d5:7a:42:4d:ca:86:ac:47:ab:73:
         6c:ba:59:05:af:7c:6e:1f:82:3f:21:8b:fa:91:53:fb:4a:6c:
         36:4b:c6:fe:42:50:8d:82:ad:8b:4b:24:3d:69:46:d9:0c:54:
         f9:37:ab:2c:ac:58:03:e1:29:e7:66:09:27:59:0c:f0:50:d8:
         44:c0:92:87:62:87:9e:fd:c8:25:84:0c:e0:14:ef:f9:b1:d1:
         ba:f0:d1:5c:2b:b6:da:79:77:92:13:4f:df:96:a8:fc:b9:d2:
         95:39:c2:c3:b5:3d:fe:62:d4:58:55:bf:73:39:67:a9:2b:a5:
         f9:05:8d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:19:42 2026 by rpki-client