Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
File:                     O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json)
Hash identifier:          eklHDaMIvK2SVJMlJaX3arz3L3OSJ23+ma6ouz4B12w=
Subject key identifier:   F6:C3:6B:0F:B5:CF:F5:D4:FB:98:3B:ED:C8:11:68:57:2A:08:94:E9
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Certificate issuer:       /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial:       032E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
Manifest number:          0320
Signing time:             Mon 21 Sep 2026 00:52:34 +0000
Manifest this update:     Mon 21 Sep 2026 00:52:33 +0000
Manifest next update:     Mon 28 Sep 2026 00:52:33 +0000
Files and hashes:         1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: 1OGemzyCIUMlO+SAhw6sddSKr6Ag4GU/+tZZ59f+nwI=)
                          2: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: oMJnsHEpWXXhDLwnF6dufDjEuC/WH5wJQLw5rJAWOBE=)
                          3: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: Ip48cdazW4hM6iIWRAVgf+gNfgujxIpBb+M6ahRdDTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
        Validity
            Not Before: Sep 21 00:52:33 2026 GMT
            Not After : Sep 28 00:52:33 2026 GMT
        Subject: CN=6ab07fd2-4764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:18:33:34:2b:5f:36:30:05:26:4f:68:8c:
                    f9:84:29:d4:73:ad:e2:7d:3a:af:28:39:e0:60:b0:
                    34:8a:97:21:ae:0b:18:95:c0:f3:a4:c4:d8:ca:d8:
                    0b:bf:f5:d4:23:e8:58:bb:61:18:08:1e:98:c8:a1:
                    16:d4:cf:8d:6c:35:56:dc:46:5b:1c:54:bb:85:bd:
                    b3:f8:10:17:d4:29:b0:79:c4:7a:8d:bc:4d:dc:d9:
                    69:db:9a:09:f8:b3:d8:6a:d3:bf:ce:f2:0f:6f:d5:
                    54:28:76:e5:f4:09:4d:3c:75:7d:a1:11:dd:54:8b:
                    2c:1b:7c:b0:f2:a7:84:6c:4d:90:a5:61:31:db:f5:
                    bf:b7:8f:a9:c0:fc:db:f7:4f:72:83:68:fc:b2:19:
                    82:8a:03:a9:72:4d:b3:06:de:3f:30:26:bf:e6:d5:
                    ab:76:bc:da:20:cd:50:3a:e5:67:42:81:9c:4b:59:
                    db:0f:af:73:e5:9a:f6:1f:44:dd:cc:de:00:76:92:
                    2b:61:ab:7f:9e:0e:38:5d:6d:99:05:d2:fc:4c:6e:
                    a2:3c:7e:f5:9d:42:b1:00:1d:b0:ac:5c:5e:f3:5e:
                    2d:c6:64:70:19:2e:86:13:6e:92:83:60:f4:20:29:
                    cb:7d:4b:71:5e:0c:7b:6d:93:85:ae:9b:4b:3e:e3:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C3:6B:0F:B5:CF:F5:D4:FB:98:3B:ED:C8:11:68:57:2A:08:94:E9
            X509v3 Authority Key Identifier:
                keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3c:d5:ca:c8:0a:39:33:1d:84:a4:91:56:d8:c5:fd:c4:30:
         4f:a7:4c:7a:e5:27:74:6f:f6:23:c8:52:f2:8a:5e:eb:92:10:
         bb:78:a2:40:93:75:d9:12:20:fb:12:f5:3c:03:0b:ec:a3:25:
         cf:ec:f2:48:1e:e6:31:d9:e6:64:90:ae:7b:c7:ed:5e:d2:70:
         dc:40:c8:cf:71:a0:ac:02:a9:5b:5e:04:82:64:74:56:5c:f8:
         79:60:92:f6:79:f9:51:fc:97:a6:d0:ca:b4:03:5c:3e:04:3e:
         a2:41:c5:e5:81:c6:75:e4:e5:d7:ad:87:61:96:4b:22:21:fd:
         a1:d0:b2:6f:12:22:bf:99:2f:28:52:49:1d:65:ab:9d:a3:91:
         aa:3d:4b:1b:bb:57:26:dc:fd:44:2e:45:2d:fb:bb:3f:29:a5:
         32:bd:3e:f3:f4:42:15:45:6e:05:cd:3d:78:55:38:6a:49:47:
         0a:5c:98:95:f9:6c:e6:bb:c8:6f:99:c9:52:64:54:32:82:f9:
         89:af:6c:00:5f:48:cc:74:06:01:23:e6:e1:f2:98:04:33:91:
         5f:30:69:93:5e:0f:5c:96:1b:15:be:8c:08:e4:59:72:11:85:
         a7:88:d4:cc:1e:0b:5d:52:0c:92:9a:71:10:a4:f1:cf:6a:8a:
         80:68:a9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:33:21 2026 by rpki-client