Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File:                     ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier:          LH9e7fm01lI+NUmbyT/RPgGMVtyuKZWgqJWCVOI4gcA=
Subject key identifier:   70:D0:16:B8:AF:B4:8A:77:93:63:85:77:84:47:8C:94:19:FE:90:7B
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer:       /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial:       02F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number:          02EA
Signing time:             Mon 05 Oct 2026 01:17:35 +0000
Manifest this update:     Mon 05 Oct 2026 01:17:35 +0000
Manifest next update:     Mon 12 Oct 2026 01:17:35 +0000
Files and hashes:         1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: 1xIRBDfQdNgnOnjuIF3/OQL+8132lm5Gj5x4n9jGfDw=)
                          2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: H1Ezj2Ot5D8SjDdPf9eFovOIWLX9v54dC115vUpD6O8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AC4, serialNumber=A337633E35919940BD729D912F3663158C267C36
        Validity
            Not Before: Oct  5 01:17:35 2026 GMT
            Not After : Oct 12 01:17:35 2026 GMT
        Subject: CN=6ac2faaf-42e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:e9:10:86:dd:c7:77:67:58:05:d8:a5:c6:
                    ff:d6:bd:4e:30:7c:45:52:ea:3c:9f:50:bb:43:90:
                    ed:b2:24:a8:c0:52:12:ac:b2:5c:b0:56:ed:e0:43:
                    4d:cf:b1:bb:0e:ea:a2:9e:be:96:88:78:ac:2a:fe:
                    77:b0:bc:c2:5e:87:0d:85:bf:fb:86:e1:67:59:1a:
                    58:4e:1e:53:e4:90:ab:46:c5:80:78:5a:ae:b4:af:
                    37:c6:99:33:8c:16:b9:b6:41:70:73:f6:61:e9:6f:
                    52:24:bd:aa:d4:83:7f:53:12:00:59:63:ed:ee:84:
                    f4:e4:d5:7b:ef:39:51:ab:11:72:9a:b7:16:d5:cc:
                    a9:df:a4:61:85:44:ed:1b:c2:33:c6:4e:8a:f4:71:
                    60:36:d4:a9:e6:6f:49:71:96:64:18:0d:3f:84:66:
                    76:27:8a:d2:b2:62:63:29:ff:35:63:6e:04:a8:c6:
                    e2:cf:41:28:d6:fb:28:00:82:60:16:22:73:f9:de:
                    9e:9c:a5:01:90:83:a1:c8:5b:2f:07:d3:01:9c:cc:
                    86:29:a6:fb:5b:6c:99:67:41:e7:47:06:95:b8:c0:
                    35:4b:dc:e6:80:10:b4:61:87:b9:90:96:d2:c6:ce:
                    86:0e:29:d5:de:76:97:d5:01:59:07:ba:83:bf:27:
                    8a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D0:16:B8:AF:B4:8A:77:93:63:85:77:84:47:8C:94:19:FE:90:7B
            X509v3 Authority Key Identifier:
                keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:74:12:f9:2b:5a:46:72:4b:61:0d:fe:9e:fe:7c:ed:ce:
         23:3f:b4:89:a8:cd:a0:72:e3:61:7a:19:68:5d:59:0b:68:0a:
         07:f7:e8:9e:76:b2:e7:1e:6b:ad:8b:60:1e:14:ba:b6:be:33:
         9a:35:fc:57:f4:3c:4e:19:d1:7f:74:d6:3c:56:6f:28:ba:9b:
         7d:13:81:0c:93:79:bf:e5:52:43:de:80:7e:d2:bc:c4:71:ef:
         91:4d:fb:38:46:29:6e:ee:0e:18:7e:70:e9:df:e4:74:4d:e6:
         c0:3e:89:b6:3b:65:ed:e7:b4:4c:6d:3b:fe:ef:2d:58:34:a8:
         a3:c8:b0:0a:fd:81:ae:49:08:80:a3:d5:d4:c0:77:64:f7:98:
         64:01:83:83:d1:e9:0b:a2:ad:9e:ed:79:b6:09:27:7a:ed:fe:
         7d:04:a0:bb:25:2e:15:9d:00:86:6e:0b:fc:98:bf:32:d9:21:
         80:f2:aa:b5:5c:86:11:f0:97:60:81:79:c8:db:18:36:aa:1f:
         a6:5e:a6:97:00:17:8f:d6:1d:2e:23:9a:70:bc:3b:f9:42:e7:
         91:f5:1f:74:26:ce:22:54:11:a8:75:21:bd:53:99:07:c7:17:
         ac:70:70:f1:a6:8f:14:16:51:51:af:2c:e7:63:a9:01:7b:94:
         06:42:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 02:55:09 2026 by rpki-client