Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File:                     os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier:          AlKhPB3y0Tr9+px2fEw3dJjLtmQy8COdjxSRWDAKulA=
Subject key identifier:   43:E5:FF:44:55:C1:60:A0:29:78:1F:77:55:11:5B:DA:63:67:41:E8
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer:       /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial:       024D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number:          0244
Signing time:             Fri 25 Sep 2026 02:38:46 +0000
Manifest this update:     Fri 25 Sep 2026 02:38:45 +0000
Manifest next update:     Fri 02 Oct 2026 02:38:45 +0000
Files and hashes:         1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: fYexpnxeuPOez6ITdYk3k67FvYE1iCRAeZM6xprJ72c=)
                          2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: jt/Em4DLUT3Wo1hryGzSXiSThIZtCbpBQGAGGsyRT4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
                          rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
        Validity
            Not Before: Sep 25 02:38:45 2026 GMT
            Not After : Oct  2 02:38:45 2026 GMT
        Subject: CN=6ab5deb5-78b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:e5:07:b3:1b:95:e8:70:cb:72:03:e9:e6:
                    24:bc:b2:c0:66:ef:52:98:5d:40:0d:22:22:25:9c:
                    15:0b:89:99:73:82:ca:65:9b:19:09:4f:1f:ce:3d:
                    3e:8a:c5:99:91:58:38:66:10:92:6a:bd:1b:46:cd:
                    14:50:76:e3:0c:02:78:c2:64:cf:3c:a0:04:6d:6e:
                    d2:5e:5b:a2:5b:93:fc:bf:72:99:d0:47:59:7e:e0:
                    2d:1e:9a:ed:83:88:39:e9:a7:3f:a1:a2:2b:59:f3:
                    ce:00:a2:83:f7:8e:d7:41:f2:f5:4e:75:f0:60:22:
                    c5:c9:ed:e9:71:50:64:ca:98:02:77:e1:db:ad:6e:
                    b0:41:73:ca:a4:d3:b9:3b:f1:a8:66:aa:bb:32:57:
                    85:22:ca:94:2d:b1:1e:5c:11:90:bd:11:5b:8a:fb:
                    9b:f3:e5:d6:97:a9:a6:b4:c7:05:46:06:b2:c1:ae:
                    d3:1b:36:99:0b:ee:3e:67:7b:3e:ac:b0:8f:0d:3f:
                    b9:ca:87:c8:ec:c9:b5:1d:a5:ce:d3:28:ae:0d:db:
                    ed:e5:5d:85:17:8c:0d:9b:d1:8c:c0:22:ee:1e:bd:
                    47:0f:38:c4:d9:93:1a:19:0e:50:d3:23:5c:6b:bc:
                    cd:c4:ba:ea:90:8d:75:32:0a:01:c7:e6:41:e9:12:
                    19:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E5:FF:44:55:C1:60:A0:29:78:1F:77:55:11:5B:DA:63:67:41:E8
            X509v3 Authority Key Identifier:
                keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:50:de:e7:29:98:db:91:07:18:bb:ae:29:fd:75:0f:91:a4:
         6c:94:02:ba:dc:f5:d3:af:59:11:1f:84:21:23:14:de:0a:8c:
         fd:c6:af:a8:3c:85:35:59:1e:f8:52:3e:46:d4:8a:23:92:78:
         1a:59:de:f5:f6:f9:5a:af:ce:1c:50:95:32:a9:14:67:35:c4:
         40:19:5d:b5:46:7b:89:bd:82:d0:4f:ef:11:03:a0:38:0b:08:
         3c:3f:b5:4a:72:67:a0:0d:aa:e5:02:af:36:5b:18:63:0d:42:
         3c:b1:5b:b2:06:27:ec:ff:2e:29:27:ce:1b:01:7a:bd:71:26:
         84:02:4e:ef:d7:c6:c4:17:48:44:19:14:58:6a:8d:3f:b2:5a:
         e7:3d:e8:34:51:2c:91:f9:4e:a5:3c:ae:81:aa:56:a1:0f:5d:
         10:9b:ea:b6:8d:57:f0:6e:b6:5c:91:2d:84:e2:4e:2a:70:a5:
         e7:68:70:75:6e:5b:61:e4:12:c4:67:1c:10:bd:2b:a6:da:48:
         00:8f:28:6a:42:db:76:38:3c:10:39:90:5e:06:ce:c7:ba:6a:
         00:67:b6:93:7a:5b:ba:7b:62:27:f3:72:36:a6:c3:bf:42:b6:
         22:83:56:53:e4:af:df:8b:6b:cb:08:ca:87:5e:3f:8e:c6:86:
         fd:d9:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:48:18 2026 by rpki-client