Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File:                     1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier:          UJofoKdw2QAMKML501/YGCI4SZN+MnxghJ61GjCW4fo=
Subject key identifier:   15:61:37:78:F7:3F:07:90:F8:AF:FE:B8:70:00:50:A6:BC:23:F2:7B
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer:       /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial:       10AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number:          10A0
Signing time:             Tue 22 Sep 2026 17:16:31 +0000
Manifest this update:     Tue 22 Sep 2026 17:16:30 +0000
Manifest next update:     Tue 29 Sep 2026 17:16:30 +0000
Files and hashes:         1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: Hs3OZauxu5opMjoYop+U2/TgmdRWEDXol2WD3EiyzfI=)
                          2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: cNOGWjX3tS0QYF3+Hr85nxbmOcjy7rNxMm+ayP/uy9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4267 (0x10ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
        Validity
            Not Before: Sep 22 17:16:30 2026 GMT
            Not After : Sep 29 17:16:30 2026 GMT
        Subject: CN=6ab2b7ef-aa72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ea:cb:06:c9:24:1d:50:6d:71:4d:f8:3f:b7:
                    a3:b0:6e:66:27:15:06:b2:97:70:ed:be:24:93:7c:
                    07:23:05:40:ce:27:d7:6a:66:7f:53:a9:dd:2d:d3:
                    40:91:88:d8:bd:6d:cf:5b:cd:2c:8d:11:1f:84:ed:
                    e5:34:0d:2c:3b:14:51:1b:c9:1c:41:2e:0c:72:25:
                    47:97:71:62:a6:d4:35:3c:cd:33:68:39:4b:91:1a:
                    2a:91:04:6d:61:9f:cc:80:4b:a8:e6:44:6f:2e:30:
                    13:84:7e:1c:16:c0:c5:e0:a3:66:e0:2e:07:56:85:
                    f9:12:e6:3a:dd:15:3c:d8:9d:19:cb:84:6b:d8:09:
                    73:20:94:fa:f6:6d:14:37:63:13:91:d5:34:d9:f3:
                    ac:88:f5:3d:71:01:2d:69:6d:02:61:be:f8:e4:64:
                    e4:55:88:bc:bc:f0:57:a0:4d:27:56:ee:24:f8:4d:
                    78:1f:f6:54:bd:67:a4:f9:c0:e8:49:4f:89:56:ec:
                    b5:53:5f:bd:0d:fe:45:fa:92:79:a9:07:d3:4a:65:
                    7e:31:af:06:c7:fa:d7:e0:3d:5d:b6:df:a6:48:64:
                    ad:aa:80:6a:f3:e6:06:6c:3c:37:fe:ca:22:56:68:
                    ca:a2:86:fb:d8:89:b0:cf:38:e9:8e:30:06:a1:4f:
                    35:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:61:37:78:F7:3F:07:90:F8:AF:FE:B8:70:00:50:A6:BC:23:F2:7B
            X509v3 Authority Key Identifier:
                keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:12:6d:e0:70:2d:cc:f5:a2:50:9e:33:a0:1b:25:99:ac:33:
         4e:83:cf:a5:94:3d:f5:84:0b:a1:b7:65:51:24:5e:c4:30:89:
         b7:fc:ed:02:94:63:ea:e3:61:60:91:e8:8a:6b:e0:2f:cf:41:
         5d:8a:ef:22:2e:63:c6:47:fa:d1:a5:a0:36:83:12:ac:5d:12:
         09:67:7c:eb:3e:95:78:3c:31:bb:91:fd:26:ba:4d:94:57:d5:
         f7:23:57:e8:31:0d:92:ce:0f:f4:e6:19:61:ee:fb:83:b5:de:
         02:e0:90:c9:94:59:ec:fc:8d:d3:18:c7:be:fc:44:cb:ea:26:
         b7:86:63:88:0b:63:3c:ad:9a:ff:15:86:7a:94:08:69:0d:aa:
         90:cf:9b:13:65:8c:20:f6:81:a5:c3:0c:3f:b9:af:64:f5:21:
         a8:8c:b9:13:24:85:c5:d1:07:fb:4a:06:03:c6:96:e4:b8:21:
         f0:8f:19:f1:22:b9:40:45:6d:31:bd:6a:bc:d6:fe:4e:3d:9e:
         c9:9e:28:d1:97:81:b0:d9:79:04:4f:c1:95:29:34:30:e9:ed:
         3c:e2:2a:39:28:e4:b9:a3:10:e5:1f:ec:8c:64:66:0c:99:49:
         a9:b4:02:0c:0d:8b:0c:b9:f9:5c:52:c4:ca:51:ed:eb:75:d0:
         f8:02:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:50:00 2026 by rpki-client