Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File:                     oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier:          XDJ4ZF2SFPnBGNdfZ7sgB9CKNR/LFyw7+N7LtWG+2Y4=
Subject key identifier:   15:61:D9:D4:58:BF:58:FB:DC:2D:8C:64:2D:E9:3F:39:FE:DE:13:05
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       0315
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number:          0283
Signing time:             Mon 21 Sep 2026 02:26:01 +0000
Manifest this update:     Mon 21 Sep 2026 02:26:01 +0000
Manifest next update:     Mon 28 Sep 2026 02:26:01 +0000
Files and hashes:         1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: cX8h/eoqLO1t4rY98kUa94DgLCGoYarHoczmduypf10=)
                          2: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: oTOrED2V9vZn9qb8N0LH0Sx58NuFVTBUIOpttu2MXWg=)
                          3: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: wV4TOeBb8Yf87AHJqxIiiwZT4YbWOsXLWCv25sOzq68=)
                          4: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: w7xvtRmpzUbr8JgK3UFIlzl77CVDLrjcc7Gh+fzdIN8=)
                          5: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: Nla2jOROMyL7ZvHl9XXDHQ8v7Tf0J7Qb5Yh4lPB6G08=)
                          6: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: SYFTPDFr7LN35U/gebZm+cm1jSEOdDw/ts0Jc9H4NkQ=)
                          7: 49FC44B0162A11F18FE9298B373D8C67.roa (hash: zOKxQxHBIClXa7SK7lv75vi8fEUHv381/lbkm79W98w=)
                          8: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: 6XAi7gM1Xpz2gjUW0XmMeYKCRI5I+iCkq9l2pCZ8bjA=)
                          9: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: dt5esh4YiRNAZirmy+skM3OnPaDSuZwtvyic2vepcxs=)
                          10: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: IqfXkMnj8uGfdCn+beW+9o36zBKAVet07b4tkBjSXV0=)
                          11: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: ZOW+e6hIHzkmr+e6qFgnn41jrQPPj4OwONpdz5HcpDw=)
                          12: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: u55hQRiwUoLbf82ToZOywDnWMRlS9BpxwCPoCivIco8=)
                          13: BA917E94D65F11F090E652930BB43E13.roa (hash: 1K/PdX1BRrVHh8XufguLAU4ALPmlwz8oCRHa0WcJP6U=)
                          14: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: jTaoK/9ZfbV3RhpV4K59uEmZ4z35REbUAdYTCvW5auQ=)
                          15: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: sg/PZjzTpz4UXrJ5M++piAcm3f5OkkNiXbIxTQjYcQY=)
                          16: FAC35354610611EFB6324A30C4F9AE02.roa (hash: FqAfFj1Tl22vJwoCZnFEARrScAUogzoTdgh+P1prj9o=)
                          17: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: tgWNFtii+Zc83iPIGPSMYRpyk9K7VuUWU7rCDmoIp90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Sep 21 02:26:01 2026 GMT
            Not After : Sep 28 02:26:01 2026 GMT
        Subject: CN=6ab095b9-9072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:4f:7f:a2:69:99:18:e2:6c:66:78:7c:a5:
                    4f:20:8a:f1:28:fb:46:5a:d4:0b:4d:2e:d4:e3:07:
                    26:4f:a8:cf:d1:37:5e:b8:dc:09:01:47:37:e7:ca:
                    25:4a:c3:09:64:e7:c4:d7:ba:5e:53:45:2b:02:a8:
                    f8:c1:d9:29:8d:9a:6e:c6:37:c1:8a:e4:91:97:8a:
                    59:2d:53:01:13:63:32:1e:3f:5f:30:5e:e0:71:45:
                    2b:61:67:8d:53:9d:21:7d:c9:2a:85:d4:56:4d:90:
                    87:26:7d:c6:d9:73:aa:89:57:0b:4b:6e:10:0b:77:
                    37:ec:57:e8:f5:cb:98:cd:33:d1:e1:d7:fb:9a:fd:
                    c2:53:98:06:55:af:c8:43:64:2f:97:79:20:6d:12:
                    eb:3b:fe:25:9f:36:40:aa:bb:0a:d4:ef:25:41:34:
                    ad:41:da:ae:6d:f2:b1:c9:c2:de:5c:b0:95:6b:06:
                    92:bc:0b:cb:47:58:5c:b9:3b:7c:14:04:49:50:ce:
                    d2:8a:9c:4d:82:89:8d:5a:c5:92:aa:c7:82:a2:26:
                    57:63:33:87:85:35:ee:b4:de:1d:5f:1c:45:24:18:
                    a5:bb:96:c1:c5:68:03:d0:c1:aa:f0:0c:e3:c1:3c:
                    17:12:fb:e4:9b:0a:db:21:ac:e3:0d:73:b6:b6:8f:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:61:D9:D4:58:BF:58:FB:DC:2D:8C:64:2D:E9:3F:39:FE:DE:13:05
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:95:23:2f:c9:f2:36:f7:6b:56:18:19:f5:7a:bd:17:87:3a:
         c8:0a:d4:89:75:bf:b6:16:6a:8b:a1:99:11:6b:9b:79:a2:e6:
         3b:3d:9a:62:55:31:fe:f9:c8:0e:c6:56:2a:1a:25:78:1f:2f:
         0c:07:6a:f0:90:12:0a:15:8d:70:bc:42:a1:ca:59:71:81:b3:
         b4:82:b3:91:bb:84:28:22:b7:06:67:37:e7:4a:f8:9e:38:a6:
         38:eb:26:28:a6:1c:e5:84:78:96:3e:c0:01:e6:88:7c:3c:37:
         80:f2:9a:db:17:3b:cb:30:58:5d:48:96:80:6d:28:b3:db:47:
         c4:ff:ea:ed:0c:d5:1f:25:dd:b4:67:13:7e:3e:06:23:6d:fa:
         01:74:55:55:56:0c:a9:c8:8c:99:63:dc:d7:5a:a2:7a:37:79:
         33:fe:96:44:7a:ab:a2:39:02:3c:32:db:51:1a:8f:e4:64:33:
         38:86:3d:2d:76:13:4d:a4:ff:2b:79:84:82:f5:7b:8f:4b:10:
         1f:bc:3c:3d:af:12:88:45:77:51:34:a7:da:a0:76:a9:3e:b5:
         d1:3b:6a:1e:16:e5:03:4a:13:e3:d4:27:fa:08:3b:64:71:c0:
         9f:48:38:da:70:9f:d7:4e:15:d9:4f:8a:6d:7e:f1:e2:99:93:
         c3:e7:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:40:48 2026 by rpki-client