Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File:                     oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier:          p4xC8+MNzgFFduHXI5SbxcK0ZSRfSUiIN4Kz9qlOchE=
Subject key identifier:   EC:25:4F:3F:D2:25:E4:52:0F:05:DC:40:7B:D3:52:45:11:28:0F:64
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer:       /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial:       0862
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number:          084B
Signing time:             Thu 24 Sep 2026 20:57:51 +0000
Manifest this update:     Thu 24 Sep 2026 20:57:50 +0000
Manifest next update:     Thu 01 Oct 2026 20:57:50 +0000
Files and hashes:         1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: MT7WkBguQv3cXeT1oPC2g3OqAgBdJRCrXqAWamjCxrE=)
                          2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
                          rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2146 (0x862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
        Validity
            Not Before: Sep 24 20:57:50 2026 GMT
            Not After : Oct  1 20:57:50 2026 GMT
        Subject: CN=6ab58ece-65f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:75:ac:91:ae:2e:81:ea:b2:17:ef:56:db:
                    76:55:34:40:56:36:34:a6:fc:c4:11:3d:28:1e:e5:
                    5c:b3:b0:9a:6f:10:e9:2f:06:af:49:3a:d2:e7:26:
                    d5:ae:48:45:d3:d1:ab:e7:e1:cb:7e:f8:b6:b3:c1:
                    99:d9:a4:20:95:89:ff:2e:c8:10:c4:25:90:c0:c6:
                    01:ba:d6:6b:46:4c:2c:5b:0c:d6:60:26:29:01:ef:
                    7a:05:a7:f4:70:8f:97:cb:0c:35:d9:7b:42:4e:88:
                    60:24:f4:66:77:7f:0d:32:58:97:ff:8d:de:30:5b:
                    75:f3:0e:24:3b:9f:e9:73:ac:75:5b:23:e3:50:df:
                    9d:a5:bf:5f:0d:38:60:eb:98:5e:0d:d2:e5:bc:df:
                    45:51:1a:39:72:5c:15:10:f8:6c:ce:d4:4c:99:d1:
                    2e:97:ff:85:66:3b:0f:6c:3c:7a:1d:bb:99:ff:83:
                    2e:07:0b:e1:16:3c:e7:01:8e:04:b1:5d:5f:f9:8d:
                    11:38:94:0f:e0:22:a7:97:46:2b:55:ac:4f:e4:2f:
                    a6:03:8a:d1:cd:b0:a8:fe:6d:2c:38:21:52:16:2f:
                    a9:2d:83:38:73:3d:7e:db:c9:0a:15:52:67:fd:ee:
                    89:2b:23:d5:61:2b:f3:c9:04:76:c0:7e:e5:28:34:
                    d0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:25:4F:3F:D2:25:E4:52:0F:05:DC:40:7B:D3:52:45:11:28:0F:64
            X509v3 Authority Key Identifier:
                keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:b6:c9:f9:df:c2:77:3c:d9:f6:8a:c4:92:b9:f8:2d:3a:
         2e:92:87:c3:f9:02:c2:77:b5:3b:30:7a:ea:f0:41:d4:74:e9:
         05:01:8a:58:9e:2c:48:16:83:01:7d:1d:d8:8c:19:cb:ba:97:
         b0:a2:2b:9d:92:b5:01:72:5c:f5:3a:4d:b0:b3:c1:cb:ae:1b:
         0b:4d:f6:a7:94:82:e8:f7:e0:35:23:ff:b1:58:73:62:01:7a:
         d1:27:fb:5a:f1:82:ca:41:8a:68:5b:d1:bf:d1:f2:9d:e7:f7:
         ca:61:29:0a:be:26:03:4d:e5:05:3a:d0:48:d2:db:49:3b:75:
         cc:c7:b5:52:0d:c0:5d:43:f4:ed:20:73:5f:6e:ca:f2:59:c7:
         f9:8e:92:40:cd:b5:fe:d7:4c:9b:30:7d:9f:e1:00:26:bc:a3:
         be:b6:27:0b:26:bb:af:ce:69:89:97:a0:12:c4:4d:a0:70:bc:
         bc:6f:20:00:2d:ff:bf:25:62:98:17:d5:fd:af:cd:0a:da:ea:
         03:57:55:96:6a:6a:b6:33:ff:35:3c:e2:0f:b2:0d:16:06:38:
         af:31:a5:ff:a7:98:57:e8:95:c6:85:8d:cf:cf:14:4f:f7:68:
         e3:67:56:75:e0:59:04:36:20:af:80:79:70:34:90:18:57:ce:
         11:86:89:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3NzExMTAvBgNVBAUTKEEzMjE1MzcxMjUzNzYwMEQ3MTM0MkVDMDY5QTU3RjNF
RUQ2MEQ3MEMwHhcNMjYwOTI0MjA1NzUwWhcNMjYxMDAxMjA1NzUwWjAYMRYwFAYD
VQQDEw02YWI1OGVjZS02NWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtLh1rJGuLoHqshfvVtt2VTRAVjY0pvzEET0oHuVcs7CabxDpLwavSTrS5ybV
rkhF09Gr5+HLfvi2s8GZ2aQglYn/LsgQxCWQwMYButZrRkwsWwzWYCYpAe96Baf0
cI+Xyww12XtCTohgJPRmd38NMliX/43eMFt18w4kO5/pc6x1WyPjUN+dpb9fDThg
65heDdLlvN9FURo5clwVEPhsztRMmdEul/+FZjsPbDx6HbuZ/4MuBwvhFjznAY4E
sV1f+Y0ROJQP4CKnl0YrVaxP5C+mA4rRzbCo/m0sOCFSFi+pLYM4cz1+28kKFVJn
/e6JKyPVYSvzyQR2wH7lKDTQ1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwlTz/S
JeRSDwXcQHvTUkURKA9kMB8GA1UdIwQYMBaAFKMhU3ElN2ANcTQuwGmlfz7tYNcM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc3MS81MEMwODA0RTI5
NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lBMXhOQzdBYWFWX1B1MWcx
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL295RlRjU1UzWUExeE5DN0FhYVZfUHUxZzF3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDc3MS81MEMwODA0RTI5NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lB
MXhOQzdBYWFWX1B1MWcxd3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdcW2yfnfwnc82faKxJK5+C06LpKHw/kCwne1OzB66vBB1HTpBQGKWJ4sSBaD
AX0d2IwZy7qXsKIrnZK1AXJc9TpNsLPBy64bC032p5SC6PfgNSP/sVhzYgF60Sf7
WvGCykGKaFvRv9Hynef3ymEpCr4mA03lBTrQSNLbSTt1zMe1Ug3AXUP07SBzX27K
8lnH+Y6SQM21/tdMmzB9n+EAJryjvrYnCya7r85piZegEsRNoHC8vG8gAC3/vyVi
mBfV/a/NCtrqA1dVlmpqtjP/NTziD7INFgY4rzGl/6eYV+iVxoWNz88UT/do42dW
deBZBDYgr4B5cDSQGFfOEYaJ4Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:57:00 2026 by rpki-client