Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
File:                     OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json)
Hash identifier:          wE7ZUAmfp9iJssbHQ/FRBEb50B9w23if8NKPQQ5aLg0=
Subject key identifier:   E1:4C:2D:3F:CC:AD:77:56:BE:A5:78:80:CE:57:43:F2:CD:8D:50:BE
Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
Certificate issuer:       /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Certificate serial:       0733
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
Manifest number:          0729
Signing time:             Tue 22 Sep 2026 21:45:08 +0000
Manifest this update:     Tue 22 Sep 2026 21:45:08 +0000
Manifest next update:     Tue 29 Sep 2026 21:45:08 +0000
Files and hashes:         1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: vP0VC7e23MNMY6Ah9auxVGORO4C8VlIFqPkFvKR/PRI=)
                          2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: q9bgMvnK3qUP2zl56LJjuP84FOdbbmO6f4ywuRFK3m0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
                          rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
        Validity
            Not Before: Sep 22 21:45:08 2026 GMT
            Not After : Sep 29 21:45:08 2026 GMT
        Subject: CN=6ab2f6e4-34d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:57:0f:9b:0e:3a:bd:94:00:10:53:8a:e5:
                    a2:da:90:46:e1:5b:e0:1c:48:36:31:eb:8f:2b:6b:
                    76:1f:6f:d9:a1:2f:24:24:87:5c:15:ef:d9:14:7d:
                    db:81:36:6c:64:23:cf:21:02:d0:5f:72:5e:07:fd:
                    ab:e7:39:71:63:fc:57:e6:fa:ae:a2:ab:07:c4:ba:
                    0f:4f:a6:8f:34:86:bc:14:ce:a8:d6:b6:90:be:62:
                    73:21:3f:30:ad:e8:5a:d6:1c:97:bd:b2:14:61:55:
                    19:a8:3c:86:2f:ff:1b:cd:e2:30:1d:70:0d:51:76:
                    d0:93:cf:f6:45:1f:d2:a5:7f:d8:1b:a7:47:3f:40:
                    0f:dc:5d:f4:2d:ad:4c:1f:01:a1:e8:bd:7e:14:e9:
                    ea:f7:fe:da:77:62:98:08:5d:44:ea:70:62:a6:a7:
                    5b:a4:9e:76:b5:34:41:42:9d:ad:1a:df:f3:71:4d:
                    68:27:b9:3e:fb:c5:82:2e:16:04:11:f9:9c:30:3c:
                    92:c4:ce:27:15:ae:21:ec:20:65:99:5d:79:98:67:
                    fb:0c:c9:be:87:3d:63:fb:a5:fa:58:51:b4:8d:59:
                    1d:14:8a:b1:6c:a0:02:a6:8b:31:a2:c1:d2:06:0a:
                    23:fb:2c:7a:f7:c1:50:d5:34:d6:49:1f:4e:0c:4a:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4C:2D:3F:CC:AD:77:56:BE:A5:78:80:CE:57:43:F2:CD:8D:50:BE
            X509v3 Authority Key Identifier:
                keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d4:e5:93:c1:ba:ff:b8:84:3e:17:e5:ca:df:0a:1e:ea:2c:
         7d:57:e7:2b:69:87:b0:72:fb:3f:0d:1b:b7:e3:e7:34:05:e2:
         ba:09:72:de:03:0d:8b:93:b4:eb:7c:55:89:35:71:d9:b7:99:
         80:4a:a8:8f:fd:6d:f1:47:ba:e4:79:a5:e5:94:fd:dc:31:bc:
         10:27:b0:5c:a2:9f:da:86:5f:2d:5e:0b:9a:6b:1d:8f:98:8a:
         39:e8:25:8e:bc:2d:cb:95:42:14:2c:11:57:b8:57:c0:7a:88:
         4a:6c:79:c7:16:d9:b0:b9:b2:ec:d5:5e:70:0a:70:8a:a7:82:
         84:77:95:2d:4b:41:dc:a5:a2:09:fd:ae:77:fc:28:bf:ba:0a:
         56:82:2e:d6:15:89:2a:41:1f:5c:11:71:34:96:ef:0a:01:44:
         27:67:97:c4:88:91:9a:10:31:32:ce:94:f2:93:4d:ef:e6:09:
         09:d7:c4:6d:58:95:81:7d:44:1c:1b:d2:9a:93:67:38:9a:eb:
         6b:7d:37:9a:98:d4:a6:4a:59:2f:02:d4:d9:dc:8d:56:12:be:
         99:9a:85:91:0f:74:48:61:77:27:b8:ab:a7:a3:4a:83:47:f0:
         e3:aa:45:bf:3b:cf:3c:0b:df:76:24:39:c1:37:8b:eb:07:79:
         97:2f:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:27:34 2026 by rpki-client