Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
File:                     OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json)
Hash identifier:          dEjl1TwJEqctsTqRcHucTecF3tlK1DJZghU0hszY0DE=
Subject key identifier:   5B:C4:6A:C5:84:6C:3B:83:C6:F7:4D:74:F6:DE:76:AE:54:30:9A:35
Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
Certificate issuer:       /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Certificate serial:       1493
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
Manifest number:          1486
Signing time:             Sat 10 Oct 2026 16:52:21 +0000
Manifest this update:     Sat 10 Oct 2026 16:52:20 +0000
Manifest next update:     Sat 17 Oct 2026 16:52:20 +0000
Files and hashes:         1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: 0meY6vvzRU45qJa/r0WLsqkxOIEJc6dwT7ijKITxE0A=)
                          2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: ejmgdYeuM6vja8yeymu+bvz8ubQIFSHH83aK9capx78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
                          rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 16:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5267 (0x1493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
        Validity
            Not Before: Oct 10 16:52:20 2026 GMT
            Not After : Oct 17 16:52:20 2026 GMT
        Subject: CN=6aca6d45-476f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:6f:d1:89:4f:cf:da:21:48:00:4d:70:8b:
                    42:20:eb:33:f0:4c:89:05:57:dd:86:1f:ec:48:6f:
                    06:ba:e0:27:6e:e9:38:8c:7f:a1:bb:c4:47:24:20:
                    e0:13:71:2e:ef:85:b4:85:56:36:79:63:e6:af:0d:
                    ce:ef:b2:18:36:d7:70:f0:fa:27:b3:1e:8c:23:8a:
                    fd:28:4d:40:c3:d1:1e:5f:98:8d:69:9b:9b:e8:11:
                    0d:a2:26:c9:97:46:ec:4b:b1:00:d0:d4:e5:db:25:
                    3a:a5:a3:65:89:88:c5:e0:35:26:6c:e8:33:25:e6:
                    4a:f7:9b:9d:b6:2c:78:00:e2:5e:06:47:a3:6d:7b:
                    f9:ce:24:4c:1c:b4:c6:4f:ba:59:2d:94:1d:78:d5:
                    bb:5c:53:1e:69:bc:a3:6c:21:d3:d2:eb:22:42:7b:
                    50:69:0c:d3:4b:1f:1f:65:37:ba:26:49:81:1a:23:
                    fd:6c:10:3d:61:ed:f3:ca:48:7d:88:fc:2f:db:8d:
                    7b:3e:95:f6:c9:15:97:bd:b6:d3:58:aa:f1:ba:a1:
                    3c:a1:b0:cc:bc:0d:6d:77:b9:a5:83:4f:18:13:a6:
                    32:24:8e:1e:87:bd:38:aa:53:2e:7d:57:ea:75:8f:
                    56:20:b3:a3:a4:ec:fc:c7:44:cf:14:06:c9:5e:5a:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C4:6A:C5:84:6C:3B:83:C6:F7:4D:74:F6:DE:76:AE:54:30:9A:35
            X509v3 Authority Key Identifier:
                keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:2c:b3:75:00:93:18:c1:58:7e:d5:25:4c:24:a3:13:3d:
         09:62:1c:09:81:3c:ef:a1:90:85:f8:05:b2:c4:ae:00:4d:b1:
         c4:35:d2:9d:32:ac:10:95:61:18:8f:68:91:10:6b:3f:a3:0a:
         ad:93:d8:ec:0f:34:db:f3:d3:9d:c2:1a:2f:08:dd:5f:89:0a:
         5d:30:c6:90:a1:51:a6:d7:e4:0c:e3:16:f6:8f:31:7b:0c:cc:
         15:e2:54:6a:6c:8d:c7:c8:66:9c:bc:7c:97:7e:70:63:96:c9:
         d2:1a:ed:e1:3a:42:49:d7:81:d7:24:90:d1:28:2d:5b:fa:a8:
         ba:20:42:d1:e7:30:5a:7b:d1:3b:2d:b3:eb:e2:5d:f5:6e:9d:
         fc:0a:4f:23:da:8f:b3:bf:fb:1b:fb:27:ba:18:18:c5:36:38:
         5f:68:e7:22:73:bf:40:6c:0c:f2:5a:b2:c5:38:8b:e2:51:d1:
         21:09:ca:7a:be:c3:0b:81:7a:77:bf:9b:2b:d8:fc:49:b9:56:
         4d:72:32:43:7a:82:22:4e:a0:f0:b8:6b:3b:d5:c6:5d:ea:14:
         c0:45:60:07:da:a2:40:c1:d6:44:5a:11:68:6b:1a:fd:8f:11:
         0b:bf:c1:39:df:03:f5:65:1f:6b:94:00:97:24:38:d8:69:c8:
         0e:89:72:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:16:29 2026 by rpki-client