Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
File:                     oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft (raw, json)
Hash identifier:          Vk/yQ8rclSyU2t0oTAwOdTaw02v8K649Y/vWwn1s2CQ=
Subject key identifier:   D8:2B:59:EF:51:2A:9E:0A:7F:65:C0:9B:55:C9:DE:1D:1D:F8:47:DA
Authority key identifier: A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F
Certificate issuer:       /CN=A9159558/serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
Manifest number:          50
Signing time:             Tue 29 Sep 2026 08:54:22 +0000
Manifest this update:     Tue 29 Sep 2026 08:54:21 +0000
Manifest next update:     Tue 06 Oct 2026 08:54:21 +0000
Files and hashes:         1: oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl (hash: DAL+I8+YEqTyJQxcv9Da4APkPguWyy11Z+ysiiEkGVs=)
                          2: C8482E4C435C11F18454B6E5B6833773.roa (hash: kpOLgyl4KEGTvF971USy71Gh3dYWWDj9RJbZtYOEjJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl
                          rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159558, serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
        Validity
            Not Before: Sep 29 08:54:21 2026 GMT
            Not After : Oct  6 08:54:21 2026 GMT
        Subject: CN=6abb7cbd-6bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ad:1a:95:06:84:f6:cb:57:eb:a3:2d:b8:ee:
                    21:84:ae:97:36:b4:62:7c:be:91:e8:8b:60:17:02:
                    9f:1d:69:8a:16:80:47:1b:77:29:16:53:31:09:c4:
                    40:83:10:2b:8e:08:c3:af:ed:ae:bb:5c:60:86:95:
                    9c:1e:be:47:9e:00:3f:70:91:89:62:d1:9d:b0:f5:
                    15:60:d3:07:62:9b:a0:f1:2c:a5:79:53:c7:ad:ac:
                    cb:f7:93:01:1b:d8:98:3f:cb:bb:8e:af:a6:f8:17:
                    30:46:3f:95:2a:dd:56:cf:9f:64:d6:8d:b9:cd:b9:
                    ce:b1:fe:6d:ed:3e:c9:e1:b6:95:a5:62:10:35:52:
                    db:dc:20:58:e1:22:11:28:2b:bc:0b:a1:61:62:0c:
                    f4:f8:92:a6:13:6c:bb:31:eb:ec:92:3f:4f:c7:02:
                    04:ac:3c:61:14:0f:63:b3:ee:2e:32:ec:4f:27:e8:
                    c8:07:8d:95:ea:35:3a:7d:e0:56:2e:b9:b3:e5:3b:
                    7b:8f:f9:12:89:f8:e2:2c:80:d1:b6:80:17:71:1a:
                    06:e9:e8:14:0c:63:ba:77:b2:14:c0:5a:7c:99:3e:
                    b8:4b:4a:ac:94:b1:66:b1:ea:f7:0d:30:d0:e6:13:
                    58:5c:66:de:14:3f:0c:a6:56:bc:69:67:66:d2:e3:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2B:59:EF:51:2A:9E:0A:7F:65:C0:9B:55:C9:DE:1D:1D:F8:47:DA
            X509v3 Authority Key Identifier:
                keyid:A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4a:86:13:34:8c:dc:8d:07:e3:2a:18:6f:6b:d1:2e:db:c6:
         da:e4:4a:1c:d1:30:98:5b:8e:55:21:99:6a:22:ab:06:01:f9:
         e9:32:6d:a4:54:60:62:14:e3:ed:3c:a9:f2:2b:35:b5:bd:b1:
         88:d8:2a:9c:1e:6a:23:75:f0:11:81:98:37:83:88:ae:42:03:
         24:08:d5:5d:1b:b2:a0:c4:e9:87:3e:aa:ca:3b:8c:eb:26:aa:
         53:5e:78:a3:88:70:f9:70:8d:2a:07:2e:22:07:85:9e:b0:c2:
         bf:a2:2f:23:cb:9e:03:c9:8e:a1:5e:e3:c6:76:38:d7:8c:35:
         1d:47:dd:19:e3:3b:e6:57:60:a1:76:9f:53:b0:17:f3:2e:ea:
         29:94:82:27:8a:c5:3b:75:28:34:f3:54:86:65:2d:a2:40:04:
         5c:fc:4d:a1:da:77:8e:93:67:50:ce:b5:00:c3:dd:6b:b3:7a:
         5f:2d:d3:91:58:07:db:29:4a:b3:48:a9:0b:a4:45:af:83:3b:
         8d:8b:ad:7a:87:3d:79:8c:50:19:0d:6b:8e:50:85:08:a8:99:
         81:c3:88:67:06:80:0d:26:b9:90:11:d9:9d:f7:53:28:74:76:
         f2:10:18:97:f9:2c:fa:11:4c:00:37:fa:4d:c3:5d:6f:aa:f2:
         b4:70:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:27:11 2026 by rpki-client