Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
File:                     oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft (raw, json)
Hash identifier:          Kc+gdbGKmpb6+vAd3LhtrkcqIzHQAsjEnJlBXoUMqJc=
Subject key identifier:   03:C1:45:07:CB:CB:97:D3:5C:8F:9C:07:DA:81:C5:A3:BA:A7:BE:B7
Authority key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Certificate issuer:       /CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Certificate serial:       023A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
Manifest number:          0233
Signing time:             Sun 11 Oct 2026 03:11:13 +0000
Manifest this update:     Sun 11 Oct 2026 03:11:12 +0000
Manifest next update:     Sun 18 Oct 2026 03:11:12 +0000
Files and hashes:         1: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl (hash: xYUujhqiiyCP0sZmxqFsY8FxYiCfbcKDD34K16ZayP4=)
                          2: 8E87CD5A8D4C11F0AD32532AC4F9AE02.roa (hash: 0I41scQnlQoDdFvVFzcCFfoeGZFnCbRneF/j1Qm629c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl
                          rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 03:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917604B, serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
        Validity
            Not Before: Oct 11 03:11:12 2026 GMT
            Not After : Oct 18 03:11:12 2026 GMT
        Subject: CN=6acafe51-973f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:70:dc:ce:63:da:68:ef:1f:2c:63:64:fc:
                    c6:08:80:cd:5c:5b:0d:15:77:2f:13:28:14:fe:82:
                    87:6b:b0:7c:c2:5d:3f:af:2b:b4:22:d0:c8:10:da:
                    6c:e2:f1:89:9d:3f:a0:c0:3f:07:97:e1:a7:51:f3:
                    42:15:11:ad:d6:2d:77:df:0f:bd:2b:37:a1:8e:05:
                    fb:ab:59:ba:5d:4f:3b:89:92:0d:21:6c:03:80:35:
                    01:e4:58:44:17:62:9f:d0:e3:37:fe:3a:7b:cc:a6:
                    0e:56:43:3b:09:da:e1:fe:63:56:4a:c7:b1:b0:ba:
                    38:b1:68:0b:82:5e:53:00:0b:df:5c:ff:06:79:ef:
                    2b:12:76:95:f2:e5:61:6d:25:9a:04:90:e5:8a:2a:
                    b2:3f:60:2b:9b:c8:7c:ea:f3:e9:58:0f:ca:3e:c1:
                    4d:ca:8c:9e:dd:7c:0b:62:2a:d9:a9:78:aa:60:ac:
                    6b:e8:c3:4b:30:bb:e3:bf:5e:91:58:f5:65:73:fd:
                    3c:a6:23:eb:0e:09:b5:da:21:22:60:61:0b:4e:50:
                    81:0a:14:fb:94:c3:2b:61:6b:15:45:2e:94:95:39:
                    6f:c1:fd:b8:19:7a:e8:d5:9f:1d:56:9f:06:70:c1:
                    ab:c2:89:88:5c:88:5b:c5:a2:82:6c:f1:0a:4b:26:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C1:45:07:CB:CB:97:D3:5C:8F:9C:07:DA:81:C5:A3:BA:A7:BE:B7
            X509v3 Authority Key Identifier:
                keyid:A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:db:89:d9:72:96:64:4c:a6:43:97:45:7a:53:b9:87:1d:54:
         48:7f:e5:3a:db:83:ca:2b:8a:74:65:84:1b:e5:84:44:dd:64:
         93:7c:ee:13:c3:eb:36:aa:b2:43:04:12:ab:3e:3d:75:ac:ce:
         7c:a1:81:75:9c:b1:31:11:cf:32:8e:c1:2e:88:4b:69:88:ce:
         7b:c1:82:f1:15:a6:d3:dd:a3:6c:46:84:7e:11:a7:6b:e9:19:
         f8:72:53:79:37:07:44:38:bb:ba:c8:42:f6:a3:7e:f3:7b:32:
         66:18:43:4e:22:31:26:19:6c:a9:3b:d0:00:08:fe:b1:33:8b:
         1a:c5:00:6b:f8:cf:25:50:5f:3a:7a:d0:b9:16:55:b0:d8:f7:
         35:8e:ca:d8:8e:04:0a:1f:fa:dd:37:e1:1f:a6:1d:99:8a:2e:
         b8:86:d6:5f:bf:a1:74:5d:8b:9b:0b:2c:b9:ae:df:e9:ff:5e:
         b7:b6:e6:6c:ae:44:fa:56:dd:b2:03:b1:bc:78:01:b8:8f:01:
         7c:92:25:62:f8:51:c6:a9:7e:eb:d8:8b:91:78:78:69:14:40:
         da:a1:3e:90:36:0f:b7:08:05:7d:77:d4:c6:57:c2:72:73:34:
         8e:3d:14:e5:91:8d:78:29:8b:a8:cf:c8:33:3a:5a:ff:21:61:
         18:74:44:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYwNEIxMTAvBgNVBAUTKEExNEJEQUEzMTU3NkE2MzY3QTBCNUMzQUNBQjkxQzRF
OUYzMTE4RUYwHhcNMjYxMDExMDMxMTEyWhcNMjYxMDE4MDMxMTEyWjAYMRYwFAYD
VQQDEw02YWNhZmU1MS05NzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtNdw3M5j2mjvHyxjZPzGCIDNXFsNFXcvEygU/oKHa7B8wl0/ryu0ItDIENps
4vGJnT+gwD8Hl+GnUfNCFRGt1i133w+9KzehjgX7q1m6XU87iZINIWwDgDUB5FhE
F2Kf0OM3/jp7zKYOVkM7Cdrh/mNWSsexsLo4sWgLgl5TAAvfXP8Gee8rEnaV8uVh
bSWaBJDliiqyP2Arm8h86vPpWA/KPsFNyoye3XwLYirZqXiqYKxr6MNLMLvjv16R
WPVlc/08piPrDgm12iEiYGELTlCBChT7lMMrYWsVRS6UlTlvwf24GXro1Z8dVp8G
cMGrwomIXIhbxaKCbPEKSybKowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPBRQfL
y5fTXI+cB9qBxaO6p763MB8GA1UdIwQYMBaAFKFL2qMVdqY2egtcOsq5HE6fMRjv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjA0Qi80MUMwMTM1QzZE
QUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBqWjZDMXc2eXJrY1RwOHhH
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29VdmFveFYycGpaNkMxdzZ5cmtjVHA4eEdPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjA0Qi80MUMwMTM1QzZEQUUxMUVFQTgwRDA1NzRDNEY5QUUwMi9vVXZhb3hWMnBq
WjZDMXc2eXJrY1RwOHhHTzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA9uJ2XKWZEymQ5dFelO5hx1USH/lOtuDyiuKdGWEG+WERN1kk3zuE8PrNqqy
QwQSqz49dazOfKGBdZyxMRHPMo7BLohLaYjOe8GC8RWm092jbEaEfhGna+kZ+HJT
eTcHRDi7ushC9qN+83syZhhDTiIxJhlsqTvQAAj+sTOLGsUAa/jPJVBfOnrQuRZV
sNj3NY7K2I4ECh/63TfhH6YdmYouuIbWX7+hdF2Lmwssua7f6f9et7bmbK5E+lbd
sgOxvHgBuI8BfJIlYvhRxql+69iLkXh4aRRA2qE+kDYPtwgFfXfUxlfCcnM0jj0U
5ZGNeCmLqM/IMzpa/yFhGHRETg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:36:54 2026 by rpki-client