Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
File:                     OvCdKMpIepMmYxpr6b2b26oY2nU.mft (raw, json)
Hash identifier:          9HreWNB78RS+KvSgIW79nM7wlv2lu5JM75IIUIyGtvM=
Subject key identifier:   DC:47:46:5A:3F:76:E8:C9:AC:B2:89:02:B1:69:E4:80:C1:CA:F6:85
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Certificate issuer:       /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial:       0710
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
Manifest number:          0701
Signing time:             Tue 22 Sep 2026 21:51:17 +0000
Manifest this update:     Tue 22 Sep 2026 21:51:17 +0000
Manifest next update:     Tue 29 Sep 2026 21:51:17 +0000
Files and hashes:         1: OvCdKMpIepMmYxpr6b2b26oY2nU.crl (hash: cn838iwUWIoyjLzjKLMZ+xrTiLQT6T0RPQ7GBwAN4uI=)
                          2: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (hash: VCL+P+tlT04cGlwm1f1o27ry1Et64gaCgM2IBSbvp04=)
                          3: 1A704D8CADB511EBB5CFE734C4F9AE02.roa (hash: XhJX3NfcbvmnSUAkmSliLE4bj9pTRieX/8IuPGpMoeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
        Validity
            Not Before: Sep 22 21:51:17 2026 GMT
            Not After : Sep 29 21:51:17 2026 GMT
        Subject: CN=6ab2f855-a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:39:8c:79:be:3e:97:35:17:e9:6e:9a:c0:
                    f6:44:3b:90:5f:76:0f:3b:60:ce:d7:78:15:45:2f:
                    aa:72:84:a8:d5:17:91:5a:74:e5:e8:86:1a:f5:df:
                    ca:a2:8a:01:a2:0b:c7:16:27:a2:ba:7b:b0:6a:db:
                    47:28:86:37:b9:12:a4:45:19:c6:2f:fe:54:6f:6f:
                    80:ff:74:df:be:a6:7b:19:12:03:02:8d:9d:34:14:
                    31:83:f5:96:43:87:7c:28:45:c9:bb:34:17:ce:cb:
                    e7:c2:27:a4:9b:ac:c3:91:51:8c:a6:e9:63:83:ef:
                    20:6b:c3:f2:4c:e9:3e:7b:e1:84:cd:98:9e:9f:f1:
                    3e:1d:a1:07:fe:25:73:ce:0e:95:33:78:5e:a0:d2:
                    17:56:03:62:e8:93:53:3d:d6:7e:32:09:f8:49:8f:
                    8d:1a:40:9b:b9:9d:b2:88:e4:e8:36:a5:ff:f5:7b:
                    c3:21:ec:2b:7b:ff:d3:7d:56:06:40:1c:4a:8d:52:
                    de:d5:aa:72:ba:ce:41:71:33:ba:5c:73:4d:1c:70:
                    31:37:cd:dd:63:79:98:35:5e:df:27:94:d7:76:59:
                    54:6a:56:9e:6b:67:44:29:2f:a5:90:5e:68:1f:6e:
                    89:2b:7a:31:99:c3:8c:4a:30:bb:76:0f:51:77:53:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:47:46:5A:3F:76:E8:C9:AC:B2:89:02:B1:69:E4:80:C1:CA:F6:85
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:32:63:39:b2:03:8c:a6:ec:d0:55:24:28:a4:44:05:ae:1a:
         f4:05:78:f9:ad:97:61:84:fa:64:95:ac:28:77:c8:86:0f:0a:
         99:4d:ed:5d:a8:ec:90:aa:a5:d5:68:37:f6:c5:e0:6d:3b:b9:
         d2:46:ae:2d:ed:84:4e:2f:34:c6:b7:3b:a2:0b:2e:d4:9a:0a:
         31:75:ac:a7:6a:ab:a1:71:1f:49:38:98:8a:6c:7e:a9:ad:7d:
         e4:a7:d8:4d:ab:39:ea:47:bf:57:dc:09:e8:c4:72:65:d7:30:
         28:b2:aa:83:7b:d4:09:9b:81:09:9d:22:c0:34:62:c9:ee:cf:
         6b:0e:47:5a:b6:e8:06:62:9f:a1:24:42:9a:dc:81:f4:9d:c4:
         85:3d:41:82:8c:83:cf:1b:e0:64:c1:4e:14:0a:80:f5:97:5e:
         8a:2b:24:49:33:6a:77:ce:da:4c:3d:c2:ff:bf:d0:35:12:dc:
         f2:95:8e:1e:70:27:b2:cd:40:22:e7:49:79:0f:a3:ab:4d:8d:
         20:26:cc:72:24:76:b0:dd:ac:1e:74:d4:3e:6b:74:05:16:52:
         8b:0c:ef:29:3f:b1:ec:59:51:f6:4d:82:c2:2c:c2:64:59:b1:
         b8:f9:3d:b6:07:60:51:22:2f:c4:a5:95:e0:84:6a:94:40:51:
         83:12:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:25:32 2026 by rpki-client