Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File:                     OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier:          tPA+9Eesgy3xm499uhuGxey9CWUCeGtYN7Can/Y/XTw=
Subject key identifier:   79:67:06:FF:69:AD:06:57:8C:B9:B0:4A:96:68:51:69:06:73:42:55
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer:       /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial:       08C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number:          08A0
Signing time:             Sat 26 Sep 2026 20:46:41 +0000
Manifest this update:     Sat 26 Sep 2026 20:46:40 +0000
Manifest next update:     Sat 03 Oct 2026 20:46:40 +0000
Files and hashes:         1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: A7XePWF6YwVk0+PAvIyaEHLDn6ap2XjGH9odbj/YzEs=)
                          2: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: U/Zn+Je0L7uZPSDNgEJoOIW1ujI2JNhGIHidbTwoXrI=)
                          3: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=)
                          4: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: sQEpQuEbqYjD3RRWz6oiGW1QaCfG5tvcyqPy8Tyv+nc=)
                          5: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: ev3sBPy0Q1f1TCa3FQ+DO7T8UGM3EjS+3+xQyEkvgdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
                          rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Validity
            Not Before: Sep 26 20:46:40 2026 GMT
            Not After : Oct  3 20:46:40 2026 GMT
        Subject: CN=6ab82f31-9bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:0b:40:7c:49:d5:c0:8d:8f:22:b2:2d:a7:
                    8b:29:58:db:7a:4b:f5:0d:63:a9:c9:0f:e7:4e:24:
                    db:cd:45:3d:93:6e:72:0f:7a:d5:3b:43:36:ff:33:
                    5f:fc:f7:42:34:8b:c5:e9:69:71:db:e3:76:48:1c:
                    92:73:24:e4:8e:5b:a7:5e:7a:63:23:d9:be:97:9c:
                    8d:5c:3f:27:0b:ea:e8:39:54:d8:7a:5d:3b:57:a6:
                    6d:ff:ce:7d:99:fd:a9:15:08:03:8d:84:95:d5:09:
                    46:7b:49:69:22:23:b4:4b:fc:44:02:b0:de:07:4b:
                    48:18:82:88:5e:28:a5:bb:0e:51:b6:12:41:ce:f3:
                    c8:64:58:81:da:84:bd:c8:ed:7e:6f:8c:83:07:c5:
                    25:b4:59:7a:b8:c5:dc:ee:db:fd:e7:6e:88:24:93:
                    ca:fe:c0:37:42:76:22:e5:58:69:91:26:56:8a:f3:
                    ad:13:fd:64:ba:1f:44:83:f5:af:1f:f8:43:a2:7b:
                    8a:a0:59:f4:d6:1c:2d:59:99:3d:f3:63:b7:84:52:
                    63:60:8e:a1:2f:bf:ff:dd:51:01:8e:ec:1e:24:21:
                    e6:b7:92:ce:e5:c4:2a:65:7e:62:16:c7:3f:eb:6f:
                    4c:b4:e6:6d:e1:7f:57:6c:6a:00:72:90:b9:e1:94:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:67:06:FF:69:AD:06:57:8C:B9:B0:4A:96:68:51:69:06:73:42:55
            X509v3 Authority Key Identifier:
                keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:42:67:27:78:ba:30:41:8b:1c:f1:6a:40:1a:1c:9e:5b:50:
         35:34:c3:77:1d:e5:d6:a6:2b:e7:6d:b8:f7:57:80:da:af:ca:
         b3:e8:6c:5a:93:8c:5a:73:ea:25:85:3a:17:2b:67:6c:5e:f4:
         4f:fe:8b:77:33:4c:70:d1:4c:c6:96:c7:d6:f5:41:a3:3f:94:
         93:cb:4f:92:a2:3c:b6:b7:60:ea:de:fc:77:ea:72:7e:e8:a3:
         db:ac:27:70:12:bf:a2:ad:49:ef:bd:7f:00:db:3d:19:bd:8c:
         57:9c:12:90:63:4f:fd:66:14:97:00:db:d1:e6:11:4f:8a:ae:
         e0:21:a6:e7:cf:7a:45:3e:65:07:17:2d:1b:f0:77:e1:ce:61:
         a9:a7:20:ac:aa:67:84:d0:7f:d4:33:c9:30:2d:21:74:8a:e6:
         4d:b8:ba:78:23:83:3b:e4:92:cb:a2:8a:60:3c:a0:1c:aa:88:
         48:e0:e6:aa:0f:fe:f0:c5:a4:4b:40:d8:0b:d4:5f:dc:5e:81:
         87:dc:7a:f6:06:5c:ea:b2:00:b1:98:9f:22:f5:3b:96:cf:ac:
         9d:c2:4c:d3:a6:ef:f6:bd:7b:23:89:0e:d9:c8:c2:8b:a5:c7:
         72:74:28:d3:53:bb:eb:3a:fe:8e:b0:dd:81:e1:7b:6e:e7:7c:
         a9:7c:e6:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgzOEYxMTAvBgNVBAUTKDNBODVENDQ3RTE4Njc1RkVENUFFMDVDOTI5Mzc5RUVG
QUQ1QkNCQzAwHhcNMjYwOTI2MjA0NjQwWhcNMjYxMDAzMjA0NjQwWjAYMRYwFAYD
VQQDEw02YWI4MmYzMS05YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApa0LQHxJ1cCNjyKyLaeLKVjbekv1DWOpyQ/nTiTbzUU9k25yD3rVO0M2/zNf
/PdCNIvF6Wlx2+N2SByScyTkjlunXnpjI9m+l5yNXD8nC+roOVTYel07V6Zt/859
mf2pFQgDjYSV1QlGe0lpIiO0S/xEArDeB0tIGIKIXiiluw5RthJBzvPIZFiB2oS9
yO1+b4yDB8UltFl6uMXc7tv9526IJJPK/sA3QnYi5VhpkSZWivOtE/1kuh9Eg/Wv
H/hDonuKoFn01hwtWZk982O3hFJjYI6hL7//3VEBjuweJCHmt5LO5cQqZX5iFsc/
629MtOZt4X9XbGoAcpC54ZS3OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlnBv9p
rQZXjLmwSpZoUWkGc0JVMB8GA1UdIwQYMBaAFDqF1EfhhnX+1a4FySk3nu+tW8vA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODM4Ri9BOUY3NzM5ODA2
RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2RmN1ZyZ1hKS1RlZTc2MWJ5
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09vWFVSLUdHZGY3VnJnWEpLVGVlNzYxYnk4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODM4Ri9BOUY3NzM5ODA2RTExMUVCOUIzMzVDNkRDNEY5QUUwMi9Pb1hVUi1HR2Rm
N1ZyZ1hKS1RlZTc2MWJ5OEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3kJnJ3i6MEGLHPFqQBocnltQNTTDdx3l1qYr522491eA2q/Ks+hsWpOMWnPq
JYU6FytnbF70T/6LdzNMcNFMxpbH1vVBoz+Uk8tPkqI8trdg6t78d+pyfuij26wn
cBK/oq1J771/ANs9Gb2MV5wSkGNP/WYUlwDb0eYRT4qu4CGm5896RT5lBxctG/B3
4c5hqacgrKpnhNB/1DPJMC0hdIrmTbi6eCODO+SSy6KKYDygHKqISODmqg/+8MWk
S0DYC9Rf3F6Bh9x69gZc6rIAsZifIvU7ls+sncJM06bv9r17I4kO2cjCi6XHcnQo
01O76zr+jrDdgeF7bud8qXzmWw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:29:09 2026 by rpki-client