Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
File:                     _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json)
Hash identifier:          oOwnc+5Zf9WitVTVkffeJGPx0+YmlRO+uyywVix/YWI=
Subject key identifier:   72:81:15:02:90:1D:4F:13:15:DD:BC:C3:28:9D:78:A4:D7:EC:CB:3B
Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE
Certificate issuer:       /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
Certificate serial:       0940
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
Manifest number:          091F
Signing time:             Sat 26 Sep 2026 20:20:39 +0000
Manifest this update:     Sat 26 Sep 2026 20:20:38 +0000
Manifest next update:     Sat 03 Oct 2026 20:20:38 +0000
Files and hashes:         1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: QZ4b0KjQfG43+RP5GqabrVMxELZRNs9V9FoYG1dec8w=)
                          2: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: 9SZoQ9hAarWZIDzzfkuDb6ZmkijYtdsX9fle7F+gOlQ=)
                          3: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: A5W9Xu9Laaa+II8aznHO9GdOEBvTmxyffyC2KfHiMgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl
                          rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 20:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2368 (0x940)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
        Validity
            Not Before: Sep 26 20:20:38 2026 GMT
            Not After : Oct  3 20:20:38 2026 GMT
        Subject: CN=6ab82917-4e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:b8:c0:d2:f1:c1:e0:de:90:d4:bd:61:ec:
                    be:45:d9:66:7d:1b:17:a0:f6:cc:a0:ea:b8:2d:b2:
                    9c:a5:74:78:e4:cb:e9:0d:0a:40:84:ce:e2:b2:65:
                    de:a3:6d:46:a2:2c:cd:47:0a:90:8b:62:ed:7e:a6:
                    0a:d1:d2:6b:04:dc:98:82:4a:08:8f:65:96:8f:44:
                    ad:41:5b:58:dd:20:62:c8:ee:8a:6e:6a:71:b1:07:
                    3a:81:81:f9:00:a2:d9:50:08:e5:b8:94:f6:d2:26:
                    92:4c:78:06:15:d6:53:6e:eb:45:63:8c:cc:74:1a:
                    ad:64:a7:e6:96:84:24:88:e1:63:34:c1:5f:61:9c:
                    a6:7c:e4:b2:a9:10:b8:d4:53:ba:dc:05:34:83:07:
                    fa:de:0b:cc:a8:1c:a8:02:17:e7:79:f8:b7:99:e1:
                    3b:59:ad:02:b2:85:b5:60:07:58:5d:54:8b:e5:be:
                    b7:cf:33:a5:41:6d:c3:97:4c:3f:86:9a:b5:46:58:
                    84:69:5c:61:34:8b:e4:a4:c5:3b:9d:aa:30:6a:9a:
                    6a:fc:fc:89:ff:f3:3b:11:b3:88:4d:14:6b:a1:9c:
                    4d:bf:72:e0:34:14:28:c9:af:db:25:f4:08:e4:60:
                    64:45:14:c9:59:4f:57:88:e5:93:c4:7b:11:8a:0a:
                    f7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:81:15:02:90:1D:4F:13:15:DD:BC:C3:28:9D:78:A4:D7:EC:CB:3B
            X509v3 Authority Key Identifier:
                keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:23:6f:84:0d:46:83:e2:96:ff:65:26:a4:dc:61:df:40:a3:
         77:46:24:fe:5c:c4:5b:67:e6:13:bc:43:3a:36:e7:b2:56:38:
         49:22:0e:b0:9d:92:6e:f1:aa:63:4c:dd:f8:c9:fb:42:66:f0:
         71:d9:19:cd:cd:67:59:75:40:81:14:5f:61:53:af:9c:de:dc:
         45:8b:7d:6d:ef:11:23:08:d4:34:15:a5:b2:ab:a1:e3:a8:85:
         e9:a2:bf:2a:87:4f:34:47:60:6c:19:78:8e:1e:ea:60:e7:06:
         a5:89:94:9b:87:91:e7:50:a1:47:a9:e8:21:59:ca:d2:ab:f3:
         d0:da:95:af:9d:95:02:67:9b:b4:ef:24:85:f3:b5:32:31:91:
         25:3b:b6:1b:fa:fd:5c:e6:ab:60:f1:fe:0d:ef:05:b6:8e:5f:
         4a:18:01:5c:e8:26:d1:d5:4d:11:83:34:3d:fd:1d:5f:fa:eb:
         11:54:ed:46:9e:22:31:d3:bc:da:76:32:2f:4a:3a:25:ed:80:
         48:e1:7d:a7:b9:59:53:15:24:41:dd:77:fb:5d:71:d7:c8:e4:
         84:ae:89:e9:5c:54:be:33:bd:3c:9b:f2:f6:e8:ac:9e:f2:47:
         9d:cb:ff:25:16:50:1f:47:51:cd:87:7f:15:e7:d4:3a:75:16:
         50:81:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:09:41 2026 by rpki-client