Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
File:                     OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json)
Hash identifier:          kohxKiZd7jewNwuQtslieTlkWo61jR6hgvVoxESM+Yo=
Subject key identifier:   57:B9:23:60:94:FC:67:93:AB:A1:44:F5:C5:DF:DC:AA:E0:59:64:1A
Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
Certificate issuer:       /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
Manifest number:          01C4
Signing time:             Sun 27 Sep 2026 04:13:12 +0000
Manifest this update:     Sun 27 Sep 2026 04:13:11 +0000
Manifest next update:     Sun 04 Oct 2026 04:13:11 +0000
Files and hashes:         1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: lsntKHujKytKXljQTTCn/VtjkUeFGIhu+Xhs94IGN/s=)
                          2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: SI7mhqO9YrvFB2/bZ7mj3acc/KGSgDSJ8dlCBs4REbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
                          rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847C2, serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
        Validity
            Not Before: Sep 27 04:13:11 2026 GMT
            Not After : Oct  4 04:13:11 2026 GMT
        Subject: CN=6ab897d8-6e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:3c:b3:08:91:fb:c9:20:99:06:6b:e4:8c:
                    94:a9:44:2e:5d:61:96:40:bf:85:f6:20:00:38:ae:
                    67:4d:bd:ca:d7:f5:73:89:90:61:f2:59:e7:ea:95:
                    72:86:b5:ab:2c:a5:21:7e:c4:89:16:43:43:c5:9c:
                    bb:bb:bd:7b:e8:d9:76:50:11:5d:68:47:cc:1b:a1:
                    28:9f:d5:8b:6d:43:62:d5:43:3a:fb:2c:c2:87:f2:
                    6a:2a:18:95:01:5e:dd:a0:97:94:af:b8:90:d5:49:
                    27:71:22:82:55:d4:8e:f2:6a:78:a8:c4:0f:9c:21:
                    31:67:58:3c:ff:c0:cb:c6:e0:8d:ad:b8:cb:20:44:
                    9a:14:79:41:b8:7a:59:57:f8:a9:eb:a2:88:a0:76:
                    fe:88:9d:c7:14:27:06:15:c8:ff:bc:61:97:16:ea:
                    37:d3:b5:eb:33:bc:73:67:88:a3:fa:03:c3:ed:5c:
                    8a:4a:d7:d5:a4:f7:cd:c2:80:bb:5e:b4:d9:57:ac:
                    ef:8d:c3:a9:3f:86:10:e5:e2:b6:32:50:01:ef:a4:
                    06:6d:01:23:d5:94:f4:85:08:17:6b:b7:ec:ca:e3:
                    1f:c0:7e:27:89:c1:a8:a3:34:d5:c1:0d:61:d7:4d:
                    dd:27:16:dc:b0:14:37:04:65:f5:87:85:e3:9c:e0:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B9:23:60:94:FC:67:93:AB:A1:44:F5:C5:DF:DC:AA:E0:59:64:1A
            X509v3 Authority Key Identifier:
                keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:53:aa:aa:cf:be:a7:d3:e5:77:aa:7f:ca:57:b6:2b:bc:
         1a:62:62:fc:f9:5b:0a:c2:1f:8f:b1:c6:7b:aa:d5:35:60:ea:
         8d:03:57:3d:dc:ca:b0:d9:52:22:d3:80:10:a3:4f:d3:1b:92:
         e5:5a:f3:5f:7e:93:bb:e2:b5:5c:46:50:7f:88:2c:c8:c4:74:
         f3:dc:9a:b7:7a:03:71:11:1c:a7:a6:9e:ee:73:aa:57:47:96:
         74:55:42:01:de:6a:11:73:f2:1f:74:cf:20:25:8f:3f:f6:f4:
         d9:2e:98:93:dc:f6:de:00:82:cc:05:26:de:17:e7:f0:d9:b6:
         bc:cb:9b:cd:db:ec:d6:ec:ad:89:95:97:37:26:43:1f:f5:1d:
         9d:af:94:27:98:e5:e2:9e:fc:80:0f:c1:76:56:20:03:53:bb:
         cc:0c:35:bd:a5:2d:53:bb:cc:55:e6:f3:6c:c7:28:85:b8:60:
         7c:b9:0f:11:ad:2a:15:24:28:34:02:45:69:0b:31:0f:ab:d4:
         f7:63:5d:e8:be:b9:08:51:b6:7a:cf:76:8d:ce:8d:42:7d:05:
         f1:d8:ec:17:ef:a7:06:f9:a0:3c:dc:fc:d2:e3:b0:2d:48:e6:
         42:34:a2:46:73:c1:35:f4:25:f6:e9:72:f4:a0:fc:44:a6:e6:
         ed:17:b8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:03:45 2026 by rpki-client