Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File:                     5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier:          XDziaWZ/BaZnUYC48kUhi6nlVdozfF4146p4rj0AP6M=
Subject key identifier:   96:29:53:70:98:5A:FA:07:AA:0E:0A:A5:26:08:1C:03:CA:9D:E7:E8
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0EC6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number:          0EA8
Signing time:             Sat 26 Sep 2026 17:46:29 +0000
Manifest this update:     Sat 26 Sep 2026 17:46:28 +0000
Manifest next update:     Sat 03 Oct 2026 17:46:28 +0000
Files and hashes:         1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: RFsJwg73lhJa8tY0EtbxhMTJwJj4AfvE4bnTpXcOaQ8=)
                          2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: I42/yCc2sXng95yV5V9rJYMIeKVTpAqNcLtZHIVHLHg=)
                          3: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: gUZUG0XGqciwniJGSiDxz0DgvPWakTbupjgNjJySVdM=)
                          4: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: LK9lFz+9N11fqfPC0jVRHD9FeANyPw0tdvt1fpUzGLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3782 (0xec6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Sep 26 17:46:28 2026 GMT
            Not After : Oct  3 17:46:28 2026 GMT
        Subject: CN=6ab804f4-9791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:1b:96:46:13:66:d4:b7:f8:db:33:4b:c9:
                    d8:1e:ad:40:e9:fe:b7:af:78:b8:64:62:6d:a5:87:
                    23:bf:a0:51:43:aa:3f:1b:fa:72:41:a3:ad:c4:c2:
                    d0:9c:a9:1a:d8:5a:3c:40:47:b7:3d:f1:f2:c7:64:
                    20:15:17:20:6b:73:99:58:2d:c4:77:7b:ee:af:c1:
                    9c:e7:f7:b2:de:b2:f4:0c:d8:b3:04:9e:21:75:db:
                    5a:e5:27:c4:2c:bb:1e:f3:84:74:fc:d6:38:4d:73:
                    60:ae:6e:47:ee:eb:b8:fa:ed:c0:01:3f:17:e6:7d:
                    f3:14:2d:79:f9:a8:9a:2c:41:6a:2c:9f:fb:f5:45:
                    44:59:43:35:8a:7f:b5:fd:2d:59:c3:f2:18:2d:72:
                    e9:c3:1d:37:a8:99:25:e9:b5:86:06:f4:72:08:38:
                    de:84:73:f2:0b:d0:8a:5b:71:9c:02:74:45:16:ba:
                    e7:24:03:7c:94:91:71:ec:02:76:e8:1f:f6:60:6e:
                    4b:19:c0:fb:a7:62:fa:94:80:04:7e:74:3b:e2:39:
                    cc:2a:a1:df:92:f1:a7:96:a9:c2:b8:8f:bc:4d:39:
                    41:c2:e0:d0:b1:ac:f9:85:00:53:c6:b6:26:f2:13:
                    50:ae:4d:70:a7:7e:44:47:49:e0:35:f6:e0:28:93:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:29:53:70:98:5A:FA:07:AA:0E:0A:A5:26:08:1C:03:CA:9D:E7:E8
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d5:92:9c:59:09:3d:26:25:e1:be:c8:80:b1:55:1e:1e:07:
         54:a2:15:19:51:87:17:f2:d8:67:5b:dc:cf:6d:bf:2d:de:22:
         9c:eb:23:c1:3c:6b:0c:d9:a3:b2:35:27:50:6c:07:22:6e:1f:
         0a:d8:1f:cb:fe:2b:e8:40:3f:78:d5:4c:5e:eb:b0:40:9d:62:
         13:47:dd:90:d4:8e:b9:ad:60:a9:34:c6:c0:cb:07:76:6c:95:
         31:d9:0e:51:64:11:6e:30:8b:e6:8e:1a:e5:e1:86:88:f3:4e:
         eb:7e:6d:d0:9d:d7:1e:25:96:b3:9a:4f:15:8c:c6:aa:3f:86:
         d6:c9:1d:9c:ff:f2:c8:c6:8b:7e:b9:ff:e9:3c:ab:53:1a:83:
         ce:32:c8:b9:02:ca:60:f2:b0:6d:3d:31:3f:bf:6c:14:e8:23:
         26:43:c4:f4:f3:3b:3a:6d:9b:f9:ed:3d:07:a1:d5:f6:c6:e3:
         71:70:ee:94:1b:f6:4b:ac:95:81:e1:94:77:16:2c:15:41:52:
         00:30:da:a8:2f:42:25:4a:30:ba:f0:47:26:56:f9:51:d1:43:
         16:c4:ac:2b:f6:43:3c:fe:0f:1a:be:99:c5:32:75:18:fa:43:
         3f:d0:f0:2f:bb:5d:58:08:96:65:3d:a1:2d:0d:ce:a1:a4:53:
         af:14:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:14:11 2026 by rpki-client