Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
File:                     3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json)
Hash identifier:          ftvwD4N71MYpFsUy4QW40QPe0+AilXATJxChAkP3KeU=
Subject key identifier:   8E:4C:BE:B6:7E:15:7F:7C:80:CE:FA:CD:A3:66:ED:BC:E9:F6:D8:ED
Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
Certificate issuer:       /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
Manifest number:          FF
Signing time:             Mon 21 Sep 2026 06:13:03 +0000
Manifest this update:     Mon 21 Sep 2026 06:13:03 +0000
Manifest next update:     Mon 28 Sep 2026 06:13:03 +0000
Files and hashes:         1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: khVUkuRvyoqDw7EtKRlEDnrn3lCXG8Bwzrp9hLItGbg=)
                          2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: DGdwfmJXcUZmyhZmIEATFGf53ujcTKbq+bFHiQ/LYS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
                          rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
        Validity
            Not Before: Sep 21 06:13:03 2026 GMT
            Not After : Sep 28 06:13:03 2026 GMT
        Subject: CN=6ab0caef-f400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:78:f5:e0:aa:9f:5c:6b:e4:76:bf:3f:02:
                    ce:db:2c:19:2d:d4:f1:0c:e4:d1:9f:cc:ab:3a:dd:
                    35:75:51:5a:0d:84:c8:cd:e9:8b:5e:9a:2d:2a:0a:
                    2c:f0:d1:55:34:bd:15:8c:ab:37:f0:65:ec:bd:78:
                    eb:4b:99:7e:54:8c:bc:26:6e:26:5f:99:c0:1b:e5:
                    3f:36:3c:54:dc:bc:e9:22:96:a0:a4:83:b2:25:dd:
                    0e:8e:0c:e5:a6:6f:8c:fb:c2:ef:11:50:9c:4e:1e:
                    70:bb:ca:f2:70:0a:46:43:85:0e:e6:a6:0c:0e:e8:
                    6d:66:b2:d8:f6:95:3f:fe:e0:87:f5:9f:a1:b6:4f:
                    80:7a:ec:3b:f3:c5:fa:32:3b:69:e9:b4:f5:fd:5d:
                    83:25:92:7d:5c:26:fc:28:83:06:53:00:ac:cb:fd:
                    ec:6a:6a:d2:85:92:2c:42:ec:67:bd:77:62:0c:f0:
                    66:f5:5f:37:01:48:46:ab:31:34:24:ad:72:f6:59:
                    97:24:0e:50:35:a6:6f:4a:92:37:b0:2d:73:a9:85:
                    c1:32:a9:ab:73:aa:fe:83:af:88:53:f2:f0:d4:8a:
                    7c:5c:df:b7:56:10:6e:7d:25:a4:6e:62:16:1b:dc:
                    74:ab:bc:87:c4:be:03:60:56:fb:65:83:4b:59:da:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:BE:B6:7E:15:7F:7C:80:CE:FA:CD:A3:66:ED:BC:E9:F6:D8:ED
            X509v3 Authority Key Identifier:
                keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:83:19:48:58:9f:4e:9b:3d:01:63:bd:59:94:00:d9:73:c3:
         ad:c7:5f:ba:14:40:68:74:fe:ae:93:c6:36:15:81:ac:56:b3:
         15:5a:c2:af:1c:b7:63:4b:d7:66:41:45:6c:14:2b:ae:24:ab:
         a8:16:a8:5b:7c:98:71:b8:f8:10:2f:21:47:5e:7c:6d:d5:e2:
         0b:b1:54:ee:be:dd:f8:97:6f:24:a2:2f:7b:ca:69:79:08:6c:
         96:e6:0e:0e:62:9b:49:73:18:bc:69:57:91:c5:ca:10:28:33:
         33:79:90:ba:29:fb:a9:f7:9a:37:ab:b6:14:9c:6a:8e:2d:c8:
         e2:d1:0b:28:3c:19:73:82:ea:2d:b1:99:36:f7:c8:b1:d2:35:
         4d:3a:f7:ec:bd:58:e6:8a:a9:13:7a:b2:41:9f:1c:ac:f7:a1:
         1a:17:cc:cc:20:38:0b:f2:b6:b5:33:b7:24:b8:67:ac:d5:07:
         f1:6b:49:5c:af:00:23:c5:a3:a5:86:8a:02:2b:46:c3:ff:dc:
         8f:d2:f3:c6:39:37:0b:9b:b6:4b:93:04:09:90:4f:1a:d9:7e:
         67:ed:67:55:85:43:23:23:15:60:39:18:86:ba:2c:8f:c9:ad:
         c1:79:b9:80:dd:b0:7a:bc:33:54:52:c8:e3:cb:32:76:61:67:
         2a:bd:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:17:45 2026 by rpki-client