Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
File:                     oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft (raw, json)
Hash identifier:          gCIz2nibmiFqjeXZOF0oSYPRQSPsYDaBMVmTLe5GURc=
Subject key identifier:   C4:62:B9:BB:DB:E5:F1:C4:12:1C:CE:9E:C6:6C:67:21:0B:1B:55:C9
Authority key identifier: A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02
Certificate issuer:       /CN=A91A4ED0/serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
Certificate serial:       0BA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
Manifest number:          0B96
Signing time:             Mon 28 Sep 2026 19:14:33 +0000
Manifest this update:     Mon 28 Sep 2026 19:14:32 +0000
Manifest next update:     Mon 05 Oct 2026 19:14:32 +0000
Files and hashes:         1: oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl (hash: N0IQqnu5Ml9fsgnk6/qxShiqX0q70hxpzOze0rgUIZQ=)
                          2: 52F59E403B4111ECABFD2186C4F9AE02.roa (hash: RQ9oUS0oQbbXxdZ70QI7FGuHbVBiYm8ftlMbEKia248=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl
                          rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 19:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2980 (0xba4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4ED0, serialNumber=A09CA2D31B16BFA584A758C3A7D51FACD2151B02
        Validity
            Not Before: Sep 28 19:14:32 2026 GMT
            Not After : Oct  5 19:14:32 2026 GMT
        Subject: CN=6ababc99-ee45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:f6:bb:a1:d5:8d:bc:a2:64:7e:0c:48:be:
                    e0:af:ba:7c:2b:73:21:74:d0:6b:fc:e1:10:de:7a:
                    50:b7:a3:1c:07:e7:e5:e5:9d:4d:b1:e1:06:9c:0e:
                    b3:86:34:34:dd:ce:8c:70:e3:a2:e5:fa:b7:fc:18:
                    07:e5:40:87:f2:82:81:6c:e1:cd:cc:11:fa:40:03:
                    c1:1f:97:f7:c9:c5:54:1d:a5:c0:f8:68:f0:47:ca:
                    fb:2e:65:3c:a2:8a:b5:4d:5b:4b:76:21:87:14:21:
                    b3:8e:8f:d9:dc:97:ac:26:9a:07:76:3c:a9:26:30:
                    12:04:3f:f1:cb:aa:2b:b9:27:b0:31:d0:55:ba:2a:
                    94:b7:23:75:24:2b:a6:f3:d0:cc:69:32:17:fe:f7:
                    ce:09:a2:f9:71:35:78:64:13:23:5c:e1:f4:ea:7a:
                    f2:dc:50:b5:07:ce:a9:3f:7d:ae:d3:9b:a7:ea:1d:
                    12:9a:46:5a:c7:58:40:4e:e7:dd:04:b7:f3:cb:74:
                    5d:0c:6d:18:aa:ea:14:f1:cd:65:ab:80:6e:de:c9:
                    dd:c1:d1:0c:9d:d4:3a:7d:66:2b:29:9e:a8:59:ab:
                    b5:b3:6a:3c:4a:a6:61:e7:0f:df:65:62:e8:a4:0c:
                    98:dc:86:b8:06:c7:96:1b:5e:3d:a9:44:44:2c:e1:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:62:B9:BB:DB:E5:F1:C4:12:1C:CE:9E:C6:6C:67:21:0B:1B:55:C9
            X509v3 Authority Key Identifier:
                keyid:A0:9C:A2:D3:1B:16:BF:A5:84:A7:58:C3:A7:D5:1F:AC:D2:15:1B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJyi0xsWv6WEp1jDp9UfrNIVGwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ED0/92B3CD5A58CF11EA85E8594DC4F9AE02/oJyi0xsWv6WEp1jDp9UfrNIVGwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:53:41:9f:b0:01:9b:94:2d:48:56:ac:5b:31:c8:a5:82:76:
         29:25:63:60:05:67:23:01:cf:70:7d:00:73:a0:67:cf:3b:4e:
         c9:3e:85:73:fc:3f:c2:24:68:1f:ec:4a:2c:98:e8:b9:4c:5c:
         bd:2c:d1:42:76:59:76:c2:63:9d:18:39:d8:4f:a1:67:81:ab:
         15:96:ab:67:78:64:5a:9a:0f:56:b6:43:ec:2f:7f:32:d9:3a:
         21:97:d4:fa:6a:13:63:26:dd:f4:6f:54:9c:32:be:35:86:3a:
         4b:93:ff:12:f4:7b:38:e1:da:1e:51:92:d7:0a:c5:5b:38:33:
         c6:56:26:f3:a6:e0:ce:ab:0f:1f:fc:07:7c:11:11:cd:fd:95:
         35:74:2d:21:f0:cb:d6:ac:e9:f5:1f:04:c1:af:e3:c7:83:c8:
         42:50:7d:47:43:97:1b:71:fa:de:9b:67:18:3c:16:a2:83:cf:
         63:dd:a1:82:fc:4e:92:17:54:32:f8:55:4e:a3:ce:28:37:7b:
         65:2f:b3:fe:17:93:3a:a6:e7:55:aa:8c:46:26:5d:de:07:29:
         7c:fa:ce:6a:3c:76:74:ec:25:4b:a7:6a:e1:e6:91:c3:80:9d:
         53:86:ed:10:0a:fd:d9:bf:38:05:16:5a:69:13:51:95:ce:16:
         e3:55:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:59:09 2026 by rpki-client