Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
File:                     OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json)
Hash identifier:          QeD0BZOYPDqHzBRehch7axsGV0RiO9ewd5xcbzHwlbk=
Subject key identifier:   66:AC:66:02:E0:E8:E1:FB:30:09:22:7B:EA:6E:61:C2:4A:02:54:FC
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Certificate issuer:       /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial:       271E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
Manifest number:          270A
Signing time:             Mon 28 Sep 2026 15:40:45 +0000
Manifest this update:     Mon 28 Sep 2026 15:40:45 +0000
Manifest next update:     Mon 05 Oct 2026 15:40:45 +0000
Files and hashes:         1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: kI8nCs/9o9mCbLffRrOje4lkLQPYkS97+JfhK+LqAU0=)
                          2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: zCSyGsYCYzFeYmRqymAlfv0PUooJcKVA3RkycjZyUFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
                          rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 15:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10014 (0x271e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
        Validity
            Not Before: Sep 28 15:40:45 2026 GMT
            Not After : Oct  5 15:40:45 2026 GMT
        Subject: CN=6aba8a7d-e9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:b5:e9:9e:bd:2e:66:c7:93:d6:2c:96:3e:
                    64:da:11:d9:9a:ef:7c:a9:5d:be:4c:ff:14:1e:f3:
                    6d:8a:9a:67:b3:73:16:2f:0d:53:aa:a6:1b:5c:cd:
                    03:87:86:de:89:21:8b:0f:bd:b8:1e:9f:93:bf:ba:
                    15:ca:ff:48:06:fd:8c:e8:b9:90:c4:3e:6a:16:5c:
                    dd:4c:1b:36:7c:87:ab:55:29:ca:18:18:37:0a:e7:
                    86:24:c9:4d:ae:c4:23:ac:3a:47:1f:4b:d8:47:3c:
                    5f:04:49:17:b4:0d:c4:9c:ce:d9:df:b9:04:97:94:
                    dd:01:9a:71:d1:4a:2e:89:25:55:55:fd:ba:a2:54:
                    9d:bc:81:8f:97:e4:75:fa:b8:bb:b7:3e:04:19:0a:
                    46:dc:6f:26:ac:8c:48:40:d9:93:de:5a:ec:cf:a9:
                    75:c7:76:f3:9d:10:3b:71:82:5a:e3:3e:00:60:1d:
                    99:44:b9:56:1e:53:4b:d3:c8:55:d3:cc:8c:f1:ef:
                    0d:20:8f:0c:30:df:0f:e3:c3:89:96:72:bb:08:20:
                    af:d8:dd:4a:96:b1:e1:8d:a5:46:c9:62:1e:18:b8:
                    ab:40:b6:94:4a:ee:39:a1:f7:42:8b:55:a4:78:a5:
                    91:47:d6:ae:ae:01:0a:e7:7a:dc:a5:b2:94:02:76:
                    2b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AC:66:02:E0:E8:E1:FB:30:09:22:7B:EA:6E:61:C2:4A:02:54:FC
            X509v3 Authority Key Identifier:
                keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:71:ec:88:5d:03:6e:d7:a2:b4:af:a2:10:9c:f9:19:38:7f:
         15:56:65:0c:3b:bc:96:2e:6f:36:82:8e:7e:84:f0:a6:39:49:
         77:bf:3a:bf:61:95:eb:3f:02:f4:51:07:9d:90:73:56:73:ba:
         cf:6c:c0:8d:6d:97:af:b2:eb:29:a8:b1:cf:12:53:02:8b:19:
         1d:04:64:cc:85:35:14:cb:44:89:c2:8a:2d:8a:5d:72:90:30:
         6e:e8:71:ba:2f:45:4f:fd:c6:bb:8a:44:88:24:27:0d:be:80:
         5e:a0:b5:7b:73:2e:46:89:f2:16:6e:11:47:f5:ef:77:be:d5:
         78:f9:cb:95:ea:78:43:de:b1:3a:00:e0:06:dd:71:86:81:a6:
         95:83:7b:7c:54:ec:e4:9d:5f:85:ed:77:77:ac:5d:4d:30:36:
         8a:52:01:bf:29:6a:37:d6:70:12:21:83:2f:98:db:fa:ba:c4:
         42:86:17:f4:e8:7a:26:94:63:b8:56:f8:99:22:ab:cd:44:9b:
         01:3a:72:bb:6a:07:1d:77:27:d7:70:64:f6:65:63:9f:33:71:
         dc:cc:97:00:85:76:d5:ba:1e:a7:9d:da:2d:3f:ea:ed:07:64:
         3c:83:e4:97:dc:bb:26:db:05:1d:4e:64:78:c7:61:a4:0c:45:
         ee:f9:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:22:28 2026 by rpki-client