Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
File:                     b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft (raw, json)
Hash identifier:          cuwb5f1rHPRfH9WiSRM/Y4/wFOCwbgrIk5jW0Ozensw=
Subject key identifier:   58:FC:6C:5E:AF:F4:AE:16:5F:69:9C:F3:10:03:3D:5D:A6:8F:EF:DE
Authority key identifier: 6F:E3:B1:09:F6:35:B0:EF:83:76:AE:76:B9:6A:D3:73:D0:D7:6C:1A
Certificate issuer:       /CN=A91B3454/serialNumber=6FE3B109F635B0EF8376AE76B96AD373D0D76C1A
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-OxCfY1sO-Ddq52uWrTc9DXbBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
Manifest number:          07
Signing time:             Wed 23 Sep 2026 08:58:44 +0000
Manifest this update:     Wed 23 Sep 2026 08:58:44 +0000
Manifest next update:     Wed 30 Sep 2026 08:58:44 +0000
Files and hashes:         1: b-OxCfY1sO-Ddq52uWrTc9DXbBo.crl (hash: SYfdFPELUbYq6KJWAtOGV9Ik22jOsbIS0PZHrQA5Q1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.crl
                          rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-OxCfY1sO-Ddq52uWrTc9DXbBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3454, serialNumber=6FE3B109F635B0EF8376AE76B96AD373D0D76C1A
        Validity
            Not Before: Sep 23 08:58:44 2026 GMT
            Not After : Sep 30 08:58:44 2026 GMT
        Subject: CN=6ab394c4-6dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:46:62:0f:02:7c:2a:d5:7f:36:51:3b:f1:
                    e2:06:c5:0d:af:ae:c2:ed:a8:fa:f9:75:ae:7c:5a:
                    6f:ae:9c:a2:d0:8a:bc:e7:c0:78:b1:26:67:3d:df:
                    55:48:50:b6:5d:60:b2:09:0b:92:b6:05:3a:6c:2a:
                    4f:46:bb:87:71:ab:b9:9b:88:77:e3:38:21:9f:c2:
                    81:6c:8f:db:3c:ef:da:e4:60:71:fe:36:94:2e:c1:
                    ff:ad:c4:22:ec:98:0b:15:10:ac:a5:21:e1:a2:c2:
                    45:9e:2f:64:08:8a:7c:b1:48:a0:f9:bb:aa:8a:98:
                    64:1b:0c:35:5e:10:4e:50:46:8d:27:c8:5d:35:12:
                    59:f0:fe:6d:6f:20:4c:f8:3d:89:49:15:6a:59:82:
                    83:70:63:10:66:f1:c9:58:7d:1c:22:03:06:cf:19:
                    43:aa:ce:dd:58:96:d5:c7:af:fe:c4:bb:6e:65:c6:
                    1f:1d:10:4d:a9:37:b5:e6:0a:29:3b:be:d7:20:f6:
                    f8:18:9f:04:48:94:68:64:2b:65:66:27:84:ff:55:
                    4b:98:e4:a6:09:4c:86:4f:aa:f1:07:4e:5a:b1:24:
                    29:74:64:ee:73:ac:44:4c:4b:91:54:b4:2b:9c:73:
                    87:c8:36:cd:b0:e1:70:91:0f:93:39:3d:ac:49:cc:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FC:6C:5E:AF:F4:AE:16:5F:69:9C:F3:10:03:3D:5D:A6:8F:EF:DE
            X509v3 Authority Key Identifier:
                keyid:6F:E3:B1:09:F6:35:B0:EF:83:76:AE:76:B9:6A:D3:73:D0:D7:6C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-OxCfY1sO-Ddq52uWrTc9DXbBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:39:2f:b1:d2:11:7f:00:88:df:f2:a5:9f:33:f1:9d:73:99:
         0e:a6:5d:1b:3d:18:a6:20:90:69:03:bd:9c:5c:1f:e8:c7:62:
         46:b6:d8:79:67:a9:19:15:e1:34:ba:1b:ba:ee:80:24:21:b4:
         21:89:1b:8e:66:c3:21:a9:a9:19:27:a9:ac:4a:51:a1:fe:a8:
         d6:c9:dd:63:89:a3:2b:ab:1b:d3:63:5b:41:a4:4c:ad:0d:da:
         ec:71:23:72:8d:bf:15:a0:93:48:e2:f3:e8:91:f1:1f:27:74:
         38:a8:28:89:0b:a3:a1:3c:c4:0d:de:6b:33:c1:bc:b9:b3:f3:
         0a:6f:1d:e8:6e:fb:10:47:8f:76:7b:df:34:2e:b4:b8:0a:27:
         49:ff:e2:73:8b:38:0e:3d:2d:55:5a:b7:87:5c:e5:9f:f3:5a:
         d3:7f:21:4b:fe:de:31:10:6d:32:d7:b2:28:41:42:b2:97:ac:
         30:94:e3:64:55:02:c5:9f:23:2e:dc:f9:c2:1b:27:69:3c:52:
         8a:f7:f9:e8:c7:70:94:44:e3:f7:24:d3:7a:ba:5e:98:3b:13:
         64:a4:0e:84:66:c3:b9:1c:dd:9a:ee:75:67:b0:12:0a:1d:0a:
         57:6c:3b:bb:ae:7b:98:d7:4d:94:4d:ea:97:64:64:51:6b:83:
         a7:2f:af:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:09 2026 by rpki-client