Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
File:                     otDn34iradtuBZowZOTdweb8nRk.mft (raw, json)
Hash identifier:          DMBYEELO2Qzhic7Ff32F119VeUo7k0TzSui0uS5wKhk=
Subject key identifier:   AC:0C:56:D9:05:16:A6:17:B7:BE:13:C5:56:24:C6:80:73:D3:47:40
Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
Certificate issuer:       /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
Manifest number:          9E
Signing time:             Wed 23 Sep 2026 07:04:46 +0000
Manifest this update:     Wed 23 Sep 2026 07:04:45 +0000
Manifest next update:     Wed 30 Sep 2026 07:04:45 +0000
Files and hashes:         1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: s8AL1PeTgr/ZlQ61G3P4YvlAdCkJIDI+rC4LVtOwKUQ=)
                          2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
                          rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
        Validity
            Not Before: Sep 23 07:04:45 2026 GMT
            Not After : Sep 30 07:04:45 2026 GMT
        Subject: CN=6ab37a0d-2ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:16:d0:7f:09:17:ba:51:0e:5a:0a:b7:8a:
                    55:c7:60:fa:b8:c0:17:9a:e6:d0:79:0c:7b:0b:8e:
                    fb:0b:a7:b2:e5:e6:57:98:b6:bc:9a:db:e7:38:ef:
                    7b:90:43:b6:f6:f9:47:49:8e:a1:b1:0a:9f:cb:14:
                    20:bb:f9:74:67:c5:df:dc:f6:f0:c0:6e:9f:3d:c5:
                    54:46:a4:87:26:92:96:0f:a6:3c:5f:03:e8:c4:ae:
                    c7:5b:e3:42:8a:d0:8e:f1:52:e0:32:73:1c:06:38:
                    da:21:bc:12:24:88:f3:55:55:90:36:4d:53:84:c6:
                    e9:fa:f1:20:21:95:dd:f0:4a:e5:47:41:8c:be:ce:
                    6f:d7:ef:74:23:2c:4d:e2:c5:60:a9:92:e0:f6:6a:
                    d5:47:6f:12:ee:2a:46:2d:63:47:64:dd:76:ee:2b:
                    51:48:6a:03:55:b7:cc:75:f2:d4:0d:2d:08:52:55:
                    af:9b:bf:0c:c1:2b:10:7e:d2:b8:c6:54:17:09:11:
                    7f:d1:fd:c7:10:c3:7f:d3:7a:e0:26:ee:05:b7:f8:
                    c7:30:a6:38:15:2e:7f:36:29:71:e8:39:1f:5b:28:
                    80:25:35:99:96:19:90:cd:d1:c3:06:01:5d:ee:c7:
                    97:e7:b1:d7:d3:05:90:79:fc:3d:cb:c7:80:24:3d:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:56:D9:05:16:A6:17:B7:BE:13:C5:56:24:C6:80:73:D3:47:40
            X509v3 Authority Key Identifier:
                keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:db:bd:5a:c1:d7:4e:1a:ba:5b:06:48:45:4f:4b:f7:f0:24:
         03:08:fd:9a:53:95:f5:47:f4:33:e1:c3:08:5a:9a:9d:e6:3b:
         15:a5:8a:e6:1e:a0:f0:c5:e9:6b:cf:95:c7:6c:b7:40:53:7f:
         75:ca:c0:12:d1:99:18:24:29:28:8d:40:ba:be:0a:f7:55:c2:
         30:cf:4b:c8:92:5d:da:6d:4e:11:7b:6f:72:81:0e:df:f6:ed:
         ab:6a:6d:2f:0d:61:e5:05:50:8a:cb:66:fc:77:c5:b3:2b:b5:
         12:9a:0a:8b:47:31:91:99:bc:31:b1:3c:9f:05:ce:2c:68:b1:
         30:a2:a5:62:7e:de:90:55:1b:f3:78:8c:fd:ce:2f:a0:37:9f:
         34:b4:39:a1:53:02:fc:33:8b:a6:9f:14:b3:ce:b5:b3:31:35:
         dd:e5:82:28:b4:be:e5:77:04:2e:2e:43:95:16:23:60:e5:f1:
         ad:2b:97:5b:cf:27:db:b6:86:cb:09:c9:14:02:de:92:a7:d8:
         84:be:f9:00:68:5b:42:50:65:8a:c6:c3:3f:9e:b1:61:39:46:
         22:82:83:aa:5a:55:3b:5d:21:76:bc:c2:a6:01:09:cf:ab:35:
         fc:2d:46:26:08:b4:1b:10:76:19:b8:28:36:36:cf:15:73:24:
         9b:6f:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:45:53 2026 by rpki-client