Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
File:                     O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json)
Hash identifier:          HwpIPB2YFVcne7/z+XUZfvM745qJngSQ0hG+O0S3jNY=
Subject key identifier:   41:DD:02:20:AA:E2:5D:99:E3:BC:9A:4D:54:66:40:62:79:7B:E4:C1
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Certificate issuer:       /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial:       0B39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
Manifest number:          0B13
Signing time:             Sun 20 Sep 2026 19:16:41 +0000
Manifest this update:     Sun 20 Sep 2026 19:16:41 +0000
Manifest next update:     Sun 27 Sep 2026 19:16:41 +0000
Files and hashes:         1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: tAqL2Yw7fPuB2BoOgZxLa683pq1NN9UiRh95buN9Zoc=)
                          2: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: tjBgUERDNlX0vVwthkUmYdv4wGMbSaZtWaLqVCL5g+E=)
                          3: 27323072FF0E11EFB014CB3CC4F9AE02.roa (hash: lWmthGeBZ7LDMGrGEonzo/wuOeW50Fv4yH59yX/aHdg=)
                          4: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: EahjIzDunS5kJ7uh0KLSIyNDojbGXwaI7ZaquLDLzIA=)
                          5: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: bm6AgPrr+ba3g4ON4TXkW8wGD2H/2xk2tqyflYqK8Mo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2873 (0xb39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
        Validity
            Not Before: Sep 20 19:16:41 2026 GMT
            Not After : Sep 27 19:16:41 2026 GMT
        Subject: CN=6ab03119-2729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:54:95:7c:6e:25:49:75:5e:3c:b8:79:37:
                    85:da:f9:22:f9:da:4b:e1:21:a2:90:77:9c:a3:aa:
                    1a:4f:aa:61:37:6a:a5:75:d8:18:5e:ee:90:ba:fc:
                    fe:27:31:52:7e:02:ad:9d:0d:a9:be:43:8f:0a:13:
                    80:bc:ca:7c:24:3a:d3:e7:b4:0e:b1:9a:5b:1a:64:
                    44:d0:5b:48:22:59:dc:1f:c7:4e:43:ac:95:37:e6:
                    22:48:84:fe:d5:b5:30:6e:79:9f:92:71:cd:70:cc:
                    0d:40:dd:da:d6:e6:8c:59:e5:90:a1:a7:d3:7d:6d:
                    68:ab:4a:42:fe:61:d0:bf:23:72:37:91:ce:13:54:
                    b7:26:b4:87:10:d0:c8:06:c8:91:9b:43:7e:c7:6f:
                    21:11:98:7c:df:6e:e1:96:db:0b:2f:a0:00:a5:41:
                    ff:51:bb:72:e9:c2:a8:c4:b6:8b:7f:02:2b:5e:1d:
                    e0:5a:26:5e:96:ad:55:11:d5:47:58:7d:45:8d:1e:
                    bd:f1:71:b5:35:e4:09:ca:4e:e1:a7:b0:65:d5:34:
                    a9:e4:c9:10:a4:7d:6a:0f:fb:18:b8:b1:f7:0e:d8:
                    71:c7:4c:ea:09:d5:52:b8:94:e6:ef:3d:94:68:6d:
                    d7:63:bf:d1:5f:3e:d9:a4:80:64:28:b0:0e:29:05:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DD:02:20:AA:E2:5D:99:E3:BC:9A:4D:54:66:40:62:79:7B:E4:C1
            X509v3 Authority Key Identifier:
                keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2f:ca:fe:de:a0:d2:29:b5:b8:ac:c9:64:b1:fe:8f:98:1c:
         0c:47:d0:0e:b7:68:ae:dc:05:c6:ad:e0:d8:4d:6e:93:5b:8b:
         4c:98:1a:f2:c7:94:13:19:22:26:d3:60:70:5e:f5:2b:be:a6:
         9c:ee:6c:86:b0:89:3f:cc:9f:bb:7c:d4:fb:7b:fa:4b:22:84:
         76:6e:df:3f:62:0f:f3:c2:1f:2b:57:fd:a9:63:64:b1:72:41:
         2a:0b:a4:d0:c9:58:6e:cb:d9:26:57:ce:e8:03:c6:89:26:c9:
         c6:63:db:ba:5d:fe:3b:6f:22:66:79:bc:40:22:bb:0f:06:60:
         a1:7c:70:49:6c:60:6c:b7:8e:81:c6:da:16:52:f1:1f:7a:67:
         2b:1e:70:07:6b:b1:1c:e3:e5:6c:c0:5c:b1:16:8c:4f:a6:dd:
         99:f5:da:c0:ff:4f:e8:7b:00:83:53:f2:67:f1:34:07:6a:2a:
         ce:46:ff:e6:84:4e:ce:3d:6b:e9:9d:45:61:e3:7c:89:60:78:
         7f:17:f5:9e:2a:5d:16:68:0f:52:97:18:c6:36:e5:1f:d6:44:
         09:2e:75:2c:f6:ae:fd:6a:33:40:c0:d1:60:79:b3:31:0a:89:
         25:63:e6:11:b6:99:66:f3:3f:87:64:9a:69:f1:7f:c0:c4:bd:
         c7:c6:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:53:31 2026 by rpki-client