Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
File:                     Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json)
Hash identifier:          W++b26AfAsdsEwwWqLZzRmB9mp4Kc/7yXVfQwXYEAow=
Subject key identifier:   D9:54:F2:49:17:3E:1A:C5:1E:99:73:31:E9:47:51:3A:B3:98:75:D6
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Certificate issuer:       /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial:       3443
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
Manifest number:          33CE
Signing time:             Thu 08 Oct 2026 15:25:47 +0000
Manifest this update:     Thu 08 Oct 2026 15:25:46 +0000
Manifest next update:     Thu 15 Oct 2026 15:25:46 +0000
Files and hashes:         1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: /3+ADyvxB46qjvBHlJriavebdGeTUCAggD+Qa7JChFY=)
                          2: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: ywYO0R2h+KCbkByqxPNiOzqIp/WyrJLVsBz2TrN/mq0=)
                          3: 3729B51E870611F18212677BADEE528E.roa (hash: KmqkE4g5dl2qjiw7G2tcNNphjk7q9UbrdXY3bWAn7D8=)
                          4: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: YkWYNrxgO0n51u4sQpXTHmpzMu712XYl/YRt4XSQRKE=)
                          5: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: D3M6wzI4okhGRiWpslBcCzchggkeDwBoIQLL3NU2Nsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13379 (0x3443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
        Validity
            Not Before: Oct  8 15:25:46 2026 GMT
            Not After : Oct 15 15:25:46 2026 GMT
        Subject: CN=6ac7b5fa-93fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:6b:36:06:4c:73:8f:1c:d1:62:4a:27:f4:
                    f3:86:fb:56:32:6a:29:a0:1b:5b:9e:2e:20:c2:28:
                    5d:3d:c0:65:92:ed:5a:38:18:e9:2c:a8:f0:11:13:
                    9b:8a:b3:4d:ad:69:56:4f:79:89:68:f3:20:2a:b5:
                    8c:4b:5a:e1:9f:d8:29:1a:71:91:e4:15:b3:7c:1e:
                    f7:8e:1b:30:ee:f7:58:8e:dd:5b:ab:cb:8b:c9:d0:
                    d4:2d:c3:51:ce:77:2a:30:60:e8:44:95:02:09:d4:
                    31:42:91:ef:f7:1d:84:ac:88:46:c5:21:1d:60:8e:
                    da:cf:a5:4d:b2:ec:3a:d0:27:55:25:cf:c1:0b:ab:
                    d0:54:90:04:22:c3:81:65:00:e8:93:84:c8:2a:84:
                    51:60:75:88:1e:25:ac:f6:9f:8c:4b:29:e8:09:17:
                    54:41:67:57:cd:4d:22:2c:ec:36:c9:a2:d3:b5:9c:
                    b8:c2:d3:56:7a:6a:d5:fc:26:1b:2f:a8:bb:0f:ea:
                    e6:11:af:a5:6b:26:11:ea:54:53:05:f7:2f:04:a9:
                    56:01:28:bf:1f:53:01:a5:d4:91:1f:03:0b:4a:00:
                    3d:8f:84:37:05:6e:a4:50:bd:51:fc:bb:04:9b:69:
                    42:78:4d:4a:f4:8f:69:4c:ce:e5:d6:b7:f4:a0:bc:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:54:F2:49:17:3E:1A:C5:1E:99:73:31:E9:47:51:3A:B3:98:75:D6
            X509v3 Authority Key Identifier:
                keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:69:96:c5:c5:c1:73:07:92:07:b9:25:f9:c1:46:55:9c:10:
         a6:30:f1:b5:34:79:fc:10:0d:3b:86:f4:3e:d7:1f:20:ef:30:
         c8:7a:96:4a:22:a4:18:bf:b9:73:5e:cc:50:cb:12:f3:af:5e:
         cc:91:70:4f:b9:f8:99:a4:4b:21:06:49:ee:14:5b:ce:24:0a:
         ce:4b:68:f8:c3:c5:4c:6a:21:a4:b5:a9:df:81:57:a3:14:4c:
         d2:c4:40:b6:ea:74:13:5a:31:33:bd:50:c9:04:4a:15:8d:b2:
         04:a5:3a:29:62:d9:fa:b8:86:36:4c:97:a1:4b:b8:be:1b:a8:
         30:88:54:fd:70:97:e4:88:45:79:5d:60:e7:37:6f:d3:58:5d:
         28:95:d1:56:c9:58:79:43:78:e1:ab:c4:a2:bf:6d:73:53:82:
         aa:ab:ed:5a:71:68:83:c0:33:b6:ad:ab:cd:b1:a1:5c:f4:86:
         88:7a:89:dd:41:a8:0e:8b:16:9c:de:61:17:6f:d5:d7:a6:3c:
         c9:03:8f:e1:ab:c3:c7:db:93:94:87:ab:80:aa:b9:ca:21:e6:
         15:5d:58:ba:8c:3e:a8:49:b6:30:6c:01:87:01:06:2d:c9:93:
         b4:4f:ae:32:94:16:42:d4:db:19:45:0b:ab:fd:b9:9e:56:00:
         16:28:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:32:20 2026 by rpki-client