Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
File:                     OBfP4ApfGsw2O0cvT2nag761ZhM.mft (raw, json)
Hash identifier:          jYA4hYn5KOOO2ZpNefYglfvq6ROe9vMz4FwLC7V80U0=
Subject key identifier:   0D:54:01:35:F8:72:10:B6:C0:AC:6B:E3:93:61:D6:01:4D:3F:1D:E7
Authority key identifier: 38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13
Certificate issuer:       /CN=A91B9AB9/serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
Manifest number:          017C
Signing time:             Sat 19 Sep 2026 04:44:30 +0000
Manifest this update:     Sat 19 Sep 2026 04:44:29 +0000
Manifest next update:     Sat 26 Sep 2026 04:44:29 +0000
Files and hashes:         1: OBfP4ApfGsw2O0cvT2nag761ZhM.crl (hash: JFKOdktmz0Ru8vRksTS2VQC1AmGDuxfFul/0cfvoMiY=)
                          2: A06AB21E6E8811EF95434073C4F9AE02.roa (hash: 1cWKe61JXoqpcmn6lNJya/Zcn9d/497NYBSEDuJwXJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=3817CFE00A5F1ACC363B472F4F69DA83BEB56613
        Validity
            Not Before: Sep 19 04:44:29 2026 GMT
            Not After : Sep 26 04:44:29 2026 GMT
        Subject: CN=6aae132e-12de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:d2:27:e8:7f:f8:cd:bf:aa:06:79:90:be:
                    b8:98:fb:63:b3:29:64:fb:81:61:d7:4c:a0:e9:29:
                    c8:30:c6:ac:56:eb:de:fa:60:e3:6a:04:a6:a8:cd:
                    9d:97:e4:2a:e9:8c:2b:10:28:c1:5f:5f:f6:97:0a:
                    69:f5:0c:33:2f:bb:07:9d:db:ea:80:94:56:eb:78:
                    64:2e:a9:6f:d4:a4:4e:d6:3c:f3:5c:a9:2b:21:fb:
                    12:c8:31:b5:1a:34:d9:4b:f2:0a:89:52:fd:59:63:
                    f7:46:fa:ea:16:c1:0d:7c:bc:81:03:57:09:f4:0c:
                    eb:e1:f9:e2:09:35:41:7b:db:8f:5a:ce:91:64:a5:
                    6c:43:ab:99:e0:53:ee:bc:fb:4b:47:16:68:7b:e9:
                    7d:98:13:07:d5:14:ba:29:da:a4:38:96:33:2e:cb:
                    11:77:09:7c:51:89:66:63:0c:3d:43:1c:39:af:df:
                    7d:e9:09:c4:0c:5f:2d:fe:37:b4:dd:c3:e5:be:e0:
                    ab:0b:d7:ae:34:d7:cb:7a:a6:7b:01:fc:68:42:29:
                    bd:08:99:3d:0e:95:d5:8e:86:a7:ba:a2:06:9c:c7:
                    d5:36:28:ca:be:3a:52:3a:6a:c4:ca:0e:4e:e4:a1:
                    a3:14:1a:d1:f1:66:98:7b:66:c9:43:d3:9b:94:b6:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:54:01:35:F8:72:10:B6:C0:AC:6B:E3:93:61:D6:01:4D:3F:1D:E7
            X509v3 Authority Key Identifier:
                keyid:38:17:CF:E0:0A:5F:1A:CC:36:3B:47:2F:4F:69:DA:83:BE:B5:66:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBfP4ApfGsw2O0cvT2nag761ZhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/D118C0BC6E8411EFA3CD983FC4F9AE02/OBfP4ApfGsw2O0cvT2nag761ZhM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a7:97:7d:25:c8:a0:69:0f:a8:a1:d7:31:25:f8:9b:4f:16:
         d5:04:43:42:5a:90:3a:a9:5a:37:ef:e3:c9:1d:e1:e8:c7:63:
         f1:d2:3f:ad:db:cc:48:71:2e:2f:38:2c:d3:e7:2d:ed:92:92:
         a7:bb:65:b5:4e:dc:f1:83:13:f4:68:d7:4d:66:34:21:6c:92:
         a0:65:5c:a6:3f:5d:f7:cb:9f:18:f3:f7:11:53:49:fc:10:37:
         02:ee:eb:b1:04:de:0f:b9:17:55:c8:f4:aa:86:65:37:04:bb:
         2f:42:72:7a:16:f0:62:24:63:e6:d7:5e:63:b2:16:53:2e:8c:
         3b:9f:07:8f:13:53:eb:5b:b1:80:e4:fd:ff:eb:22:ce:b0:29:
         d5:db:cc:22:1e:3f:4d:75:41:a9:fe:50:a1:5f:4a:6c:ad:a4:
         66:15:22:cd:88:7c:4d:cd:f2:dc:06:a6:cf:ab:04:ea:58:93:
         7d:9b:59:35:9f:c2:52:15:23:39:fc:44:d2:e9:99:4f:0a:62:
         3d:77:e4:fd:e8:00:02:db:bd:99:30:7d:14:92:f0:3f:b0:a7:
         12:4c:d4:95:d9:c9:0c:c5:19:1e:28:e2:a8:a9:92:ea:d2:71:
         3a:e8:43:cf:2d:9b:3e:82:9f:db:ef:06:84:a7:e8:df:b3:72:
         c9:68:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:12:54 2026 by rpki-client