Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
File:                     oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft (raw, json)
Hash identifier:          Q1tHdQoXgR5SaMlDNVOlmUxekmm/cXpoSZioB46hdzk=
Subject key identifier:   19:00:EB:34:62:81:36:CE:73:21:E3:29:07:55:91:56:C3:01:DA:06
Authority key identifier: A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3
Certificate issuer:       /CN=A91AE954/serialNumber=A028277C970847D3D8C68F8B7468F3F26C72FEF3
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
Manifest number:          0B
Signing time:             Fri 25 Sep 2026 01:42:55 +0000
Manifest this update:     Fri 25 Sep 2026 01:42:54 +0000
Manifest next update:     Fri 02 Oct 2026 01:42:54 +0000
Files and hashes:         1: oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl (hash: FezJjvZ5qqE+XSvfyCyslqoYbx+EHpa5igpSTLPE9uM=)
                          2: A756B364B0D211F187A0B2C76D11F970.roa (hash: FxNMhwtcR3oWuqNSjH9QDsn5zkl0d7S0gjylTihtbM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE954, serialNumber=A028277C970847D3D8C68F8B7468F3F26C72FEF3
        Validity
            Not Before: Sep 25 01:42:54 2026 GMT
            Not After : Oct  2 01:42:54 2026 GMT
        Subject: CN=6ab5d19f-ca01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4c:4c:29:23:1a:2e:6a:0f:cb:79:0f:48:fc:
                    eb:29:85:12:7d:1a:56:68:4f:90:33:5e:b0:63:8d:
                    a2:70:1a:36:01:f6:57:89:e4:61:72:05:20:55:5f:
                    95:c1:08:d1:a3:ff:3b:6d:ef:95:9d:0e:8b:63:c7:
                    db:ed:d7:f6:6c:4f:e8:cc:51:81:27:bd:ed:12:9f:
                    08:9d:73:00:ea:ae:13:68:a0:d7:0e:d6:d4:e5:dd:
                    75:de:ac:43:7c:20:b9:d6:f6:d3:d8:59:a9:b8:41:
                    0f:66:ee:9d:91:4e:d2:9f:19:56:d3:62:b4:32:48:
                    13:66:57:57:5c:13:05:49:8b:77:84:41:28:66:9d:
                    cc:33:d6:c7:d9:c2:ec:a0:e7:7e:eb:18:7b:58:5c:
                    a7:24:a4:61:b2:cd:f8:cb:32:a3:b1:9c:b7:da:37:
                    0f:5d:02:d9:1f:28:43:0b:71:57:d8:bf:45:9a:94:
                    5b:66:39:9a:d7:3b:54:e9:34:00:52:5b:20:3c:c0:
                    40:26:a7:16:5b:93:d4:64:a9:43:6e:26:96:e5:60:
                    e3:bf:1b:44:ed:70:47:16:6e:75:2b:71:c3:cd:c6:
                    02:1f:6e:c3:a0:16:70:ef:3b:03:b3:8d:29:06:3b:
                    e3:ed:72:0d:50:63:5c:ca:11:65:42:59:60:2b:95:
                    1c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:00:EB:34:62:81:36:CE:73:21:E3:29:07:55:91:56:C3:01:DA:06
            X509v3 Authority Key Identifier:
                keyid:A0:28:27:7C:97:08:47:D3:D8:C6:8F:8B:74:68:F3:F2:6C:72:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/oCgnfJcIR9PYxo-LdGjz8mxy_vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE954/9AECC352B0AA11F1B92223C9A7EE528E/oCgnfJcIR9PYxo-LdGjz8mxy_vM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b0:a3:75:15:98:a9:50:cb:ca:91:73:c8:56:46:c8:1b:9e:
         f1:96:47:3d:13:87:82:3c:1b:36:a9:44:32:25:d2:95:31:38:
         a8:1a:6e:ff:83:9b:5c:45:df:18:cf:6d:fb:cd:72:66:21:23:
         b0:71:d2:d6:e2:01:b9:68:70:04:1c:61:9d:9b:84:c9:76:c4:
         5e:c3:22:9e:94:79:66:56:5b:ca:25:40:4d:45:dc:be:0b:61:
         24:5b:3e:e1:28:04:ec:b4:8d:58:42:da:29:8b:34:0d:c7:e7:
         63:ab:87:02:a6:5a:a6:42:ae:0d:a9:af:c7:43:db:e7:9d:34:
         07:0b:ce:6b:a4:db:3c:0e:91:82:cf:4d:45:c4:86:79:26:fa:
         54:c0:44:ae:6e:d6:e1:eb:9b:7c:15:ef:69:fe:eb:21:4b:03:
         0d:d8:ec:e5:eb:3d:cb:77:bd:a3:11:57:37:9e:48:54:48:37:
         33:ee:3a:22:ab:02:46:ae:42:52:a2:a7:fe:26:3e:37:25:10:
         47:c0:2d:15:3b:8b:3b:9c:7b:42:23:8d:c8:4c:51:19:7a:db:
         e6:25:34:ab:14:c3:c7:ba:50:3f:d5:21:20:4a:59:43:50:17:
         f5:69:ba:bc:84:d5:ba:b6:49:85:40:0e:05:93:64:a5:e3:68:
         b9:97:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:37:34 2026 by rpki-client