Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File:                     kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier:          0scb7AbWzLgrlpsx4jFz1OcPZ/i/cHi1Pc3RW2rBtIQ=
Subject key identifier:   00:BF:0E:80:40:19:DC:FD:38:71:E2:C5:07:00:40:65:23:76:C0:19
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer:       /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial:       0CFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number:          0CEB
Signing time:             Thu 24 Sep 2026 18:23:29 +0000
Manifest this update:     Thu 24 Sep 2026 18:23:29 +0000
Manifest next update:     Thu 01 Oct 2026 18:23:29 +0000
Files and hashes:         1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: P7uNDmYvta+CwUwC7cMDRourOzIdVpXebo0zGsG6aGM=)
                          2: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=)
                          3: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
                          rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3325 (0xcfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
        Validity
            Not Before: Sep 24 18:23:29 2026 GMT
            Not After : Oct  1 18:23:29 2026 GMT
        Subject: CN=6ab56aa1-07db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:4a:b1:54:f6:43:6e:f1:9a:6c:e6:de:d3:
                    11:7f:8c:59:3b:90:cc:1f:6c:41:85:de:cc:1a:7b:
                    7e:f7:17:f2:36:6e:85:31:a2:5c:f7:67:9f:7f:b0:
                    4e:ff:ab:9c:b1:a1:a2:36:cd:3d:b4:1c:7d:71:5c:
                    dd:a3:ce:a4:ea:86:31:5e:93:fe:95:95:51:74:83:
                    4c:19:95:d3:53:f9:9e:c8:c5:90:1b:c5:d5:1c:54:
                    5e:c2:76:eb:56:56:a2:7b:93:c6:94:a8:45:25:5f:
                    c8:61:27:84:2f:ec:97:7d:61:bd:7b:ec:80:68:31:
                    e1:e8:c3:4b:70:7d:ad:d1:b4:4c:12:c4:7b:2d:99:
                    f5:df:df:be:a8:d4:e1:82:04:42:65:5a:09:f3:03:
                    e3:d9:0a:c1:66:5e:86:e3:6e:bd:ca:20:4f:f9:cd:
                    1f:ee:11:bf:ef:5c:4d:ac:05:d3:c6:69:38:e9:fa:
                    48:90:cb:7c:b5:ef:3f:b7:46:9d:36:b8:db:12:e4:
                    83:4d:8c:06:cf:61:ef:85:0e:80:0a:8c:d2:d8:13:
                    2d:ff:57:75:a6:bc:c6:e2:81:62:09:eb:6f:44:39:
                    45:0e:5c:92:ac:d8:91:a0:67:bf:dd:ae:c4:02:28:
                    78:96:d3:9a:f5:5d:06:2c:bd:31:d0:28:70:bf:62:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BF:0E:80:40:19:DC:FD:38:71:E2:C5:07:00:40:65:23:76:C0:19
            X509v3 Authority Key Identifier:
                keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7a:c7:13:27:8f:62:19:35:e6:03:e3:42:ae:f9:00:1c:69:
         05:7d:71:8b:6a:f9:d5:85:0e:30:9a:a0:f8:fc:65:ce:16:2e:
         f2:c3:df:f8:13:03:7b:aa:04:15:3c:2d:d1:46:59:03:8d:37:
         27:79:c8:31:9e:93:de:33:2f:c3:1c:4c:90:a7:bf:83:08:ab:
         c6:d0:f9:b6:1e:28:d4:9e:f6:ca:87:01:b6:41:ec:ca:81:78:
         d2:65:32:06:13:c1:bb:89:b8:1b:e6:bb:c8:7d:34:a0:4e:d0:
         95:9c:e3:73:7b:7f:e9:a7:ed:e7:ce:a2:87:3c:7c:5b:22:cb:
         7f:bd:08:28:14:38:6c:f1:b2:90:b5:1f:a9:dd:14:a2:b3:3a:
         57:f0:16:c4:97:25:a2:d2:0e:31:f2:c9:c7:ee:df:80:4c:49:
         43:a3:72:a0:05:ca:af:47:b9:4d:1c:49:9e:25:77:b7:57:e1:
         4c:8a:1b:f1:c3:bd:e4:99:75:ed:f2:4a:d1:df:1f:19:65:68:
         5c:7e:63:cd:28:d5:bf:f1:bf:53:b9:c3:fd:d5:90:ad:7a:11:
         8f:8e:b1:ef:d2:fe:3e:3a:16:6a:e0:09:0d:45:7e:40:84:1a:
         1c:c4:86:91:71:ee:da:5c:cc:86:59:c1:48:2f:a2:f6:34:3b:
         eb:c4:59:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:37:57 2026 by rpki-client