Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
File:                     OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json)
Hash identifier:          XP+8LyB1c5YD04UDxOqb360hL027rfFl1I49XxRzpAc=
Subject key identifier:   6D:0F:D6:31:99:E1:29:BA:53:78:4A:44:EA:41:A3:F7:79:F8:B8:7B
Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B
Certificate issuer:       /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
Certificate serial:       1890
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
Manifest number:          1884
Signing time:             Sun 20 Sep 2026 16:27:37 +0000
Manifest this update:     Sun 20 Sep 2026 16:27:36 +0000
Manifest next update:     Sun 27 Sep 2026 16:27:36 +0000
Files and hashes:         1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: 52P55ZJ8hbphTc0G8i/26q8cd/8U4qsCDKdFC8juMNk=)
                          2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: 7JNmlbMqJmYKkSRMUqjjlP0pR2Q9I21oeD7RxmLV6bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl
                          rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6288 (0x1890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
        Validity
            Not Before: Sep 20 16:27:36 2026 GMT
            Not After : Sep 27 16:27:36 2026 GMT
        Subject: CN=6ab00978-d220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:4d:99:03:56:60:f2:98:71:2d:e1:e4:46:
                    6e:fc:8d:00:f3:bc:7e:16:19:df:6b:ec:e4:08:52:
                    7c:af:d7:cb:5e:78:61:45:3d:60:f7:aa:60:46:7c:
                    c9:ba:1d:9d:dd:52:7a:04:85:4f:b6:af:ef:3d:52:
                    27:f4:c1:43:28:d9:5b:ce:3f:e0:f5:f0:8d:ea:19:
                    3c:04:99:88:8a:a8:65:82:ee:8d:9a:2f:41:36:ce:
                    f9:4e:79:e7:f4:41:30:70:f4:0b:a4:5e:58:0a:97:
                    be:7e:4a:03:8b:f7:89:db:6d:4a:89:38:97:dc:71:
                    b2:a7:52:2f:26:0e:bc:60:69:41:ff:a7:35:c0:72:
                    32:b8:51:b6:35:68:3f:16:69:c0:73:7f:20:bc:da:
                    62:c8:18:1c:18:eb:d0:bc:87:4f:48:32:70:3c:4d:
                    1c:a2:62:34:20:8d:9d:53:8b:4a:a7:41:eb:95:73:
                    77:be:1c:cc:7f:c4:1a:c7:d3:ef:ae:e4:e6:79:d4:
                    8e:53:6c:61:f1:5a:2b:ef:3c:82:d5:30:d4:0d:c6:
                    7d:f0:4d:03:15:b8:d0:35:88:2e:87:ee:c5:e4:34:
                    e3:17:b6:d5:5a:ab:3b:54:46:a9:6f:98:dd:83:3b:
                    b6:1e:dd:12:69:98:3b:9d:ac:44:a1:47:d7:12:ed:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0F:D6:31:99:E1:29:BA:53:78:4A:44:EA:41:A3:F7:79:F8:B8:7B
            X509v3 Authority Key Identifier:
                keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:32:ed:8b:93:78:1d:c1:21:29:15:58:e7:33:2c:7e:b3:d3:
         83:68:a9:bf:95:10:a0:73:df:e7:2f:61:0c:46:3d:72:9d:0d:
         aa:3a:b4:e9:d6:0e:3b:05:89:27:17:fb:7a:90:b6:08:3d:9a:
         8b:56:3b:c5:e6:e7:2e:cd:19:53:aa:0c:a5:5f:be:e2:6b:5b:
         6a:90:df:4d:a4:a9:90:ae:1e:f1:cf:c7:03:1f:cf:fe:53:69:
         de:c3:1c:30:93:22:40:c7:c7:88:b9:1c:59:7d:e1:a1:50:66:
         f7:08:8d:67:b0:64:97:02:66:9e:bc:eb:9e:42:41:13:de:92:
         ef:f4:0e:cc:0e:fc:c6:a5:dc:fe:6f:89:f9:18:6a:e2:c9:43:
         f2:6e:37:e0:fc:ea:c4:a1:73:b9:ba:a0:35:f4:e1:5d:92:c2:
         a8:aa:54:24:dc:6d:cd:88:12:65:b5:c2:19:a4:73:d6:7a:da:
         e3:04:65:3f:a7:3f:0f:86:a5:d3:54:9c:d4:9e:f0:d3:28:e3:
         a4:3b:39:79:37:c6:3f:64:23:f0:8f:8d:f5:76:b0:34:08:49:
         2b:fb:24:96:a4:10:98:fe:bb:3d:51:32:6a:c0:b7:41:bd:4a:
         96:31:70:15:6f:49:d2:7e:2a:78:ae:26:e4:db:a1:64:03:a6:
         12:6d:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:07:31 2026 by rpki-client