Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
File:                     Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json)
Hash identifier:          ynC4BjjNFk9p7qVKkaclmH5xOPWoJm+D3AKmj5wl0Ss=
Subject key identifier:   E7:63:AD:7B:5C:2D:71:E1:2A:B5:76:37:0F:FA:F6:7C:DD:4F:09:B7
Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61
Certificate issuer:       /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
Certificate serial:       380B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
Manifest number:          36DD
Signing time:             Tue 22 Sep 2026 14:24:35 +0000
Manifest this update:     Tue 22 Sep 2026 14:24:34 +0000
Manifest next update:     Tue 29 Sep 2026 14:24:34 +0000
Files and hashes:         1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: hcdKTUZj/n42lAtwN4dqGSuVlU0+djsQHBOel5zJw/8=)
                          2: rQSAPyGUXtGkb8Ui1URzc0kbX3M.asa (hash: e5gGUoXTbgO3Bqx/dg2NaRASCiNn+/PB5Y+WJNAkgGg=)
                          3: DDBF75E8AC0F11F18FA02B357011F970.roa (hash: XkgCJ50UlAocEgPti+/VSXFYIwUrWzt3O9MV4EIAwHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl
                          rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14347 (0x380b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CED, serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
        Validity
            Not Before: Sep 22 14:24:34 2026 GMT
            Not After : Sep 29 14:24:34 2026 GMT
        Subject: CN=6ab28fa3-67f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:31:aa:63:14:2b:0e:5f:8d:e5:58:18:5a:
                    05:07:86:6e:d3:b5:35:6d:c5:58:de:24:90:28:26:
                    df:65:b6:c9:3f:df:74:8a:6a:db:cf:b9:f9:5c:95:
                    9e:ad:e1:d4:cf:3d:de:e1:5d:aa:07:7e:75:92:1a:
                    15:72:c2:73:a4:2f:c8:d1:36:04:49:1f:10:8e:c1:
                    48:92:cc:a7:ef:b9:82:2c:a0:2f:26:e4:93:f6:f7:
                    ee:3d:dd:79:f2:fd:98:7e:e6:20:ad:a6:31:9e:f4:
                    3a:49:4a:e2:ea:1f:90:b2:66:af:c4:8c:01:9d:6d:
                    1c:ed:a5:f4:92:14:b3:aa:84:06:41:78:18:69:28:
                    93:ed:ec:d7:84:3d:07:40:75:c7:ca:2d:eb:93:e8:
                    ba:b1:0b:02:cc:3e:9c:e7:ac:40:57:5a:f3:10:59:
                    ea:a7:de:2b:33:3a:0d:80:5d:55:d0:e7:3e:b8:6e:
                    b2:f7:61:d2:8e:8e:bf:33:86:dc:8d:39:f2:c3:89:
                    b5:44:5a:46:7c:e8:96:96:6a:5d:20:d2:88:b9:71:
                    b0:56:03:2a:c4:a6:8f:01:3b:b9:34:66:4e:d5:42:
                    54:5f:be:f3:80:c5:ec:23:97:07:fe:bf:c0:27:17:
                    a3:78:33:45:a8:d2:d5:f3:12:c5:d7:7d:2c:4a:3d:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:AD:7B:5C:2D:71:E1:2A:B5:76:37:0F:FA:F6:7C:DD:4F:09:B7
            X509v3 Authority Key Identifier:
                keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:0e:df:c7:49:ef:db:a4:61:30:04:83:1d:bb:35:a3:c0:
         6f:0e:47:01:f7:3c:a6:84:f3:44:24:51:02:46:b8:39:b7:54:
         f7:5a:7b:55:ca:20:9b:bc:20:0a:33:7a:ad:62:f8:f8:af:53:
         a5:88:8c:6f:1f:27:ea:f5:92:18:29:08:7e:ea:7e:07:65:bd:
         5b:ec:24:3a:62:6d:9a:ce:5b:a1:83:f1:69:9d:56:98:76:90:
         ee:69:d4:23:dd:fe:11:85:c3:75:55:03:8c:0b:07:22:8f:5a:
         06:a4:a1:b3:48:3c:81:b6:b9:97:20:49:68:1c:10:10:dd:02:
         fa:a3:e1:5e:12:24:3e:a7:b4:60:0a:0d:83:62:de:91:28:b5:
         48:43:28:5b:9c:b0:12:b7:fd:99:c3:6d:17:74:0f:9f:6c:ef:
         b8:00:eb:a9:71:f3:99:c6:c2:a1:32:0b:c9:01:e2:75:11:68:
         17:9a:5a:ec:c5:eb:8f:2e:e3:ef:65:87:d1:c6:c9:cb:92:b1:
         de:fe:84:aa:24:72:99:ac:8c:ce:98:d2:d4:7d:47:d7:ce:e7:
         9b:63:66:79:c0:2f:27:ac:22:d4:ce:ed:43:2d:b6:48:bf:96:
         37:75:2e:68:7d:61:5b:f6:2a:68:a9:37:15:30:db:d2:de:e6:
         58:fe:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:17:30 2026 by rpki-client