Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
File:                     uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json)
Hash identifier:          6s6piCppIKRBirKpumZPglMcLwzaeBL4Yx/AchnUc98=
Subject key identifier:   F3:86:BF:4A:1C:4E:07:01:8B:E4:C2:7C:0C:A3:AF:1D:17:66:4E:40
Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
Certificate issuer:       /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Certificate serial:       0AB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
Manifest number:          4967
Signing time:             Tue 22 Sep 2026 15:42:52 +0000
Manifest this update:     Tue 22 Sep 2026 15:42:51 +0000
Manifest next update:     Tue 29 Sep 2026 15:42:51 +0000
Files and hashes:         1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: v0DwsI/3zumwMOJUMNYL3do3/Iqvib8ouNB5TzPleMQ=)
                          2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: FehOg1jQMA1kFJnWyr7fIuCvYAwffMy7bJWnLWfMfbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2739 (0xab3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
        Validity
            Not Before: Sep 22 15:42:51 2026 GMT
            Not After : Sep 29 15:42:51 2026 GMT
        Subject: CN=6ab2a1fb-5fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:9a:e2:18:4b:6b:c7:37:b1:d4:81:6d:f2:
                    22:8c:89:aa:90:aa:9f:fe:5a:84:d5:68:11:41:50:
                    36:ea:00:67:cc:a7:7b:74:87:0b:a6:b9:13:64:d8:
                    27:b5:2b:5e:6d:9d:9c:00:14:e6:20:01:a3:24:65:
                    c5:6a:24:81:fe:d3:08:a3:32:24:8c:c3:0d:6c:3f:
                    d5:9f:38:34:e6:a6:7a:c1:35:8e:73:ff:f9:fa:6c:
                    5b:c6:c6:01:73:2b:c1:1e:fc:30:62:e7:1c:3d:e1:
                    8d:7d:1c:8c:ab:2e:81:27:54:f4:c0:bb:cb:64:42:
                    52:be:43:13:4c:54:79:ed:8d:37:8b:e8:77:a6:25:
                    54:4a:8f:5d:d6:cd:e9:ae:58:8a:6f:7e:c4:ba:2f:
                    fb:64:5d:6b:14:aa:73:36:68:ee:32:ee:fb:ef:4e:
                    53:a9:51:4e:38:4a:7e:20:ba:b5:1d:8c:4c:92:b6:
                    98:ef:7e:40:9f:e2:1d:01:55:23:fc:04:ac:24:a1:
                    42:4d:60:b1:bc:1c:25:35:0d:9e:b9:20:48:0f:4d:
                    56:1d:52:3d:97:0a:68:bc:68:5e:70:3c:37:b8:e5:
                    97:a9:b2:57:b0:23:a9:f9:bf:cf:77:ee:b7:29:6a:
                    aa:ab:38:ab:25:87:83:f7:a7:23:ac:42:7d:64:81:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:BF:4A:1C:4E:07:01:8B:E4:C2:7C:0C:A3:AF:1D:17:66:4E:40
            X509v3 Authority Key Identifier:
                keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6f:17:8f:4d:df:ad:63:3f:aa:eb:a3:4e:79:3a:69:2c:a3:
         cb:01:b3:70:09:77:94:ea:f6:85:bd:0b:22:9b:f3:63:2d:09:
         c8:93:9a:85:44:d6:2c:d2:03:c8:15:3e:f5:e9:66:06:02:dd:
         b3:37:b5:25:3c:d8:bf:8b:a6:97:c8:b2:3a:e7:43:e0:85:8a:
         36:ec:be:f5:1f:cb:9c:1a:f8:70:18:39:35:ba:67:72:f0:11:
         5b:3b:4d:51:10:a5:2d:17:66:56:42:b9:00:80:27:27:8d:9e:
         23:a1:67:65:7b:df:7c:15:2d:8b:ee:85:5e:83:72:c1:a8:66:
         81:c1:f6:7d:b4:78:76:0f:32:20:3a:19:74:8f:1c:6a:53:11:
         15:42:8a:0b:96:49:de:9b:f4:f5:cd:42:79:d5:4e:6d:ed:cc:
         d6:29:d3:22:ab:8f:ab:62:67:dd:2d:5c:24:d6:db:17:4d:d8:
         05:39:29:17:47:a4:50:f1:53:d1:3f:c0:82:cc:82:fa:9e:0b:
         fc:38:0c:9f:a4:25:c6:8b:e7:83:6e:cc:56:47:0e:ff:fd:7c:
         9b:2f:c4:8b:a5:3c:2e:cd:04:66:82:fe:96:b6:57:ad:bc:18:
         a7:75:22:7e:65:cf:ef:d7:9e:15:e1:fb:ca:37:bd:b0:fe:2a:
         30:73:cc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:34:05 2026 by rpki-client