Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
File:                     -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json)
Hash identifier:          H+5eCgO9wJuNMjL6W/xqPVIzdBdK8XpdxgKnfaDE2xE=
Subject key identifier:   03:82:98:C3:8F:93:7F:49:BB:FD:61:53:1F:1D:02:C6:D6:4A:98:42
Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
Certificate issuer:       /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Certificate serial:       134F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
Manifest number:          132E
Signing time:             Thu 24 Sep 2026 16:58:42 +0000
Manifest this update:     Thu 24 Sep 2026 16:58:42 +0000
Manifest next update:     Thu 01 Oct 2026 16:58:42 +0000
Files and hashes:         1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: RRG+7fC3by0DN18i20TmmvMBSUdMHqXhZVXgR2qL51M=)
                          2: FE5CF51C86FF11F194514C90ABEE528E.roa (hash: 9vytRQ8Wmcr6ySPVj73jgnl3+yKt+CUe1VNPGqjQAdE=)
                          3: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: J9KRgMea1vbWK73wJE25NPnzZ9tX3mrlarUa6blw3yM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
                          rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4943 (0x134f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
        Validity
            Not Before: Sep 24 16:58:42 2026 GMT
            Not After : Oct  1 16:58:42 2026 GMT
        Subject: CN=6ab556c2-5b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:b4:5c:58:3b:94:9d:07:76:01:eb:fd:a0:
                    f0:20:2a:da:b7:42:30:a6:5e:db:77:6c:f1:ae:2e:
                    de:16:60:7e:1a:71:45:19:c8:3a:f7:17:a1:33:82:
                    ec:ce:b8:03:07:01:ec:fd:31:03:a3:f0:40:81:9c:
                    c7:72:04:70:84:8f:13:09:a4:05:96:d3:3a:b2:97:
                    32:3e:6c:4f:3a:1b:13:6c:2c:a6:9e:ce:87:51:cb:
                    b4:01:b1:17:1e:69:49:2d:56:fd:f9:8f:e7:3a:f2:
                    ee:cd:3e:c7:cb:96:a2:66:58:e2:df:31:9d:80:fe:
                    f8:44:66:5a:70:d1:46:1d:a3:df:8c:d6:42:a7:06:
                    ca:c5:5e:97:22:fa:24:81:b9:15:e4:b3:16:db:19:
                    a2:23:4f:f4:68:89:17:52:96:0f:25:6b:ec:62:b2:
                    f8:e5:c5:c8:ad:16:10:3c:93:b1:3e:79:cd:8e:32:
                    92:84:fc:87:29:ff:2f:4e:48:28:1b:f5:8e:52:b1:
                    a8:9d:34:23:b2:21:3d:47:a9:8b:d4:96:d3:41:8d:
                    67:8f:96:cc:65:15:1f:ce:ab:ac:54:69:83:17:2c:
                    3e:69:39:ee:f1:ca:14:fc:02:4f:78:9a:28:4d:b0:
                    d4:fc:5c:86:d8:60:45:8a:24:6d:c2:bd:b1:98:da:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:98:C3:8F:93:7F:49:BB:FD:61:53:1F:1D:02:C6:D6:4A:98:42
            X509v3 Authority Key Identifier:
                keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:2a:8c:75:f3:f6:52:96:53:1f:99:75:94:23:0c:07:51:33:
         fd:27:03:50:2d:a5:91:62:99:1c:42:2f:04:51:b4:56:8e:2d:
         96:ec:91:5b:30:4f:fc:74:43:ec:87:bf:a2:6b:7d:af:8f:a5:
         c0:96:7a:cd:c5:3b:2c:ad:b1:e4:b3:35:3f:54:66:0f:97:89:
         26:7a:9e:49:8d:ca:b0:81:fe:74:a3:d5:60:0c:dd:94:6c:fa:
         56:8c:68:39:e0:d3:0b:e9:41:4a:5c:64:98:3e:46:40:c6:43:
         2d:8e:f9:f2:ae:8e:b7:4a:58:6b:e1:9c:53:d5:1e:00:29:a0:
         0b:a5:b3:16:1f:c5:9d:63:74:e1:05:ac:d9:ec:9e:96:91:ab:
         4a:dc:b6:2c:b6:0a:10:11:2f:f6:b6:e9:b2:76:5f:6d:e7:11:
         92:20:d9:e8:1b:24:16:c4:bd:38:ed:8f:a8:0b:ce:74:8e:4b:
         2b:2e:8a:6c:95:3d:7b:9f:88:d7:bc:5c:f6:3c:df:24:55:5a:
         d3:7a:b7:67:ce:95:ce:f0:55:eb:6f:0f:c0:d5:64:09:c5:dc:
         e8:38:24:e7:51:58:88:ce:be:f4:fe:71:7d:0d:83:09:01:6a:
         59:0a:c6:3f:2c:20:2a:b8:76:4e:06:5b:9c:37:ff:95:4b:c0:
         b1:6a:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:23:53 2026 by rpki-client