Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
File:                     3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json)
Hash identifier:          uBKB30S7FK5YYNH+kqJc1C7ZGd8qyDLixDelO0e/vug=
Subject key identifier:   E7:1F:F9:A3:60:76:A4:5B:49:7B:B8:59:2F:24:6D:91:C2:D1:A3:40
Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
Certificate issuer:       /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
Manifest number:          0101
Signing time:             Fri 25 Sep 2026 06:16:26 +0000
Manifest this update:     Fri 25 Sep 2026 06:16:25 +0000
Manifest next update:     Fri 02 Oct 2026 06:16:25 +0000
Files and hashes:         1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: KrYGadzVAXvqDa3nbXylmlk7O2r0dVD4lbRfqv/I3nw=)
                          2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: DGdwfmJXcUZmyhZmIEATFGf53ujcTKbq+bFHiQ/LYS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
                          rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
        Validity
            Not Before: Sep 25 06:16:25 2026 GMT
            Not After : Oct  2 06:16:25 2026 GMT
        Subject: CN=6ab611ba-fbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:38:1a:f3:19:bf:a1:4c:3e:a7:53:89:9d:
                    9c:d1:4b:00:bb:fd:3e:7c:97:b1:8e:90:0e:c9:ef:
                    7a:62:9b:ac:0c:a7:3c:a8:29:90:25:c5:e8:87:54:
                    ba:64:93:14:cc:e6:ff:e1:1a:bc:0f:01:d9:74:9a:
                    4b:70:34:be:9e:19:2d:4b:61:93:01:b3:fa:60:8e:
                    2d:70:0b:fd:d2:5a:cb:d2:73:b7:aa:4e:2f:e1:6d:
                    69:b0:df:29:1b:7b:89:cb:be:10:16:3b:53:5c:02:
                    03:5e:c5:41:3f:8c:37:37:8e:9f:40:38:dc:b1:1b:
                    ce:8c:f0:27:db:e2:49:79:ea:d1:76:b3:03:e5:42:
                    4e:00:ff:38:d6:38:89:1c:ac:26:7e:fe:dc:78:97:
                    6b:b4:9b:70:4e:27:9f:2e:bb:f5:0d:28:59:02:96:
                    df:04:d2:6e:68:be:f8:22:71:89:c9:e3:9e:d3:b2:
                    87:e3:33:8a:70:47:5c:34:fa:d1:b3:bb:6b:25:48:
                    22:4b:9c:4f:6a:b7:f0:09:61:ba:26:e4:d0:bc:b9:
                    c1:5e:e7:59:2b:ff:1a:f3:4a:90:a9:4c:1e:ff:94:
                    d6:40:10:73:e8:a5:88:c8:73:8a:27:6c:5c:c6:03:
                    07:c1:6d:14:4b:ac:63:2f:31:db:75:85:6d:b2:e2:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1F:F9:A3:60:76:A4:5B:49:7B:B8:59:2F:24:6D:91:C2:D1:A3:40
            X509v3 Authority Key Identifier:
                keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:0c:1e:a8:f8:1c:ab:28:8a:51:73:45:ad:d9:17:ef:b4:20:
         4a:8e:f7:a2:e3:37:78:35:10:0b:82:0a:2c:53:8b:ca:5b:95:
         61:4a:9d:1b:52:0e:e7:32:b2:70:80:00:ed:49:5f:c8:04:e5:
         71:58:94:b4:7d:2f:af:6f:f3:b1:5f:b3:bc:0d:91:8f:75:c2:
         2f:a1:f2:e4:1b:e1:f9:3a:eb:8a:4e:0f:61:ee:82:45:50:ee:
         be:94:a9:91:28:2c:bc:e9:c9:a3:5d:9c:9f:50:9b:c7:77:54:
         5e:10:24:fc:1f:35:af:19:91:69:86:da:58:6a:e6:2d:1f:16:
         03:ca:c0:ba:f2:cb:4f:08:e6:e7:bb:7c:07:d9:08:77:98:6c:
         9a:af:e6:10:a0:d1:ea:d0:f2:c1:f5:c6:ed:9a:b3:67:75:6e:
         33:65:46:f2:f6:59:98:84:28:a5:4e:cf:27:21:b4:fa:9b:0a:
         c2:a0:0b:30:5f:33:00:9a:1f:96:1f:bc:8a:29:05:1f:03:57:
         fe:33:1a:ed:f1:1a:9d:f8:7c:9f:e9:d1:e0:15:08:94:83:7f:
         bc:47:07:2b:ef:f2:ff:50:46:d1:dc:cc:1f:43:1d:4b:27:5f:
         e7:a0:38:23:d5:78:bc:46:6a:a7:b4:c1:b7:59:a2:07:0a:be:
         63:00:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:55:41 2026 by rpki-client