Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft
File:                     oSr_scTP4RQWBnP0ZldP_2n8iOo.mft (raw, json)
Hash identifier:          hlEWtCL5PO2UQnFq/PbjyFKPQ86lhT0w5xS89Lx3ztA=
Subject key identifier:   9F:FB:98:62:9D:C8:81:1C:CB:0F:9C:FE:4E:15:C5:BE:94:7D:74:09
Authority key identifier: A1:2A:FF:B1:C4:CF:E1:14:16:06:73:F4:66:57:4F:FF:69:FC:88:EA
Certificate issuer:       /CN=A911C34D/serialNumber=A12AFFB1C4CFE114160673F466574FFF69FC88EA
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft
Manifest number:          04
Signing time:             Fri 13 Nov 2026 09:24:56 +0000
Manifest this update:     Fri 13 Nov 2026 09:24:55 +0000
Manifest next update:     Fri 20 Nov 2026 09:24:55 +0000
Files and hashes:         1: oSr_scTP4RQWBnP0ZldP_2n8iOo.crl (hash: viIbYh5qstpAdWw+USBY5HjT4+QVRGTwW1eh5OjfJWg=)
                          2: 962D7238DCDA11F180597FA41366CEF9.roa (hash: oS+Jn4u/6S2099r9+7qgL1o4mkIh1f4TTnHojWyZlcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.crl
                          rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 09:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C34D, serialNumber=A12AFFB1C4CFE114160673F466574FFF69FC88EA
        Validity
            Not Before: Nov 13 09:24:55 2026 GMT
            Not After : Nov 20 09:24:55 2026 GMT
        Subject: CN=6af6d768-3f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:ae:c6:6b:3c:73:0f:8b:17:b5:f6:d0:44:
                    50:89:5e:2d:a5:c4:f2:53:64:05:48:2c:c5:86:90:
                    dd:d0:a1:02:15:d4:cb:f7:c3:e3:d8:22:f0:8d:70:
                    e1:80:df:b6:b7:29:8e:6e:f2:c4:01:29:1b:a1:06:
                    de:53:73:b3:81:cf:bd:45:7e:d4:1c:6b:eb:fd:08:
                    f0:87:0d:50:11:e7:fc:66:88:05:5d:5f:26:27:65:
                    29:3d:07:c9:15:ba:07:44:d7:8d:51:bd:49:c1:6b:
                    f0:fc:7c:9d:cc:24:6f:3d:c8:ca:de:1f:79:b7:51:
                    df:10:13:fc:12:58:24:8e:47:8d:7c:32:d7:ef:e3:
                    2f:ee:10:96:d6:3c:a3:c5:00:38:60:d2:a1:27:b3:
                    50:22:49:cc:c7:89:b4:d2:8e:32:fb:0d:5b:f6:75:
                    72:2b:06:88:42:93:91:a3:e1:63:4d:3c:f9:62:c8:
                    5e:73:b7:0f:20:8d:d4:a4:b5:82:49:58:da:4b:53:
                    76:99:87:8d:08:fd:65:da:db:27:af:09:3a:1f:45:
                    13:76:2b:56:e0:a3:c2:4d:57:48:27:f3:4b:03:dc:
                    23:0d:16:3b:02:df:20:51:2b:28:6d:8d:1b:8d:ae:
                    a3:e7:37:1a:c5:01:29:bf:fe:93:13:64:bb:82:89:
                    96:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FB:98:62:9D:C8:81:1C:CB:0F:9C:FE:4E:15:C5:BE:94:7D:74:09
            X509v3 Authority Key Identifier:
                keyid:A1:2A:FF:B1:C4:CF:E1:14:16:06:73:F4:66:57:4F:FF:69:FC:88:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:aa:c9:e8:55:42:a1:59:93:c5:38:a9:f4:76:ec:b1:b3:
         17:4c:7f:07:50:ae:69:ec:df:f6:c5:98:40:82:b4:3c:95:74:
         07:2d:97:33:7d:08:3c:54:60:d2:58:b1:40:38:c1:2a:b0:ba:
         d9:59:18:95:a9:67:63:f1:69:d9:ff:23:2b:d0:9d:eb:36:c8:
         aa:ee:e6:4f:d9:7d:cb:df:18:cc:56:58:f4:09:37:8f:f1:4b:
         65:73:55:ff:35:ae:18:78:a4:db:56:5e:fb:f6:0d:ff:d0:8f:
         9a:48:ab:37:39:c4:ad:9e:fa:e1:3b:b2:ee:db:4e:e0:c5:ec:
         7d:c7:e7:98:11:78:ee:6b:fd:f4:8c:b2:f6:a3:20:c9:9b:72:
         0d:d7:00:6b:f5:9d:6b:82:ba:91:5e:7b:e6:3d:79:f2:5a:1a:
         0f:7c:20:c5:c9:54:67:5d:fb:ef:85:c4:6b:c8:cb:54:70:73:
         36:7b:29:79:1e:14:84:07:08:81:ca:8b:c0:19:2b:cd:44:7f:
         05:a7:32:93:53:2a:52:b0:49:ac:7b:a6:70:db:9d:8b:29:90:
         cb:cf:09:b1:ed:83:04:76:9f:58:b5:ad:34:e1:1d:71:79:a6:
         76:70:5f:9b:5c:f1:a9:d7:95:11:54:ad:b0:93:c2:db:ad:71:
         11:ab:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:05 2026 by rpki-client