Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
File:                     oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json)
Hash identifier:          qF/EePqVyQNMPLTDRpIg4H2Gjt71qcRPDbwSA5q0GIw=
Subject key identifier:   59:18:F2:10:52:2B:2E:B1:BC:DE:3E:2B:A1:65:BF:B3:7E:EE:91:1D
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Certificate issuer:       /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
Manifest number:          0103
Signing time:             Wed 23 Sep 2026 05:56:51 +0000
Manifest this update:     Wed 23 Sep 2026 05:56:50 +0000
Manifest next update:     Wed 30 Sep 2026 05:56:50 +0000
Files and hashes:         1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: Ox6jga4eKTwSavyol0BJNH0MX7lAWza+dWq/JkAJMRA=)
                          2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: Q6hGObTtAZVZ1hsWC5VBV1zlub8rHOzpBaXMIZTV03s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
                          rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
        Validity
            Not Before: Sep 23 05:56:50 2026 GMT
            Not After : Sep 30 05:56:50 2026 GMT
        Subject: CN=6ab36a23-70ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4a:1f:39:61:09:ec:ad:60:f0:c8:0b:d4:fe:
                    72:ac:13:42:5e:13:f9:ac:53:37:1c:09:f1:c7:d9:
                    a8:9a:54:37:80:34:df:46:1e:b7:63:f0:39:cb:62:
                    48:1b:aa:b7:42:41:3c:78:db:f8:2e:4f:c5:82:4e:
                    5f:5f:62:ad:39:b7:2b:0c:50:46:53:e1:dd:15:3e:
                    43:5f:04:b5:a0:3e:88:17:1b:68:14:71:1b:e4:3d:
                    1e:e9:14:99:53:da:35:d2:14:14:51:76:35:fc:35:
                    31:26:42:e7:c2:06:12:b9:a0:b1:c8:a3:61:8a:39:
                    9b:e0:1d:e9:29:f6:f0:38:70:c6:d9:34:0f:b4:5d:
                    d4:8d:f1:62:71:6e:3b:19:d5:58:dc:1d:a4:0b:e0:
                    42:e9:dc:96:55:42:65:47:db:b8:33:fb:88:75:2f:
                    43:c6:6e:16:a9:e3:61:f9:4e:e3:40:3c:03:71:3d:
                    8b:90:25:63:ea:c5:f7:63:ef:0a:f6:b2:1c:8c:94:
                    2f:8a:7d:70:90:f7:d6:e1:f9:67:19:5c:9c:2f:eb:
                    4f:58:fc:53:92:e8:b1:53:de:66:2b:21:6d:63:99:
                    33:e5:54:58:f3:c0:ec:2a:1b:1f:2a:29:ce:52:e1:
                    87:a6:35:6a:cd:5a:8f:7e:30:fd:00:a5:52:21:fe:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:18:F2:10:52:2B:2E:B1:BC:DE:3E:2B:A1:65:BF:B3:7E:EE:91:1D
            X509v3 Authority Key Identifier:
                keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d8:27:00:c5:a2:fe:63:f8:f0:94:e9:48:40:7f:78:4a:7d:
         08:cd:29:43:44:d0:51:3c:1b:c6:7f:60:6e:8b:35:e7:ae:78:
         c9:a0:3c:fc:72:a4:31:88:ec:67:58:07:b0:d5:d9:a0:9f:ef:
         40:85:f3:13:17:d9:54:4f:6e:5e:19:c1:d0:ca:06:f5:5f:8e:
         61:0f:9f:da:d8:b0:3f:81:59:7e:6b:0c:ec:9e:f5:0f:27:c1:
         92:e3:b9:33:53:75:73:a9:6b:21:56:68:01:40:8d:1f:cd:90:
         0c:84:32:d4:2c:33:fc:a7:fa:3d:8d:02:e9:d7:53:cb:77:8c:
         3e:a4:24:e6:4f:48:4b:90:b2:8a:52:70:d7:a2:a7:6b:40:0a:
         22:4f:38:32:d4:82:40:3c:21:ce:a5:64:89:54:6d:65:e8:a0:
         30:5a:91:a8:6c:5a:67:f2:5a:02:0a:92:02:3f:c2:c9:f2:c0:
         30:eb:f7:0b:0c:2e:f0:10:d9:4d:de:a2:71:7b:34:9f:e5:43:
         0d:33:b8:cb:76:0b:bf:bb:21:ef:3a:6e:f6:ff:e0:1e:49:e0:
         95:d2:7f:57:a7:7a:4a:a7:f1:14:a4:05:aa:ff:be:f3:29:53:
         6d:d8:bd:ed:be:0d:a6:d7:a5:dd:b9:5e:44:3f:2d:39:88:cc:
         ba:84:88:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:07:17 2026 by rpki-client