Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
File:                     OWpdnmemeQypf7kxMEtE57CoIc8.mft (raw, json)
Hash identifier:          QJAEa3CakiNJkhoSwVmTJq/kgPPrdUgsuF2GNHBDfSg=
Subject key identifier:   A0:D8:71:0F:31:5F:8B:7E:E1:34:EB:3C:36:78:80:D8:8A:EA:68:8C
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Certificate issuer:       /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial:       09DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
Manifest number:          09CF
Signing time:             Thu 24 Sep 2026 19:50:48 +0000
Manifest this update:     Thu 24 Sep 2026 19:50:47 +0000
Manifest next update:     Thu 01 Oct 2026 19:50:47 +0000
Files and hashes:         1: OWpdnmemeQypf7kxMEtE57CoIc8.crl (hash: z66OS6KlDKa1pIxhlrcunkn3DCNPpqIs6fYkobolULc=)
                          2: 442D6434B14411EAB852C134C4F9AE02.roa (hash: TvEhAV2QCoIeXvQJ2617nW2DTbRWH0ubI6BgOQc1JDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
                          rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2526 (0x9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
        Validity
            Not Before: Sep 24 19:50:47 2026 GMT
            Not After : Oct  1 19:50:47 2026 GMT
        Subject: CN=6ab57f18-f736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:13:76:ef:27:66:23:f4:e3:71:48:78:38:
                    54:21:7d:85:57:2b:67:f1:f1:05:7b:cb:11:1b:bf:
                    4b:d1:72:64:87:b9:28:d9:24:d6:4d:59:5c:f5:13:
                    63:f2:df:58:d8:9f:8d:04:7e:b3:41:16:d3:05:55:
                    d3:d6:35:29:d7:68:b3:41:84:11:8c:fc:4d:2c:c1:
                    f7:0d:fb:eb:c7:b3:ef:6d:73:1b:fb:6e:f6:77:d0:
                    b5:04:1f:86:4a:ed:80:07:08:58:5d:3b:61:bd:bc:
                    35:9d:1e:97:08:f5:df:bc:c9:dd:ad:5c:c9:f8:7e:
                    57:f9:da:a4:7d:39:6a:32:ec:de:b2:22:5e:24:eb:
                    08:5d:7a:7a:4d:c7:52:9c:8b:13:ba:ea:75:7a:fd:
                    92:ab:de:d3:f4:f2:31:7e:a0:5a:4e:7e:63:1a:7c:
                    22:bd:3c:3c:ab:54:53:67:b4:7c:71:7b:57:39:be:
                    ee:c5:1a:dd:15:ca:13:65:5c:49:60:6b:c3:13:5c:
                    6f:fe:3e:00:3f:13:f6:ca:9e:1e:89:7d:33:21:b4:
                    c0:a5:36:1b:1f:00:9d:34:d0:21:22:fd:d7:23:d0:
                    54:3b:64:02:bd:7a:ed:9a:dd:6c:79:50:c9:54:51:
                    1b:b2:38:f9:9a:fb:bb:18:b7:89:b2:78:4d:2b:bd:
                    32:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D8:71:0F:31:5F:8B:7E:E1:34:EB:3C:36:78:80:D8:8A:EA:68:8C
            X509v3 Authority Key Identifier:
                keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9b:67:ba:57:ef:46:6d:0b:4a:5b:97:6f:62:55:bb:eb:d9:
         3a:0c:37:54:f2:12:1a:cb:84:22:eb:bf:b9:96:5b:3d:d4:54:
         1f:c0:d0:29:ff:79:27:2e:9a:96:c9:5e:7d:6f:0f:6c:ab:10:
         4e:e9:62:2b:ae:1c:1c:39:18:96:bf:96:ee:28:18:7b:04:b8:
         94:d6:fa:3f:52:81:65:dd:7b:73:2c:89:1e:5b:b1:ca:50:6f:
         c0:73:a2:09:4d:59:88:d6:74:95:91:24:a8:f8:f5:9f:da:70:
         dd:6f:c6:0a:a1:99:51:d2:39:26:ed:fb:11:68:c8:33:57:9b:
         d1:31:de:c6:ef:23:29:33:0c:8c:6c:20:9a:d9:84:08:ee:f7:
         0b:1f:ef:0f:c6:7d:67:39:7a:25:6a:df:b4:0e:62:12:20:25:
         3f:35:5f:ce:19:8c:82:4f:70:04:ee:df:9c:01:9b:b9:30:45:
         d4:cb:a9:32:9a:e4:bf:be:2f:7e:90:4a:33:dd:25:72:86:4f:
         79:38:e3:42:d5:24:5a:5d:e3:ac:0b:2c:00:9a:92:e6:9c:f0:
         b2:72:6c:9a:5a:4b:1c:e8:d6:61:eb:64:1f:d6:9e:5e:e9:39:
         0e:18:83:eb:4b:40:52:e2:02:5a:83:b4:85:10:cd:76:a9:17:
         a5:b3:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:42:01 2026 by rpki-client