Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
File:                     OYkRMAEE18WLMm5WZLPXmi1GRuA.mft (raw, json)
Hash identifier:          tetskcWbyWNi6ayvgmjQXNNpjyDE1GX8hIlm8toWln0=
Subject key identifier:   6D:1A:1D:63:BB:9B:B5:00:DA:67:38:29:83:6B:6A:36:ED:BA:12:33
Authority key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
Certificate issuer:       /CN=A918F1C9/serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
Certificate serial:       0AFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
Manifest number:          0C15
Signing time:             Sun 20 Sep 2026 19:22:54 +0000
Manifest this update:     Sun 20 Sep 2026 19:22:53 +0000
Manifest next update:     Sun 27 Sep 2026 19:22:53 +0000
Files and hashes:         1: OYkRMAEE18WLMm5WZLPXmi1GRuA.crl (hash: SkU6TuhaNU5c2hG7FhSzfBJCRp1Lt94fKNBqDYRUyow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl
                          rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F1C9, serialNumber=398911300104D7C58B326E5664B3D79A2D4646E0
        Validity
            Not Before: Sep 20 19:22:53 2026 GMT
            Not After : Sep 27 19:22:53 2026 GMT
        Subject: CN=6ab0328e-8d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:fe:ad:c1:80:da:2f:a8:47:88:f0:a7:8a:
                    49:f1:38:b8:98:69:a8:30:40:2c:af:21:56:90:f2:
                    73:9f:c5:b3:44:58:ab:62:72:8c:de:a9:b2:ae:77:
                    eb:57:33:3a:d0:0d:f4:d0:07:ba:60:41:93:52:a9:
                    66:eb:3f:e5:97:df:16:b9:9f:44:2e:1a:94:51:e1:
                    a0:a4:74:09:14:c8:8d:e1:0b:4d:8c:8c:f6:7e:8e:
                    7e:18:53:46:7c:a0:1a:c4:52:73:56:8c:b0:46:35:
                    0a:f5:b8:b1:0e:8f:1b:d5:d3:e5:fd:32:f1:fb:b0:
                    45:77:f3:5a:19:44:a9:33:80:ba:94:1d:08:3a:35:
                    3e:a4:8d:87:a0:39:9b:97:09:c3:ba:19:06:63:86:
                    6a:a3:fe:a6:8a:4b:f5:9b:59:fb:1c:4e:5f:fe:ce:
                    ce:1c:1d:ed:ab:69:c0:73:4f:33:b8:1d:a7:9e:ca:
                    0e:ae:3e:81:b9:4d:f9:85:05:4f:fd:23:0b:2f:27:
                    e1:cb:7e:b4:7c:3c:fb:8b:05:7b:1d:e4:06:b6:69:
                    42:1b:ba:8e:db:f7:ce:ed:65:6e:cd:f0:75:d2:ff:
                    45:06:32:87:83:b2:28:82:1c:26:f2:77:db:3c:eb:
                    23:7c:63:00:3e:a8:89:4d:d6:ba:af:c9:51:d8:02:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:1D:63:BB:9B:B5:00:DA:67:38:29:83:6B:6A:36:ED:BA:12:33
            X509v3 Authority Key Identifier:
                keyid:39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:49:8b:de:93:a7:77:d9:ab:1a:07:bb:89:66:08:8d:72:
         31:a8:b1:ba:e7:65:b6:30:55:26:ec:6d:a6:3e:3a:56:23:2d:
         62:ab:b7:ff:f3:2e:b2:e7:53:e3:52:08:0c:65:a2:09:f5:d0:
         5e:1e:46:c2:ab:94:18:d2:04:08:42:0a:f8:f9:e4:ba:b4:ad:
         4f:8b:33:44:37:63:7c:11:2e:cb:9c:a7:3b:4c:59:59:db:e1:
         8d:f8:a8:91:3b:b2:7c:0f:15:33:99:2e:4e:20:4a:dc:38:7b:
         97:64:e4:8f:51:de:f0:80:6b:5c:ad:7e:da:ee:ed:f9:a4:81:
         5d:ea:7f:29:48:7c:80:34:f7:e3:72:cd:7a:3c:eb:ec:5c:0b:
         cc:ae:8d:b3:6b:5b:13:13:21:97:90:2f:48:44:63:11:c4:d4:
         8f:9b:ef:51:9a:a0:9e:b4:44:f9:fa:f7:67:fa:2b:3c:a8:3c:
         bf:c5:dd:89:52:32:64:09:1c:67:43:35:e4:be:ba:e3:2e:69:
         8e:87:67:19:c5:de:bf:2c:ed:5d:cc:33:d8:a3:d0:a9:22:35:
         c6:8c:8d:6e:06:8e:ca:62:e5:4d:7a:93:3a:0e:8f:53:9f:39:
         62:ee:67:a6:c5:cb:b8:8e:8f:25:fc:88:09:36:f3:e2:ba:65:
         d7:90:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:22:56 2026 by rpki-client