Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft
File:                     o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft (raw, json)
Hash identifier:          HnLk7aLU6OR26WXLTvkP8NS4mK7r3hJo/cK7tKEqMI4=
Subject key identifier:   71:78:37:8F:42:EE:61:72:35:AC:F7:72:76:9C:EA:53:AA:6B:AD:58
Authority key identifier: A3:A4:3B:14:E3:14:C2:22:19:85:8B:F1:7B:EF:76:31:E7:8C:40:0E
Certificate issuer:       /CN=A918B2BC/serialNumber=A3A43B14E314C22219858BF17BEF7631E78C400E
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o6Q7FOMUwiIZhYvxe-92MeeMQA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft
Manifest number:          2C
Signing time:             Sun 27 Sep 2026 09:20:12 +0000
Manifest this update:     Sun 27 Sep 2026 09:20:11 +0000
Manifest next update:     Sun 04 Oct 2026 09:20:11 +0000
Files and hashes:         1: o6Q7FOMUwiIZhYvxe-92MeeMQA4.crl (hash: 7izUSsUOL33H2tbH9ZHlCZcvYiT/SnJiTEYqDjuyWTk=)
                          2: 0C739F2C97F211F1B68E29C06D11F970.roa (hash: dZjmzWubY0kat6SXuVm1HDIUTE6Fb+vARrC/qKYUlZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.crl
                          rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o6Q7FOMUwiIZhYvxe-92MeeMQA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B2BC, serialNumber=A3A43B14E314C22219858BF17BEF7631E78C400E
        Validity
            Not Before: Sep 27 09:20:11 2026 GMT
            Not After : Oct  4 09:20:11 2026 GMT
        Subject: CN=6ab8dfcc-fb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:e8:cc:fa:97:bc:82:90:fd:02:a1:2d:6e:
                    e1:2a:5e:31:01:de:e3:8b:a3:41:6f:9a:c1:a7:00:
                    75:e5:cf:78:23:4a:ec:36:64:d2:b4:fa:61:e0:a5:
                    dc:96:83:64:60:e7:64:9a:39:3f:7a:1e:9a:15:5d:
                    25:48:66:2a:7b:11:7d:1b:bf:9a:5b:91:bb:4c:16:
                    b6:1d:43:33:32:4c:47:b1:8d:b3:44:ad:48:b3:ca:
                    c3:a1:bc:ce:a5:39:b1:49:15:94:09:8b:3f:32:9d:
                    98:ca:bf:bd:3f:58:8c:c5:46:3f:33:99:36:40:62:
                    1b:34:e7:50:dd:58:80:31:48:b1:fb:a4:70:cc:97:
                    3f:d7:33:22:e3:a9:84:89:2e:38:dc:f7:a4:59:f1:
                    61:a7:c8:a0:f4:bb:a9:11:37:b9:04:1e:f4:5a:a0:
                    bb:8a:70:f4:b4:0d:db:ab:41:f2:ee:fc:07:29:29:
                    d6:a6:4f:9f:17:26:be:b8:b1:6f:51:6d:f1:fe:08:
                    25:3b:db:74:89:53:32:17:24:ca:c4:f2:2b:e3:ab:
                    37:be:ca:2b:7d:b7:50:1c:38:93:ac:63:79:22:d1:
                    a7:0c:64:dd:30:d5:ed:6d:b5:03:2e:aa:0e:c3:66:
                    db:40:c0:41:36:12:37:5b:20:a1:1d:18:ab:5b:42:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:78:37:8F:42:EE:61:72:35:AC:F7:72:76:9C:EA:53:AA:6B:AD:58
            X509v3 Authority Key Identifier:
                keyid:A3:A4:3B:14:E3:14:C2:22:19:85:8B:F1:7B:EF:76:31:E7:8C:40:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o6Q7FOMUwiIZhYvxe-92MeeMQA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2BC/FA7387527A8611F1ABF6630798A30FBC/o6Q7FOMUwiIZhYvxe-92MeeMQA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:06:1a:eb:ec:40:a2:f6:fd:18:e6:12:56:22:9d:ce:43:e0:
         01:5b:f2:fb:31:71:06:2f:88:93:32:27:cd:2d:c8:5c:f4:20:
         bd:91:ab:8e:ab:af:ab:66:b2:a9:c5:2f:8d:9e:7d:b5:95:f7:
         21:7c:46:71:98:92:09:da:e0:ca:23:88:a6:15:36:4e:28:fb:
         3e:0a:4f:92:7c:16:1a:4b:0f:93:14:8e:6e:9f:c9:5e:29:7f:
         d0:89:23:87:e8:39:fa:a7:f3:c3:d5:b3:43:0c:5c:4e:54:35:
         ed:c9:7b:bf:f2:11:91:c9:3f:be:5c:47:18:8e:9d:3d:26:91:
         21:3f:6c:61:7b:49:99:99:e6:76:53:b4:66:49:66:97:d9:a3:
         6d:d5:d5:e0:e5:54:71:ae:ae:88:75:96:82:42:3c:b7:da:29:
         3e:a0:03:72:82:c4:5c:c1:fa:bb:d9:73:c8:a1:c4:0a:59:49:
         73:9d:08:a3:90:b6:3d:09:8f:1a:e6:aa:b5:32:fd:67:bc:44:
         30:97:8a:6e:d9:99:d0:fd:01:fb:2d:c7:18:5e:94:27:a0:0a:
         99:df:67:ef:dc:8c:08:e9:67:46:85:bb:77:df:d9:f7:54:05:
         3c:b4:9c:99:84:1c:7b:4b:18:82:0d:b8:19:b0:e8:49:e6:22:
         68:03:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:35:43 2026 by rpki-client